This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer File: mFS9ioY6MYlcxsuSLzAIs_CKra4.cer (raw, json) Hash identifier: JrinVZO7CzEciHFj3+aOdfuBca71sB9BYYP4ZmLBa+c= Subject key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A9777402D87D30F856BEE258A4E5DF669 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 18 Nov 2025 14:56:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212774 IP: 64.239.60.0/23 IP: 161.108.210.0/24 IP: 193.46.58.0/23 IP: 193.186.252.0/24 IP: 2001:678:10c8::/48 IP: 2001:678:1150::/48 IP: 2001:67c:478::/48 IP: 2001:67c:934::/48 IP: 2001:67c:960::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:77:40:2d:87:d3:0f:85:6b:ee:25:8a:4e:5d:f6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 18 14:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:a0:64:7f:af:26:00:4b:bd:d3:7e:72:72: fe:fa:a2:30:cc:05:dc:2f:3c:bb:2e:3d:31:68:57: 9d:62:72:01:20:e1:bd:2b:99:ce:b9:df:32:5e:58: 40:57:fd:30:bd:bf:f8:0b:f7:70:5e:e0:4e:d8:a1: 72:bf:30:e2:d5:3d:55:f8:63:1f:05:90:42:8a:c6: 77:9e:97:4a:e2:4d:35:0e:cf:55:47:34:34:f6:ca: 87:db:85:39:34:60:6c:f3:8e:2b:c3:c4:bb:59:ad: be:9b:09:74:2a:d1:80:d1:cc:11:25:3c:99:21:57: 92:63:d7:35:4e:f9:a2:c0:4d:76:c3:6c:be:63:b0: 7c:79:c9:44:25:39:3c:83:48:1d:1c:c4:20:51:8b: 1d:c3:ce:14:dc:4e:64:78:61:7e:df:82:ec:fc:4c: a0:67:12:ea:9a:5f:78:6d:54:32:27:b3:c3:30:0e: 64:89:23:1f:f4:fc:dc:c8:2e:c7:48:c9:82:9b:a8: 45:c7:ec:2f:c9:e2:8c:f3:88:2d:a0:63:e6:0a:3e: 24:ea:e3:e3:b4:30:30:17:f3:0a:10:c5:a4:8e:3a: 29:49:e9:22:8d:83:e2:4a:3b:79:14:da:a1:fd:5c: 41:bb:67:2c:70:17:7b:b9:c1:56:04:6b:40:0c:e1: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.239.60.0/23 161.108.210.0/24 193.46.58.0/23 193.186.252.0/24 IPv6: 2001:678:10c8::/48 2001:678:1150::/48 2001:67c:478::/48 2001:67c:934::/48 2001:67c:960::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212774 Signature Algorithm: sha256WithRSAEncryption 5a:06:0b:df:59:0e:88:1b:b0:18:83:ef:22:8d:39:06:5a:a8: 64:ad:b1:0b:96:3e:0d:28:fa:88:19:90:71:50:3d:12:dc:06: 9f:06:4a:47:5f:a5:49:0f:8f:0a:79:b3:c6:28:ff:2b:01:39: 4d:6a:60:90:b8:5c:b8:31:a1:16:f0:94:da:f3:de:08:85:96: 1a:08:a7:f7:3a:11:e0:1a:21:8d:8d:2f:6c:db:98:31:c6:53: 05:e2:30:78:94:f4:cf:8f:34:d9:b4:4b:e3:23:4c:48:f2:a4: 64:de:2b:92:fc:a1:28:e5:cc:1c:e7:92:49:65:76:8e:83:92: 23:e3:00:03:33:52:23:b1:0c:a6:ab:d8:f5:8d:68:d0:29:6e: ec:b3:dd:4f:bf:85:cf:cb:16:2c:e7:09:e4:d0:d1:5e:aa:eb: 11:26:12:c7:10:a1:fb:b4:c1:2f:ee:53:5c:dc:47:13:b6:84: bd:f1:c7:c8:a5:8c:0b:ec:fb:a1:20:22:6e:3e:d6:69:a8:d8: b0:69:62:2c:26:1b:e0:4f:2a:85:43:3c:94:f1:b3:8c:50:f5: 4b:0b:ea:35:a4:15:31:e0:09:e8:00:48:a0:2c:b4:84:83:fe: 0b:e2:a6:66:d4:ba:20:53:ab:31:c7:74:8b:0d:52:85:9d:d9: 38:36:a2:db -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZqXd0Ath9MPhWvuJYpOXfZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE4MTQ1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODU0YmQ4YTg2M2EzMTg5NWNjNmNiOTIyZjMwMDhiM2YwOGFhZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jKgZH+vJgBLvdN+cnL++qIwzAXc Lzy7Lj0xaFedYnIBIOG9K5nOud8yXlhAV/0wvb/4C/dwXuBO2KFyvzDi1T1V+GMf BZBCisZ3npdK4k01Ds9VRzQ09sqH24U5NGBs844rw8S7Wa2+mwl0KtGA0cwRJTyZ IVeSY9c1TvmiwE12w2y+Y7B8eclEJTk8g0gdHMQgUYsdw84U3E5keGF+34Ls/Eyg ZxLqml94bVQyJ7PDMA5kiSMf9PzcyC7HSMmCm6hFx+wvyeKM84gtoGPmCj4k6uPj tDAwF/MKEMWkjjopSekijYPiSjt5FNqh/VxBu2cscBd7ucFWBGtADOG1bQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFJhUvYqGOjGJXMbLki8wCLPwiq2uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzJlZDEw Yy0wNGIwLTQ4NjYtOWI4Mi1jNTIyYjc0ZGRjZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMmVkMTBj LTA0YjAtNDg2Ni05YjgyLWM1MjJiNzRkZGNmZC8xL21GUzlpb1k2TVlsY3hzdVNM ekFJc19DS3JhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTAeBAIAATAYAwQBQO88AwQAoWzSAwQBwS46AwQAwbr8MDMEAgAC MC0DBwAgAQZ4EMgDBwAgAQZ4EVADBwAgAQZ8BHgDBwAgAQZ8CTQDBwAgAQZ8CWAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAz8mMA0GCSqGSIb3DQEBCwUAA4IBAQBa BgvfWQ6IG7AYg+8ijTkGWqhkrbELlj4NKPqIGZBxUD0S3AafBkpHX6VJD48KebPG KP8rATlNamCQuFy4MaEW8JTa894IhZYaCKf3OhHgGiGNjS9s25gxxlMF4jB4lPTP jzTZtEvjI0xI8qRk3iuS/KEo5cwc55JJZXaOg5Ij4wADM1IjsQymq9j1jWjQKW7s s91Pv4XPyxYs5wnk0NFequsRJhLHEKH7tMEv7lNc3EcTtoS98cfIpYwL7PuhICJu PtZpqNiwaWIsJhvgTyqFQzyU8bOMUPVLC+o1pBUx4AnoAEigLLSEg/4L4qZm1Log U6sxx3SLDVKFndk4NqLb -----END CERTIFICATE-----Generated at Sat Dec 6 06:39:08 2025 by rpki-client