This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer (raw, json) Hash identifier: 0mqwsllISlrJsR2KpW+6f+U0zypF3EAnarGr/ETUEGY= Subject key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A82EBE405755AB4AB27F00FC7E5416BE4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 15:11:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 60087 IP: 46.252.144.0/20 IP: 81.28.8.0/22 IP: 86.107.96.0/22 IP: 89.40.172.0/22 IP: 185.19.208.0/22 IP: 185.31.64.0/22 IP: 2a03:a500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:eb:e4:05:75:5a:b4:ab:27:f0:0f:c7:e5:41:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 15:11:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:01:bd:6a:a5:05:2e:6a:ee:06:b4:4a:b4: 6b:ef:36:be:51:24:fb:04:93:90:a8:09:62:9a:ee: e0:28:66:ad:83:0a:95:5e:ab:96:1d:57:d9:fd:1b: 1c:35:a0:62:76:1e:38:c9:fe:13:fd:ae:b4:70:c9: 5e:a2:58:c4:86:7e:41:df:34:4f:29:50:59:2a:83: 2d:75:32:02:7f:18:16:ac:32:d2:19:f5:30:4a:52: 1b:c5:73:40:65:0c:d4:17:4a:77:7b:b8:96:22:73: a5:29:5a:b4:95:7e:b1:db:70:ff:a8:f4:9c:8d:b2: c1:fe:53:e3:91:0f:d0:52:e4:c0:2a:83:9c:df:58: b7:89:d9:0b:96:a3:ba:93:2d:bc:b0:ef:5d:84:f5: c1:f1:c6:da:41:42:89:ce:11:77:b9:c0:77:57:6a: 12:90:71:b7:da:a6:10:a3:2f:a0:d8:f9:10:7a:dc: d7:2a:6f:0d:29:6c:ee:6c:20:09:55:db:7d:06:56: 52:d4:96:e3:3a:28:53:36:1d:08:9d:38:8b:ac:c0: c7:87:7d:27:fb:da:db:01:a5:d5:ba:a3:eb:db:4c: 86:fd:2d:34:68:51:f0:e0:12:08:4b:9a:c3:b6:61: ab:04:5b:cd:09:d0:b6:a5:81:b0:a2:ab:40:1e:38: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.144.0/20 81.28.8.0/22 86.107.96.0/22 89.40.172.0/22 185.19.208.0/22 185.31.64.0/22 IPv6: 2a03:a500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60087 Signature Algorithm: sha256WithRSAEncryption a9:e3:63:4b:22:c7:f4:bf:50:22:a6:06:8d:ad:2d:dd:f3:7e: 74:ba:92:71:b2:c6:49:49:cd:ba:59:31:c7:37:76:b7:a5:d0: cf:65:9d:6b:66:69:a4:74:1e:5f:f0:78:88:e7:ef:d4:c1:fe: 17:89:03:a1:04:45:1c:d9:90:1d:e4:04:40:cb:b6:a6:44:37: 95:7c:48:ba:26:02:14:3a:26:87:38:c4:f2:78:6c:d4:fc:da: 51:c6:7e:5b:36:84:5b:16:17:1b:74:38:c2:54:0a:a8:60:95: e2:a0:bc:33:db:20:e2:e0:30:14:7d:b6:06:f3:31:54:86:5a: 3f:94:fd:67:88:a6:c2:59:c7:b6:22:b1:3f:13:26:3b:b5:b8: 8a:c1:85:72:83:d8:cb:f5:2c:b7:db:c6:e7:c5:98:20:69:aa: 74:90:dd:9c:99:03:04:b9:65:b4:96:f4:de:79:1d:f1:80:5f: ea:99:71:0b:29:e3:c8:f9:47:07:5d:66:97:fb:09:10:9a:bc: 35:cd:d7:82:0e:04:95:96:57:99:9f:79:f9:06:3c:8a:4b:d5: 1b:0b:3f:49:59:64:0a:17:70:f1:3a:5c:77:1e:86:b8:e2:13: 11:5b:66:1c:d4:33:2f:cf:22:28:52:33:6c:0f:1f:c0:80:9f: 93:fd:64:d2 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZqC6+QFdVq0qyfwD8flQWvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTUxMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTJlYmJiY2JlMWJmNjM0NmVkNDc2YjgzYzdlMTNhNzg0NDE3YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/8BvWqlBS5q7ga0SrRr7za+UST7 BJOQqAlimu7gKGatgwqVXquWHVfZ/RscNaBidh44yf4T/a60cMleoljEhn5B3zRP KVBZKoMtdTICfxgWrDLSGfUwSlIbxXNAZQzUF0p3e7iWInOlKVq0lX6x23D/qPSc jbLB/lPjkQ/QUuTAKoOc31i3idkLlqO6ky28sO9dhPXB8cbaQUKJzhF3ucB3V2oS kHG32qYQoy+g2PkQetzXKm8NKWzubCAJVdt9BlZS1JbjOihTNh0InTiLrMDHh30n +9rbAaXVuqPr20yG/S00aFHw4BIIS5rDtmGrBFvNCdC2pYGwoqtAHjgSwwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFJouu7y+G/Y0btR2uDx+E6eEQXrNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzFhMWNi ZS0yMTdkLTQzNGItYWRhMS00NGUyMTlhOWU5NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMWExY2Jl LTIxN2QtNDM0Yi1hZGExLTQ0ZTIxOWE5ZTk2ZS8xL21pNjd2TDRiOWpSdTFIYTRQ SDRUcDRSQmVzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQELvyQAwQCURwIAwQCVmtgAwQCWSisAwQCuRPQ AwQCuR9AMA0EAgACMAcDBQAqA6UAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDq tzANBgkqhkiG9w0BAQsFAAOCAQEAqeNjSyLH9L9QIqYGja0t3fN+dLqScbLGSUnN ulkxxzd2t6XQz2Wda2ZppHQeX/B4iOfv1MH+F4kDoQRFHNmQHeQEQMu2pkQ3lXxI uiYCFDomhzjE8nhs1PzaUcZ+WzaEWxYXG3Q4wlQKqGCV4qC8M9sg4uAwFH22BvMx VIZaP5T9Z4imwlnHtiKxPxMmO7W4isGFcoPYy/Ust9vG58WYIGmqdJDdnJkDBLll tJb03nkd8YBf6plxCynjyPlHB11ml/sJEJq8Nc3Xgg4ElZZXmZ95+QY8ikvVGws/ SVlkChdw8Tpcdx6GuOITEVtmHNQzL88iKFIzbA8fwICfk/1k0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:58 2025 by rpki-client