This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer File: e5RH_ppKzH1v9y1seY1D1mzVDD8.cer (raw, json) Hash identifier: c0EWE43FOQx3s7jK2Jpc8USfchoxY/61tA/2XLZbRqc= Subject key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7318539CB544148FCB295A6E77F487B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 13:26:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2a09:3700::/29 IP: 2a09:6800::/29 IP: 2a09:6900::/29 IP: 2a09:7e00::/29 IP: 2a09:8b80::/29 IP: 2a09:9300::/29 IP: 2a09:ba40::/29 IP: 2a09:da40::/29 IP: 2a0a:bbc0::/29 IP: 2a0b:7a80::/29 IP: 2a0b:9480::/29 IP: 2a0c:ac0::/29 IP: 2a0c:1240::/29 IP: 2a0c:2840::/29 IP: 2a0d:3040::/29 IP: 2a0d:48c0::/29 IP: 2a0d:adc0::/29 IP: 2a0d:b9c0::/29 IP: 2a0d:f640::/29 IP: 2a0e:f00::/29 IP: 2a0e:13c0::/29 IP: 2a0e:4340::/29 IP: 2a0e:4580::/29 IP: 2a0e:6740::/29 IP: 2a0e:67c0::/29 IP: 2a0e:7040::/29 IP: 2a0e:8540::/29 IP: 2a0e:8840::/29 IP: 2a0e:9180::/29 IP: 2a0e:c440::/29 IP: 2a0e:dfc0::/29 IP: 2a0f:c00::/29 IP: 2a0f:4300::/29 IP: 2a0f:72c0::/29 IP: 2a0f:bb00::/29 IP: 2a0f:da80::/29 IP: 2a11:640::/29 IP: 2a11:1340::/29 IP: 2a11:1380::/29 IP: 2a11:15c0::/29 IP: 2a11:1840::/29 IP: 2a11:21c0::/29 IP: 2a11:2c40::/29 IP: 2a11:2d80::/29 IP: 2a11:3080::/29 IP: 2a11:3180::/29 IP: 2a11:31c0::/29 IP: 2a11:34c0::/29 IP: 2a11:35c0::/29 IP: 2a11:3d00::/29 IP: 2a11:3f00::/29 IP: 2a11:41c0::/29 IP: 2a11:4340::/29 IP: 2a11:4a00::/29 IP: 2a11:5a40::/29 IP: 2a11:6340::/29 IP: 2a11:66c0::/29 IP: 2a11:7080::/29 IP: 2a11:7880::/29 IP: 2a11:8500::/29 IP: 2a11:9880::/29 IP: 2a11:b680::/29 IP: 2a11:d380::/29 IP: 2a11:d700::/29 IP: 2a12:1240::/29 IP: 2a12:1540::/29 IP: 2a12:1a40::/29 IP: 2a12:24c0::/29 IP: 2a12:2740::/29 IP: 2a12:2cc0::/29 IP: 2a12:2e40::/29 IP: 2a12:3140::/29 IP: 2a12:35c0::/29 IP: 2a12:3740::/29 IP: 2a12:3bc0::/29 IP: 2a12:3cc0::/29 IP: 2a12:4140::/29 IP: 2a12:41c0::/29 IP: 2a12:46c0::/29 IP: 2a12:7300::/29 IP: 2a12:9500::/29 IP: 2a12:cc00::/29 IP: 2a14:9700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:18:53:9c:b5:44:14:8f:cb:29:5a:6e:77:f4:87:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 13:26:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:cd:57:02:4f:a7:02:89:54:00:f2:9a:65: 09:d0:c4:56:ff:60:1b:32:4b:65:cc:de:3e:f4:0d: b7:b9:cd:a6:8d:74:a2:ba:a0:23:c3:07:ba:50:38: 21:b1:02:8a:a2:b7:d0:3b:75:ef:76:cc:f6:a9:74: 9a:cc:ea:d5:00:b5:7a:ff:ee:1c:44:54:06:02:76: 8a:0d:bb:45:b9:29:96:38:2f:42:1f:f9:0a:e6:7a: f3:af:2a:b7:8e:94:74:fc:73:09:cf:0b:22:26:f1: 8a:bc:db:60:d7:f9:25:9d:5f:95:bf:c5:c4:f8:1d: c9:5e:c0:f8:f2:39:c4:51:e1:21:2a:00:4d:c6:63: 17:15:30:df:3d:9e:5c:e3:8b:95:12:b4:d4:6f:9a: 24:a5:bf:2d:1d:0b:99:8e:da:70:cc:fe:e2:7c:a1: e2:51:5e:c3:63:c2:12:ab:f9:5c:8a:a1:7a:8a:66: c3:58:6f:ce:1f:27:31:b5:51:76:3b:cf:d0:f0:16: ee:80:78:ec:70:62:4d:d8:30:48:f6:2e:30:45:81: fd:5d:1d:2d:91:d0:bb:21:aa:49:cb:e2:84:bf:4c: b7:7e:c1:12:bc:e7:a0:6a:bb:cf:80:a4:f7:68:b4: 3f:f7:24:6a:c7:89:cb:4c:38:7a:45:76:84:ab:9b: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:3700::/29 2a09:6800::/29 2a09:6900::/29 2a09:7e00::/29 2a09:8b80::/29 2a09:9300::/29 2a09:ba40::/29 2a09:da40::/29 2a0a:bbc0::/29 2a0b:7a80::/29 2a0b:9480::/29 2a0c:ac0::/29 2a0c:1240::/29 2a0c:2840::/29 2a0d:3040::/29 2a0d:48c0::/29 2a0d:adc0::/29 2a0d:b9c0::/29 2a0d:f640::/29 2a0e:f00::/29 2a0e:13c0::/29 2a0e:4340::/29 2a0e:4580::/29 2a0e:6740::/29 2a0e:67c0::/29 2a0e:7040::/29 2a0e:8540::/29 2a0e:8840::/29 2a0e:9180::/29 2a0e:c440::/29 2a0e:dfc0::/29 2a0f:c00::/29 2a0f:4300::/29 2a0f:72c0::/29 2a0f:bb00::/29 2a0f:da80::/29 2a11:640::/29 2a11:1340::/29 2a11:1380::/29 2a11:15c0::/29 2a11:1840::/29 2a11:21c0::/29 2a11:2c40::/29 2a11:2d80::/29 2a11:3080::/29 2a11:3180::/29 2a11:31c0::/29 2a11:34c0::/29 2a11:35c0::/29 2a11:3d00::/29 2a11:3f00::/29 2a11:41c0::/29 2a11:4340::/29 2a11:4a00::/29 2a11:5a40::/29 2a11:6340::/29 2a11:66c0::/29 2a11:7080::/29 2a11:7880::/29 2a11:8500::/29 2a11:9880::/29 2a11:b680::/29 2a11:d380::/29 2a11:d700::/29 2a12:1240::/29 2a12:1540::/29 2a12:1a40::/29 2a12:24c0::/29 2a12:2740::/29 2a12:2cc0::/29 2a12:2e40::/29 2a12:3140::/29 2a12:35c0::/29 2a12:3740::/29 2a12:3bc0::/29 2a12:3cc0::/29 2a12:4140::/29 2a12:41c0::/29 2a12:46c0::/29 2a12:7300::/29 2a12:9500::/29 2a12:cc00::/29 2a14:9700::/29 Signature Algorithm: sha256WithRSAEncryption 32:9a:ad:39:90:8c:78:96:b4:bc:d9:01:eb:ca:fa:47:40:38: 5c:10:86:ea:c7:26:16:41:b3:f1:0b:87:59:bb:70:32:26:b6: ae:52:8b:97:89:b6:13:a6:a7:fe:bb:2d:55:bf:5a:6d:67:48: f2:5e:3b:cd:e2:ab:3a:53:98:a6:a4:10:db:42:97:19:2c:d7: df:09:e4:00:ce:bc:d0:6a:c0:c3:23:b5:09:a7:c9:1c:34:fe: a6:87:43:15:44:00:37:d9:3b:90:b1:a4:13:5f:bf:43:ec:c3: 00:99:bb:e5:cb:eb:0e:06:25:95:fe:23:73:8a:70:26:88:e3: 66:86:1e:37:ed:79:dd:f4:f5:40:41:12:ab:5f:ce:55:93:64: 54:80:0a:66:4e:76:21:fc:93:06:94:de:e4:62:30:8e:d5:2b: 16:7f:ec:6a:4b:b9:32:80:23:43:11:7b:c6:df:94:31:3d:ff: 0f:a0:a0:06:27:a9:e0:28:be:fd:c3:73:58:47:ae:fb:6d:d9: 96:e3:d4:a0:63:a9:12:dc:c3:73:38:bc:7f:86:3e:36:dc:54: 2b:bb:32:40:27:0a:71:48:2d:39:76:87:1f:44:e9:f4:e8:fb: 90:99:6e:70:10:44:92:e8:21:bd:31:de:47:a8:70:3e:34:1b: 72:1e:d2:df -----BEGIN CERTIFICATE----- MIIHwTCCBqmgAwIBAgISAZpzGFOctUQUj8spWm539Ie5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTMyNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjk0NDdmZTlhNGFjYzdkNmZmNzJkNmM3OThkNDNkNjZjZDUwYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVDNVwJPpwKJVADymmUJ0MRW/2Ab MktlzN4+9A23uc2mjXSiuqAjwwe6UDghsQKKorfQO3Xvdsz2qXSazOrVALV6/+4c RFQGAnaKDbtFuSmWOC9CH/kK5nrzryq3jpR0/HMJzwsiJvGKvNtg1/klnV+Vv8XE +B3JXsD48jnEUeEhKgBNxmMXFTDfPZ5c44uVErTUb5okpb8tHQuZjtpwzP7ifKHi UV7DY8ISq/lciqF6imbDWG/OHycxtVF2O8/Q8BbugHjscGJN2DBI9i4wRYH9XR0t kdC7IapJy+KEv0y3fsESvOegarvPgKT3aLQ/9yRqx4nLTDh6RXaEq5sEVQIDAQAB o4IEzTCCBMkwHQYDVR0OBBYEFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2FjMjRk Zi0wOWQ2LTQ0NTctOWQyZS05ZmNlYjQ1ZDZmZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYWMyNGRm LTA5ZDYtNDQ1Ny05ZDJlLTlmY2ViNDVkNmZkYi8xL2U1UkhfcHBLekgxdjl5MXNl WTFEMW16VkREOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICZgYIKwYB BQUHAQcBAf8EggJVMIICUTCCAk0EAgACMIICRQMFAyoJNwADBQMqCWgAAwUDKglp AAMFAyoJfgADBQMqCYuAAwUDKgmTAAMFAyoJukADBQMqCdpAAwUDKgq7wAMFAyoL eoADBQMqC5SAAwUDKgwKwAMFAyoMEkADBQMqDChAAwUDKg0wQAMFAyoNSMADBQMq Da3AAwUDKg25wAMFAyoN9kADBQMqDg8AAwUDKg4TwAMFAyoOQ0ADBQMqDkWAAwUD Kg5nQAMFAyoOZ8ADBQMqDnBAAwUDKg6FQAMFAyoOiEADBQMqDpGAAwUDKg7EQAMF AyoO38ADBQMqDwwAAwUDKg9DAAMFAyoPcsADBQMqD7sAAwUDKg/agAMFAyoRBkAD BQMqERNAAwUDKhETgAMFAyoRFcADBQMqERhAAwUDKhEhwAMFAyoRLEADBQMqES2A AwUDKhEwgAMFAyoRMYADBQMqETHAAwUDKhE0wAMFAyoRNcADBQMqET0AAwUDKhE/ AAMFAyoRQcADBQMqEUNAAwUDKhFKAAMFAyoRWkADBQMqEWNAAwUDKhFmwAMFAyoR cIADBQMqEXiAAwUDKhGFAAMFAyoRmIADBQMqEbaAAwUDKhHTgAMFAyoR1wADBQMq EhJAAwUDKhIVQAMFAyoSGkADBQMqEiTAAwUDKhInQAMFAyoSLMADBQMqEi5AAwUD KhIxQAMFAyoSNcADBQMqEjdAAwUDKhI7wAMFAyoSPMADBQMqEkFAAwUDKhJBwAMF AyoSRsADBQMqEnMAAwUDKhKVAAMFAyoSzAADBQMqFJcAMA0GCSqGSIb3DQEBCwUA A4IBAQAymq05kIx4lrS82QHryvpHQDhcEIbqxyYWQbPxC4dZu3AyJrauUouXibYT pqf+uy1Vv1ptZ0jyXjvN4qs6U5impBDbQpcZLNffCeQAzrzQasDDI7UJp8kcNP6m h0MVRAA32TuQsaQTX79D7MMAmbvly+sOBiWV/iNzinAmiONmhh437Xnd9PVAQRKr X85Vk2RUgApmTnYh/JMGlN7kYjCO1SsWf+xqS7kygCNDEXvG35QxPf8PoKAGJ6ng KL79w3NYR677bdmW49SgY6kS3MNzOLx/hj423FQruzJAJwpxSC05docfROn06PuQ mW5wEESS6CG9Md5HqHA+NBtyHtLf -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:15 2025 by rpki-client