This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer File: kLihVGbD_x6RXXgKELC6qa1pSGA.cer (raw, json) Hash identifier: Co4Q9RFKRfSd4K5C12EVo1fpdmj6l6P3fJuvJ7siMQo= Subject key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0F3595F62298EAA37A9851459DB516B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 11:08:14 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15874 AS: 48224 AS: 59611 AS: 197979 IP: 37.130.0.0/18 IP: 46.174.232.0/21 IP: 91.231.24.0/22 IP: 91.245.80.0/21 IP: 185.237.56.0/22 IP: 195.20.200.0/23 IP: 2a0c:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:f3:59:5f:62:29:8e:aa:37:a9:85:14:59:db:51:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 11:08:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:36:ec:5f:c1:9d:20:31:ee:8a:b6:a9:e5: 2b:3b:c4:bb:fe:4f:78:5c:c7:69:55:20:5f:76:44: 04:e6:7c:38:fd:94:c1:6c:25:4d:cc:16:38:ef:a0: b5:b3:8c:f7:a4:ea:05:b3:90:f9:4c:94:60:f1:7d: 39:28:dd:db:33:e3:bf:8f:2d:9d:f0:73:fa:d7:09: e2:21:0a:ba:6c:65:73:c8:78:13:71:08:a4:28:58: d2:0d:2d:73:c8:45:09:80:e3:00:07:91:4c:f4:69: d4:90:1e:54:33:8c:f6:e6:27:b6:42:7f:ef:6e:33: de:74:52:1f:cd:75:78:49:6a:5a:13:35:f8:14:02: 8b:06:66:70:76:3d:d1:ee:7b:1c:7f:f8:0f:c7:f6: 65:15:cb:a0:35:ec:a2:9e:ed:dd:db:30:73:c9:66: ae:05:a4:9b:3d:ed:4f:cf:11:dd:99:bd:db:ed:d7: d5:79:c5:fa:e7:6d:92:ca:89:8c:1d:78:20:2e:ae: 8a:02:89:33:8f:dc:b2:af:e7:f3:83:77:5c:74:50: 3f:41:69:67:c7:bb:53:ce:36:3f:d2:32:68:bd:14: bb:5a:18:77:ea:4c:57:f1:aa:84:37:f1:50:ec:4d: dd:ac:a0:8e:1c:ee:be:a0:35:5d:c5:b6:63:e8:3e: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.0.0/18 46.174.232.0/21 91.231.24.0/22 91.245.80.0/21 185.237.56.0/22 195.20.200.0/23 IPv6: 2a0c:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15874 48224 59611 197979 Signature Algorithm: sha256WithRSAEncryption 0c:99:aa:06:f8:3d:19:06:07:bb:47:30:77:4b:5b:b6:f2:9a: ca:ba:38:81:61:2b:37:e2:51:fc:7d:d4:7c:a0:df:52:94:96: 85:29:ed:e1:28:9c:15:2e:3f:3a:b4:52:25:7a:b2:2f:d0:92: b9:f5:72:b7:71:37:7d:00:e5:46:7e:e5:59:e8:a9:54:58:10: 61:06:90:03:fb:76:ea:40:b4:9e:2d:38:dc:82:ea:7e:e4:ec: 88:67:7d:47:15:cc:bd:2e:13:53:0a:a6:3b:73:9b:4a:a1:06: a0:95:29:de:f4:19:0f:48:41:96:6e:9e:2f:ce:ea:68:2e:99: 9f:de:d9:3b:ed:6e:85:dd:6e:39:16:c2:0c:7b:89:e7:05:79: 4c:8c:09:44:90:48:a9:b4:d9:61:0a:66:9e:22:16:52:27:1c: dc:55:b4:ab:61:d4:d4:ac:7f:47:86:fc:72:a7:22:c6:3e:e8: 08:8e:73:9e:dc:60:a6:be:2b:07:aa:62:2b:f3:df:46:ad:3f: d2:34:18:a9:33:94:02:59:41:33:5a:97:62:c1:8c:94:28:8d: f5:f5:05:63:78:af:db:ae:3c:ec:26:47:3f:7d:0e:1d:a8:b4: ad:e9:2e:97:cd:13:d8:39:31:72:5f:a0:f1:cc:10:ab:83:29: 88:df:c9:96 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZqg81lfYimOqjephRRZ21FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTEwODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGI4YTE1NDY2YzNmZjFlOTE1ZDc4MGExMGIwYmFhOWFkNjk0ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwI27F/BnSAx7oq2qeUrO8S7/k94 XMdpVSBfdkQE5nw4/ZTBbCVNzBY476C1s4z3pOoFs5D5TJRg8X05KN3bM+O/jy2d 8HP61wniIQq6bGVzyHgTcQikKFjSDS1zyEUJgOMAB5FM9GnUkB5UM4z25ie2Qn/v bjPedFIfzXV4SWpaEzX4FAKLBmZwdj3R7nscf/gPx/ZlFcugNeyinu3d2zBzyWau BaSbPe1PzxHdmb3b7dfVecX6522SyomMHXggLq6KAokzj9yyr+fzg3dcdFA/QWln x7tTzjY/0jJovRS7Whh36kxX8aqEN/FQ7E3drKCOHO6+oDVdxbZj6D4JEQIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFJC4oVRmw/8ekV14ChCwuqmtaUhgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2EyZGY0 NC0zOGIyLTRkMTItODM0Ny03OGU5OTc4Njk5NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvYTJkZjQ0 LTM4YjItNGQxMi04MzQ3LTc4ZTk5Nzg2OTk1Mi8xL2tMaWhWR2JEX3g2UlhYZ0tF TEM2cWExcFNHQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQGJYIAAwQDLq7oAwQCW+cYAwQDW/VQAwQCue04 AwQBwxTIMA0EAgACMAcDBQMqDBaAMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAj4C AgMAvGACAwDo2wIDAwVbMA0GCSqGSIb3DQEBCwUAA4IBAQAMmaoG+D0ZBge7RzB3 S1u28prKujiBYSs34lH8fdR8oN9SlJaFKe3hKJwVLj86tFIlerIv0JK59XK3cTd9 AOVGfuVZ6KlUWBBhBpAD+3bqQLSeLTjcgup+5OyIZ31HFcy9LhNTCqY7c5tKoQag lSne9BkPSEGWbp4vzupoLpmf3tk77W6F3W45FsIMe4nnBXlMjAlEkEiptNlhCmae IhZSJxzcVbSrYdTUrH9HhvxypyLGPugIjnOe3GCmvisHqmIr899GrT/SNBipM5QC WUEzWpdiwYyUKI319QVjeK/brjzsJkc/fQ4dqLSt6S6XzRPYOTFyX6DxzBCrgymI 38mW -----END CERTIFICATE-----Generated at Sat Dec 6 06:10:47 2025 by rpki-client