This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer (raw, json) Hash identifier: 0CojBQx/G59qia71CZmsxykK93SvZU2jYSzPEu4A2d4= Subject key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A1CE602420BB723FF445FA61F678F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:53:43 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 31221 AS: 209468 IP: 5.252.56.0/22 IP: 185.43.36.0/22 IP: 217.13.48.0/20 IP: 2a02:6f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a1:ce:60:24:20:bb:72:3f:f4:45:fa:61:f6:78:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:53:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:e3:40:d9:b5:dd:11:31:2d:e0:da:5b:e6: 59:89:95:5b:75:06:09:7b:fc:11:44:12:52:e4:3c: f1:e3:65:cb:ab:73:8c:1b:f1:32:ff:fc:e3:03:4b: 46:3b:07:20:1f:79:d9:c5:78:9d:5b:d8:68:23:90: 11:08:bf:08:1d:ad:db:b9:dc:42:43:3b:03:9c:33: 36:e3:ae:63:9c:c0:dd:d2:d1:84:4c:bb:4d:a8:a7: 16:9f:da:76:39:e0:19:a6:27:04:26:6a:b0:4a:76: 4d:76:50:b4:2d:f4:b1:3f:d0:cd:87:01:b5:0f:8b: 43:a2:ad:83:7a:27:82:8b:1e:50:7a:75:5c:73:c1: f8:ba:15:c4:fa:70:27:80:aa:8d:30:2f:bd:87:32: 2c:01:dd:8d:6f:39:0a:72:f3:41:38:ad:7a:50:5a: d8:0b:f4:08:f6:c6:8d:1f:7b:27:ae:81:d2:ca:a7: ee:9b:fe:b0:8f:1f:85:cf:9b:6e:48:44:9e:3e:81: 4b:1e:07:1c:2e:ca:0a:03:22:25:b1:e2:49:e6:34: 10:37:8e:06:d3:5d:27:05:53:83:43:84:a3:f7:53: bf:37:4a:ed:e7:2a:a5:36:e6:df:cd:ce:0a:44:38: 51:a5:1c:31:6b:63:9e:70:ed:9e:04:d7:8f:0e:22: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.56.0/22 185.43.36.0/22 217.13.48.0/20 IPv6: 2a02:6f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31221 209468 Signature Algorithm: sha256WithRSAEncryption 1c:ae:14:cc:47:e8:cc:de:62:a4:52:54:7c:3d:02:66:b8:ce: 30:09:c5:2d:18:fe:60:5b:73:df:93:3c:60:8f:15:45:00:7a: 22:bb:ea:01:2c:90:f0:02:63:a7:d7:87:a3:f3:0c:8e:9d:37: f4:ad:67:a1:05:cd:82:b8:14:7c:6b:f1:cd:ba:81:5c:b8:4e: 54:45:63:17:f6:cf:a2:2e:c9:97:ec:10:f7:a6:66:40:28:0a: bc:46:af:92:74:b0:39:2d:b3:3a:fa:d1:0f:da:38:ab:60:bc: 34:31:08:84:b0:16:95:f5:5d:41:da:10:a6:e5:b7:cb:31:a3: 38:86:f2:e2:16:60:c2:b6:57:fe:70:ff:92:24:77:2d:4c:a3: 68:ef:d5:9e:dc:0a:bf:5f:00:06:40:7c:ed:28:93:22:20:88: 44:c1:4c:15:39:0f:06:1b:26:21:3b:d9:45:66:ce:34:36:ae: ab:07:38:82:b9:63:e4:6e:ae:4f:28:e6:11:61:47:ed:9f:dd: 19:b2:ee:87:8d:14:98:35:81:5e:39:27:26:14:fa:6c:9c:96: 3c:ea:cb:c6:32:5d:fe:94:78:f3:7c:a2:00:54:b6:46:28:d0: d9:75:96:50:a6:91:c5:e8:e9:d0:55:eb:90:ab:ce:51:06:46: 7b:a9:5e:bb -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZrjoc5gJCC7cj/0Rfph9nj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDgxZTk0NmNmYzhlMTljMTY2N2FmMzc1ZDEwYTFlNDA0MmYwZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktnjQNm13RExLeDaW+ZZiZVbdQYJ e/wRRBJS5Dzx42XLq3OMG/Ey//zjA0tGOwcgH3nZxXidW9hoI5ARCL8IHa3budxC QzsDnDM2465jnMDd0tGETLtNqKcWn9p2OeAZpicEJmqwSnZNdlC0LfSxP9DNhwG1 D4tDoq2DeieCix5QenVcc8H4uhXE+nAngKqNMC+9hzIsAd2NbzkKcvNBOK16UFrY C/QI9saNH3snroHSyqfum/6wjx+Fz5tuSESePoFLHgccLsoKAyIlseJJ5jQQN44G 010nBVODQ4Sj91O/N0rt5yqlNubfzc4KRDhRpRwxa2OecO2eBNePDiLoVQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFJSB6UbPyOGcFmevN10QoeQELw65MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzEzYzMz YS1hNDZmLTQ4ODktYjgwOS01NzMwM2FhNDVjYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMTNjMzNh LWE0NmYtNDg4OS1iODA5LTU3MzAzYWE0NWNiYi8xL2xJSHBSc19JNFp3V1o2ODNY UkNoNUFRdkRyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCBfw4AwQCuSskAwQE2Q0wMA0EAgACMAcDBQAq AgbwMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnn1AgMDMjwwDQYJKoZIhvcNAQEL BQADggEBAByuFMxH6MzeYqRSVHw9Ama4zjAJxS0Y/mBbc9+TPGCPFUUAeiK76gEs kPACY6fXh6PzDI6dN/StZ6EFzYK4FHxr8c26gVy4TlRFYxf2z6IuyZfsEPemZkAo CrxGr5J0sDktszr60Q/aOKtgvDQxCISwFpX1XUHaEKblt8sxoziG8uIWYMK2V/5w /5Ikdy1Mo2jv1Z7cCr9fAAZAfO0okyIgiETBTBU5DwYbJiE72UVmzjQ2rqsHOIK5 Y+Rurk8o5hFhR+2f3Rmy7oeNFJg1gV45JyYU+mycljzqy8YyXf6UePN8ogBUtkYo 0Nl1llCmkcXo6dBV65CrzlEGRnupXrs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:27 2025 by rpki-client