This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jVdu0oonfliyPcAiWVHJyH9yxlc.cer File: jVdu0oonfliyPcAiWVHJyH9yxlc.cer (raw, json) Hash identifier: IACrD/uVCa81qH0KUe5ZzFTzJm2WdFjpQYZ4fyvur7s= Subject key identifier: 8D:57:6E:D2:8A:27:7E:58:B2:3D:C0:22:59:51:C9:C8:7F:72:C6:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9AE0C1B7DB4FE3F6FB0C63F6F0726C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:04:49 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203742 IP: 185.125.132.0/22 IP: 2a06:bb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:ae:0c:1b:7d:b4:fe:3f:6f:b0:c6:3f:6f:07:26:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d576ed28a277e58b23dc0225951c9c87f72c657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d1:87:ab:5b:08:bd:96:0f:d1:75:4e:d6:97: 4e:9c:b6:fd:16:71:74:b6:33:be:fc:57:3b:5a:24: eb:38:47:a7:06:3b:36:77:23:31:05:44:38:91:80: 80:ff:d9:bd:08:9f:a8:f3:79:83:df:da:81:eb:b6: 10:df:62:0a:bf:51:89:65:30:0f:28:b4:f2:82:98: db:82:e4:bc:0f:ed:15:26:e9:88:70:c9:f7:a3:8c: b9:7b:92:c1:47:c1:ae:40:d8:6f:73:3a:b9:a0:12: e5:63:64:0e:37:2c:1b:b8:c1:3d:f2:5b:f7:22:8f: b1:98:45:da:0e:5e:5c:ee:57:f4:1b:60:68:11:8b: fe:43:5f:49:30:74:80:b4:e8:86:54:f2:58:e4:95: 84:c4:8e:5d:fb:ae:53:b8:a8:26:41:65:56:74:9c: d1:37:e3:a6:0c:22:0f:43:47:c7:23:72:c5:dc:24: 55:41:86:21:c7:9d:f8:af:48:aa:85:b2:1b:6f:56: 58:d7:d9:d0:76:89:ea:40:7b:c5:b1:6f:b5:3c:fa: d2:ae:9a:34:0d:bc:8d:2d:f1:b7:47:73:84:51:1c: 19:ed:6e:80:79:9b:de:d4:1f:19:c3:1e:51:5d:d3: dc:62:a7:e1:f0:cf:fd:8b:71:71:44:a1:d9:d7:f8: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:57:6E:D2:8A:27:7E:58:B2:3D:C0:22:59:51:C9:C8:7F:72:C6:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.132.0/22 IPv6: 2a06:bb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203742 Signature Algorithm: sha256WithRSAEncryption 7a:d5:e2:13:17:4e:6f:3a:5f:2a:8c:a2:26:f5:7d:0a:96:94: 9f:db:55:eb:f9:77:fe:6a:28:3a:b3:5d:65:a9:4a:79:6f:b3: 27:df:54:9d:df:db:47:bd:61:05:5a:c7:d3:8b:f2:54:9d:5b: 77:d9:42:d3:e8:5a:3b:8f:97:ff:06:33:a9:e5:a0:23:e8:71: cf:ec:9f:a9:00:a8:9f:a9:14:50:82:19:f6:6a:fe:95:22:da: 04:86:dd:d8:60:f5:38:bb:83:ee:bc:bd:82:63:68:e4:14:a0: 7c:72:be:1c:ed:4b:bc:88:95:72:15:da:33:79:a5:0f:69:68: 4b:94:05:11:e2:97:79:a9:4d:62:ff:8c:ca:73:ba:ed:e5:3a: b8:2d:df:c2:cf:68:dc:8c:d0:51:15:15:47:95:ae:bc:b9:e7: 78:22:d2:e5:57:97:6d:ec:21:19:b3:4b:0f:40:72:02:11:97: f8:5b:d2:3c:8d:18:eb:39:9d:ba:66:aa:ef:08:fa:8e:aa:3c: c0:02:4d:c7:96:97:93:54:29:a5:ff:ed:ac:82:3d:40:4a:8d: 19:51:8e:08:04:2a:07:68:7e:48:45:1c:dd:d1:96:a3:28:bd: 3e:fa:d0:b4:6b:92:1b:00:46:4f:06:b9:35:35:23:6c:92:ff: 70:86:b1:1a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrprgwbfbT+P2+wxj9vBybDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDU3NmVkMjhhMjc3ZTU4YjIzZGMwMjI1OTUxYzljODdmNzJjNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktGHq1sIvZYP0XVO1pdOnLb9FnF0 tjO+/Fc7WiTrOEenBjs2dyMxBUQ4kYCA/9m9CJ+o83mD39qB67YQ32IKv1GJZTAP KLTygpjbguS8D+0VJumIcMn3o4y5e5LBR8GuQNhvczq5oBLlY2QONywbuME98lv3 Io+xmEXaDl5c7lf0G2BoEYv+Q19JMHSAtOiGVPJY5JWExI5d+65TuKgmQWVWdJzR N+OmDCIPQ0fHI3LF3CRVQYYhx534r0iqhbIbb1ZY19nQdonqQHvFsW+1PPrSrpo0 DbyNLfG3R3OEURwZ7W6AeZve1B8Zwx5RXdPcYqfh8M/9i3FxRKHZ1/gpQQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI1XbtKKJ35Ysj3AIllRych/csZXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2UwOTg0 Zi0xYWFkLTQ2ZTQtODU3Zi1lNDM1NzZhZGQ2ZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZTA5ODRm LTFhYWQtNDZlNC04NTdmLWU0MzU3NmFkZDZmYi8xL2pWZHUwb29uZmxpeVBjQWlX VkhKeUg5eXhsYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX2EMA0EAgACMAcDBQMqBrsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb3jANBgkqhkiG9w0BAQsFAAOCAQEAetXiExdObzpf KoyiJvV9CpaUn9tV6/l3/mooOrNdZalKeW+zJ99Und/bR71hBVrH04vyVJ1bd9lC 0+haO4+X/wYzqeWgI+hxz+yfqQCon6kUUIIZ9mr+lSLaBIbd2GD1OLuD7ry9gmNo 5BSgfHK+HO1LvIiVchXaM3mlD2loS5QFEeKXealNYv+MynO67eU6uC3fws9o3IzQ URUVR5WuvLnneCLS5VeXbewhGbNLD0ByAhGX+FvSPI0Y6zmdumaq7wj6jqo8wAJN x5aXk1Qppf/trII9QEqNGVGOCAQqB2h+SEUc3dGWoyi9PvrQtGuSGwBGTwa5NTUj bJL/cIaxGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:46 2025 by rpki-client