This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer File: nyasnus6LPovbKP0E--5zf_pck4.cer (raw, json) Hash identifier: VdX+wDy9woiPFI36Y5I26VVoXwlSDxRSk544+wiqMiA= Subject key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE4617F59DF7173F92CB403149A18A610 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 13:23:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 43915 IP: 5.181.104.0/22 IP: 45.66.36.0/22 IP: 45.80.160.0/22 IP: 45.130.56.0/22 IP: 45.143.112.0/22 IP: 45.152.28.0/22 IP: 62.169.148.0/23 IP: 79.135.122.0/23 IP: 87.117.64.0 -- 87.117.69.255 IP: 91.239.57.0/24 IP: 94.154.184.0/22 IP: 109.224.216.0/22 IP: 109.224.224.0/22 IP: 109.224.234.0 -- 109.224.241.255 IP: 144.178.104.0/23 IP: 144.178.118.0/23 IP: 144.178.252.0/23 IP: 147.189.156.0/22 IP: 147.189.214.0/24 IP: 176.116.116.0/22 IP: 178.248.128.0/21 IP: 185.23.254.0/23 IP: 185.147.184.0/22 IP: 185.161.4.0/22 IP: 185.231.136.0/21 IP: 188.214.236.0/22 IP: 193.35.146.0/23 IP: 194.105.134.0/23 IP: 194.145.242.0/23 IP: 194.146.160.0/22 IP: 194.169.152.0/22 IP: 195.72.56.0/22 IP: 195.184.250.0/23 IP: 195.206.172.0/22 IP: 195.242.148.0/23 IP: 195.244.2.0/23 IP: 212.59.72.0/21 IP: 212.108.90.0/23 IP: 213.225.224.0/22 IP: 217.14.184.0/21 IP: 217.20.244.0/22 IP: 217.171.100.0 -- 217.171.107.255 IP: 2a07:5940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:61:7f:59:df:71:73:f9:2c:b4:03:14:9a:18:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 13:23:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cd:77:c6:36:88:ea:9b:bf:d0:ee:be:9f:fd: 48:ef:53:64:68:4d:63:88:d3:51:ef:8c:cd:94:9f: 61:29:4e:d8:3f:8d:30:4c:0a:97:29:ef:e5:07:8c: 30:e1:7a:2f:e8:70:d5:39:22:88:7d:de:81:60:8c: 0b:c4:f0:d7:00:0d:ef:97:9c:e2:02:11:dc:00:1a: 15:08:33:ca:bc:2c:ee:f4:8b:0b:6e:15:7e:93:80: 29:91:b1:ba:74:11:96:44:52:01:44:3e:d5:13:7b: 4c:a9:79:b1:4d:1b:26:4e:ec:a3:63:b9:16:b7:14: db:b8:38:ce:4d:50:ed:58:42:b0:86:5c:5f:59:1a: ec:0d:eb:67:cc:69:48:69:67:6f:97:e7:b8:f4:64: cd:7d:82:35:e8:70:ee:e1:a3:db:bf:ef:7a:f2:ba: 88:73:60:c0:36:d5:67:53:db:f7:65:17:0b:e7:78: f2:f7:42:22:a6:1a:31:e7:a3:64:11:0a:22:f0:db: e3:74:fa:5e:2d:b2:6d:60:de:a6:cd:63:a8:cf:94: 65:f0:99:27:4c:54:ae:0d:ea:7b:35:32:3c:8b:df: a4:53:80:f5:91:65:66:53:69:49:b4:74:95:a9:6c: d0:33:25:af:6e:24:45:b6:f1:9f:e2:26:49:2a:ba: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.104.0/22 45.66.36.0/22 45.80.160.0/22 45.130.56.0/22 45.143.112.0/22 45.152.28.0/22 62.169.148.0/23 79.135.122.0/23 87.117.64.0-87.117.69.255 91.239.57.0/24 94.154.184.0/22 109.224.216.0/22 109.224.224.0/22 109.224.234.0-109.224.241.255 144.178.104.0/23 144.178.118.0/23 144.178.252.0/23 147.189.156.0/22 147.189.214.0/24 176.116.116.0/22 178.248.128.0/21 185.23.254.0/23 185.147.184.0/22 185.161.4.0/22 185.231.136.0/21 188.214.236.0/22 193.35.146.0/23 194.105.134.0/23 194.145.242.0/23 194.146.160.0/22 194.169.152.0/22 195.72.56.0/22 195.184.250.0/23 195.206.172.0/22 195.242.148.0/23 195.244.2.0/23 212.59.72.0/21 212.108.90.0/23 213.225.224.0/22 217.14.184.0/21 217.20.244.0/22 217.171.100.0-217.171.107.255 IPv6: 2a07:5940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43915 Signature Algorithm: sha256WithRSAEncryption 7e:33:ad:3b:9f:d8:d1:d6:08:62:25:e7:82:88:94:e8:b5:e9: 73:cb:49:e9:03:bc:a8:23:a3:d9:82:fb:c6:67:56:ba:6a:02: 94:02:23:c9:5c:44:d7:a9:b8:53:36:b2:fe:9d:a7:8e:e1:1d: 8b:8f:3e:a6:7e:30:c6:cc:3f:1d:82:65:69:53:9e:93:74:4c: 35:a0:40:e0:3e:51:9e:f0:e3:3f:b3:f3:5d:4f:fe:54:77:9b: 83:92:3a:7f:36:e6:56:bd:f8:c9:5b:0c:09:d3:a3:ee:52:fb: 86:67:72:eb:08:37:4f:89:24:b0:1d:62:91:a8:fc:09:f5:20: ea:49:37:9b:fa:55:66:e7:2d:92:7f:12:14:1c:b5:31:a0:b6: 4f:46:79:7f:cb:a1:ca:f6:d9:73:50:e0:f5:fe:d1:4c:1b:78: 9f:8e:4f:ec:cc:01:df:c7:02:33:0c:55:db:66:9c:46:e2:0b: 48:35:c0:0c:ad:4a:f4:6c:e0:67:22:61:4d:5a:9d:8f:38:7b: cd:7c:b7:3d:c6:45:14:df:22:5e:7b:8e:f7:32:a8:e7:8e:15: 7f:67:5c:96:ce:e0:b7:31:3b:31:ab:7f:d8:b0:25:b1:18:90: 41:5a:93:ae:7c:3a:a4:25:b8:aa:4a:94:17:c0:97:14:1b:c7: 29:4e:96:78 -----BEGIN CERTIFICATE----- MIIGuzCCBaOgAwIBAgISAZrkYX9Z33Fz+Sy0AxSaGKYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTMyMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI2YWM5ZWViM2EyY2ZhMmY2Y2EzZjQxM2VmYjljZGZmZTk3MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6813xjaI6pu/0O6+n/1I71NkaE1j iNNR74zNlJ9hKU7YP40wTAqXKe/lB4ww4Xov6HDVOSKIfd6BYIwLxPDXAA3vl5zi AhHcABoVCDPKvCzu9IsLbhV+k4ApkbG6dBGWRFIBRD7VE3tMqXmxTRsmTuyjY7kW txTbuDjOTVDtWEKwhlxfWRrsDetnzGlIaWdvl+e49GTNfYI16HDu4aPbv+968rqI c2DANtVnU9v3ZRcL53jy90Iiphox56NkEQoi8NvjdPpeLbJtYN6mzWOoz5Rl8Jkn TFSuDep7NTI8i9+kU4D1kWVmU2lJtHSVqWzQMyWvbiRFtvGf4iZJKroe7wIDAQAB o4IDxzCCA8MwHQYDVR0OBBYEFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2RjMzE4 Yi05MjQwLTQ3NzUtYTRhYi03ZDQyNjZjZjgyMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvZGMzMThi LTkyNDAtNDc3NS1hNGFiLTdkNDI2NmNmODIyYS8xL255YXNudXM2TFBvdmJLUDBF LS01emZfcGNrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBRAYIKwYB BQUHAQcBAf8EggEzMIIBLzCCARwEAgABMIIBFAMEAgW1aAMEAi1CJAMEAi1QoAME Ai2COAMEAi2PcAMEAi2YHAMEAT6plAMEAU+HejAMAwQGV3VAAwQBV3VEAwQAW+85 AwQCXpq4AwQCbeDYAwQCbeDgMAwDBAFt4OoDBAFt4PADBAGQsmgDBAGQsnYDBAGQ svwDBAKTvZwDBACTvdYDBAKwdHQDBAOy+IADBAG5F/4DBAK5k7gDBAK5oQQDBAO5 54gDBAK81uwDBAHBI5IDBAHCaYYDBAHCkfIDBALCkqADBALCqZgDBALDSDgDBAHD uPoDBALDzqwDBAHD8pQDBAHD9AIDBAPUO0gDBAHUbFoDBALV4eADBAPZDrgDBALZ FPQwDAMEAtmrZAMEAtmraDANBAIAAjAHAwUDKgdZQDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMAq4swDQYJKoZIhvcNAQELBQADggEBAH4zrTuf2NHWCGIl54KIlOi1 6XPLSekDvKgjo9mC+8ZnVrpqApQCI8lcRNepuFM2sv6dp47hHYuPPqZ+MMbMPx2C ZWlTnpN0TDWgQOA+UZ7w4z+z811P/lR3m4OSOn825la9+MlbDAnTo+5S+4ZncusI N0+JJLAdYpGo/An1IOpJN5v6VWbnLZJ/EhQctTGgtk9GeX/Locr22XNQ4PX+0Uwb eJ+OT+zMAd/HAjMMVdtmnEbiC0g1wAytSvRs4GciYU1anY84e818tz3GRRTfIl57 jvcyqOeOFX9nXJbO4LcxOzGrf9iwJbEYkEFak658OqQluKpKlBfAlxQbxylOlng= -----END CERTIFICATE-----Generated at Sat Dec 6 06:48:43 2025 by rpki-client