This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer File: fZ9lKePCbtCMlfdP5j17Lush9XE.cer (raw, json) Hash identifier: Fl+KxG2FWK/bwBe638Wl27yIArbcN3H/Oj0Ox7qJbOw= Subject key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A91909BAE54735DC898DCCDD60F0742DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 11:26:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 91.208.59.0/24 IP: 141.98.208.0/24 IP: 185.5.129.0/24 IP: 185.221.60.0/24 IP: 194.26.132.0/24 IP: 194.99.64.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:90:9b:ae:54:73:5d:c8:98:dc:cd:d6:0f:07:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 11:26:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:66:b0:72:92:f7:fb:82:93:1e:16:2e:04: d1:23:cd:cc:95:15:2c:3e:36:46:85:bd:96:74:2d: c1:2e:96:84:12:50:b2:3e:b9:7a:db:86:ae:dd:4b: 1e:b8:40:36:a8:9a:fc:bd:c4:75:c6:c4:7e:39:bb: ba:7d:da:15:0f:2b:28:92:c9:9d:48:22:73:ad:f9: 96:74:62:e2:12:90:00:d9:a3:06:b2:85:a0:77:3a: 0f:1e:c2:5a:2c:9a:79:03:a9:45:81:91:05:13:0f: e1:03:bb:b2:cb:c9:ac:35:9a:9b:22:c3:99:d6:b4: 84:61:d4:d6:39:84:10:27:6c:db:bd:74:f0:e9:b3: b6:4a:d1:fd:c0:f4:5a:c7:3e:2c:7a:90:19:02:54: dc:c9:2e:cd:73:d7:50:33:51:1b:25:81:7d:48:f2: f5:4f:8a:24:7d:a0:7a:fd:2c:d7:f8:0c:c7:0d:44: 97:86:15:25:1e:9c:f7:b7:4c:9c:de:5c:cd:56:82: d2:28:4b:8e:81:b7:be:df:d2:3d:c2:ed:08:ac:19: 00:5f:c5:f0:7b:81:26:60:df:2f:42:33:9b:07:7f: b2:85:df:3f:c6:e4:9c:73:dd:5a:44:b6:a5:b6:cb: 9b:ea:73:fa:05:35:a9:98:6d:98:a1:98:4e:31:3a: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.59.0/24 141.98.208.0/24 185.5.129.0/24 185.221.60.0/24 194.26.132.0/24 194.99.64.0/24 Signature Algorithm: sha256WithRSAEncryption 03:0d:7c:a5:af:bc:41:28:a5:50:b7:e4:ba:e2:14:7d:dc:da: a9:aa:0d:f1:9c:2a:4d:48:0e:42:22:05:32:73:f1:9e:cf:c2: a5:8a:84:3b:8b:22:37:5c:79:41:d2:ac:6b:68:f2:b4:f8:77: cb:cb:b4:c0:aa:4f:f3:bf:a1:53:20:3b:e0:f6:24:44:f6:fc: 6f:54:55:52:8b:ed:fb:4a:7d:e7:09:61:ea:28:21:c0:22:e2: 86:2e:93:e1:4b:c8:ea:1b:b2:86:64:42:ec:71:93:32:11:e0: 5e:b8:66:4a:5b:e0:56:65:7f:d6:ac:e7:7c:89:45:10:c1:2a: 11:07:26:25:1e:b3:7d:2b:5b:6b:54:8f:c8:ab:2d:20:a5:85: ef:0d:00:48:f6:7c:8e:21:f0:55:9e:a1:29:52:5e:f8:31:e2: e7:28:a3:ac:4e:ed:4c:64:76:fc:5e:d3:c7:1a:6a:7c:db:67: 00:db:5a:f6:81:64:78:f6:80:4a:ae:a7:a9:0b:68:30:b6:0f: a6:de:c8:d1:72:a6:8a:2e:69:09:03:be:7d:82:18:0b:3e:f8: ee:23:5c:21:e7:e6:25:3d:2c:c5:73:c5:c0:8a:4b:10:a7:bb: 08:24:1c:0a:37:89:cb:e0:2e:cb:18:e2:53:17:32:ec:9b:b4: 08:a1:f4:1c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZqRkJuuVHNdyJjczdYPB0LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MTEyNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDlmNjUyOWUzYzI2ZWQwOGM5NWY3NGZlNjNkN2IyZWViMjFmNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QZmsHKS9/uCkx4WLgTRI83MlRUs PjZGhb2WdC3BLpaEElCyPrl624au3UseuEA2qJr8vcR1xsR+Obu6fdoVDysoksmd SCJzrfmWdGLiEpAA2aMGsoWgdzoPHsJaLJp5A6lFgZEFEw/hA7uyy8msNZqbIsOZ 1rSEYdTWOYQQJ2zbvXTw6bO2StH9wPRaxz4sepAZAlTcyS7Nc9dQM1EbJYF9SPL1 T4okfaB6/SzX+AzHDUSXhhUlHpz3t0yc3lzNVoLSKEuOgbe+39I9wu0IrBkAX8Xw e4EmYN8vQjObB3+yhd8/xuScc91aRLaltsub6nP6BTWpmG2YoZhOMTpybwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFH2fZSnjwm7QjJX3T+Y9ey7rIfVxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzI2N2I1 MS05YWRiLTQwMzgtYjI0Yy05MjYyNDBhYTVmMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMjY3YjUx LTlhZGItNDAzOC1iMjRjLTkyNjI0MGFhNWYwNS8xL2ZaOWxLZVBDYnRDTWxmZFA1 ajE3THVzaDlYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQAW9A7AwQAjWLQAwQAuQWBAwQAud08AwQAwhqE AwQAwmNAMA0GCSqGSIb3DQEBCwUAA4IBAQADDXylr7xBKKVQt+S64hR93Nqpqg3x nCpNSA5CIgUyc/Gez8KlioQ7iyI3XHlB0qxraPK0+HfLy7TAqk/zv6FTIDvg9iRE 9vxvVFVSi+37Sn3nCWHqKCHAIuKGLpPhS8jqG7KGZELscZMyEeBeuGZKW+BWZX/W rOd8iUUQwSoRByYlHrN9K1trVI/Iqy0gpYXvDQBI9nyOIfBVnqEpUl74MeLnKKOs Tu1MZHb8XtPHGmp822cA21r2gWR49oBKrqepC2gwtg+m3sjRcqaKLmkJA759ghgL PvjuI1wh5+YlPSzFc8XAiksQp7sIJBwKN4nL4C7LGOJTFzLsm7QIofQc -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:09 2025 by rpki-client