This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer (raw, json) Hash identifier: dUyls0qbGW7YNj2cmLILoyLJeYJhkVP++OAOmdLLwkQ= Subject key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A4E82E3F83298B4374397E1E95EC7ABA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 04 Nov 2025 10:56:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59877 AS: 202582 AS: 203797 IP: 31.223.190.0/24 IP: 62.68.65.0/24 IP: 91.212.33.0/24 IP: 185.61.176.0/22 IP: 185.123.72.0/22 IP: 185.160.52.0/22 IP: 193.39.0.0/22 IP: 193.56.146.0/24 IP: 217.197.108.0/24 IP: 2a02:7b20::/32 IP: 2a03:9260::/32 IP: 2a0f:7240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:82:e3:f8:32:98:b4:37:43:97:e1:e9:5e:c7:ab:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 4 10:56:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:06:e3:57:09:e3:29:7c:1a:01:74:2f:67: c7:74:78:58:e3:9e:f9:26:78:7c:98:bf:be:0d:b3: b1:68:d6:c3:10:35:f4:34:b2:1c:13:11:dd:a9:17: 54:c8:2e:82:35:e7:5f:56:68:75:a0:d3:b0:23:e9: 91:4d:b3:77:63:d1:19:5b:08:ed:15:23:49:9c:77: e9:65:48:26:45:5d:69:b5:6d:68:3a:92:c9:56:19: 10:2e:01:35:d8:0a:13:a1:f7:2d:a0:e2:3a:e7:e4: 74:d4:3c:05:42:78:bf:ee:cb:73:7f:5d:3c:1d:55: 56:47:0a:9e:5a:29:21:2f:b5:0e:b7:44:6d:89:c1: bb:9c:8b:58:da:7f:52:9d:5b:1f:15:68:0e:f0:26: 92:bd:c1:ac:84:85:32:db:09:ee:19:2e:03:10:b1: 86:31:d4:5d:dc:e5:ec:96:c7:b9:26:32:5a:ff:a0: 18:c9:61:ec:b8:cb:e5:6e:fc:12:8c:ec:5c:8b:b3: f6:8a:2f:7d:46:22:86:13:0a:bf:4e:b7:16:e3:68: 4f:df:85:ee:07:c4:ed:fc:84:59:55:39:fb:bf:3b: cc:44:05:60:69:a0:e3:b2:16:46:ac:ad:c9:da:19: 4a:91:fc:ea:80:ff:12:34:5a:76:b0:ec:93:e2:d9: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.190.0/24 62.68.65.0/24 91.212.33.0/24 185.61.176.0/22 185.123.72.0/22 185.160.52.0/22 193.39.0.0/22 193.56.146.0/24 217.197.108.0/24 IPv6: 2a02:7b20::/32 2a03:9260::/32 2a0f:7240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59877 202582 203797 Signature Algorithm: sha256WithRSAEncryption 44:2f:16:e9:d4:41:5e:a8:8b:53:95:04:8a:94:bb:a4:ad:18: 64:a7:fd:b7:3d:53:1c:42:04:93:78:c4:7b:57:73:c3:50:c0: 32:4b:c6:12:fb:83:64:f6:09:45:5c:29:6e:b8:cd:94:0d:da: 28:ad:f5:30:2b:f1:e7:0c:b6:6e:45:d5:16:10:50:67:5d:58: 3b:c2:5a:47:90:ac:3a:c1:6f:45:b4:7e:bd:97:2c:6f:10:2d: f8:30:a0:d9:67:c2:37:ed:dd:85:27:34:9e:c1:b4:c5:be:7a: 48:dc:cb:dd:e0:0a:0a:bc:05:b6:7e:4c:99:84:6d:f0:86:a4: be:23:ed:e2:1b:9b:8a:04:97:90:ad:2d:45:67:71:a1:9d:d6: 35:3a:ca:2e:4b:fe:40:35:e8:e6:a8:de:fd:85:ee:87:14:2d: 19:be:b4:1d:85:cc:aa:c8:47:5e:28:e3:ac:f3:e5:ce:5d:4c: 0e:6b:b2:8a:5a:0d:88:83:f9:2b:0f:2f:1e:6f:12:32:dc:69: 4d:f9:20:f7:d9:a5:20:57:78:6f:c4:66:30:ec:07:94:a3:f8: cc:83:c6:62:84:e0:f6:a3:c4:73:50:16:dd:4c:80:e3:b6:4b: 27:d5:c4:ba:b5:5e:58:e1:a9:d0:06:9b:ad:3f:70:86:dc:70: 56:63:74:2a -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZpOguP4Mpi0N0OX4elex6ulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA0MTA1NjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzMyYTZlNTdlYzgxY2M1Y2I0M2JiNTAzNzQ5YjM2MGYyYjA1YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sIG41cJ4yl8GgF0L2fHdHhY4575 Jnh8mL++DbOxaNbDEDX0NLIcExHdqRdUyC6CNedfVmh1oNOwI+mRTbN3Y9EZWwjt FSNJnHfpZUgmRV1ptW1oOpLJVhkQLgE12AoTofctoOI65+R01DwFQni/7stzf108 HVVWRwqeWikhL7UOt0RticG7nItY2n9SnVsfFWgO8CaSvcGshIUy2wnuGS4DELGG MdRd3OXslse5JjJa/6AYyWHsuMvlbvwSjOxci7P2ii99RiKGEwq/TrcW42hP34Xu B8Tt/IRZVTn7vzvMRAVgaaDjshZGrK3J2hlKkfzqgP8SNFp2sOyT4tnw6wIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFIwypuV+yBzFy0O7UDdJs2DysFw7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzZlMGNm YS0yMDVlLTRkNjYtYWUzYS1jNzQzZDdjMGJiMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNmUwY2Zh LTIwNWUtNGQ2Ni1hZTNhLWM3NDNkN2MwYmIyMi8xL2pES201WDdJSE1YTFE3dFFO MG16WVBLd1hEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzA8BAIAATA2AwQAH9++AwQAPkRBAwQAW9QhAwQCuT2wAwQCuXtI AwQCuaA0AwQCwScAAwQAwTiSAwQA2cVsMBsEAgACMBUDBQAqAnsgAwUAKgOSYAMF AyoPckAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAOnlAgMDF1YCAwMcFTANBgkq hkiG9w0BAQsFAAOCAQEARC8W6dRBXqiLU5UEipS7pK0YZKf9tz1THEIEk3jEe1dz w1DAMkvGEvuDZPYJRVwpbrjNlA3aKK31MCvx5wy2bkXVFhBQZ11YO8JaR5CsOsFv RbR+vZcsbxAt+DCg2WfCN+3dhSc0nsG0xb56SNzL3eAKCrwFtn5MmYRt8IakviPt 4hubigSXkK0tRWdxoZ3WNTrKLkv+QDXo5qje/YXuhxQtGb60HYXMqshHXijjrPPl zl1MDmuyiloNiIP5Kw8vHm8SMtxpTfkg99mlIFd4b8RmMOwHlKP4zIPGYoTg9qPE c1AW3UyA47ZLJ9XEurVeWOGp0AabrT9whtxwVmN0Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:04 2025 by rpki-client