This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer File: oKFURB35Yj7rWhlhONIb71gktEE.cer (raw, json) Hash identifier: jrkudk74aABEdJ8AGrxwMmlgzHfttwWd+8BIwgY9OLY= Subject key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD98924F5F6F439CE82CAFCE595A5DCF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 10:50:35 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24641 AS: 35613 AS: 206601 IP: 77.240.176.0/20 IP: 81.19.0.0/20 IP: 85.132.144.0/20 IP: 95.129.96.0/21 IP: 176.74.128.0/19 IP: 185.146.4.0/22 IP: 193.200.244.0/24 IP: 193.200.246.0/24 IP: 193.200.251.0 -- 193.200.252.255 IP: 2a00:9c80::/32 IP: 2a02:e98::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:89:24:f5:f6:f4:39:ce:82:ca:fc:e5:95:a5:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 10:50:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0a154441df9623eeb5a196138d21bef5824b441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:58:5b:9b:38:f2:4b:48:7e:68:4c:fd:f5: d5:81:4c:80:e8:f1:99:31:c8:56:47:4f:f6:54:60: 1b:f5:d0:e7:34:eb:0c:3b:fe:bb:f8:69:54:f0:c8: 66:2c:3c:01:ed:3c:4b:18:e1:3d:21:9f:32:4d:e7: e4:c5:a5:8a:e1:7c:60:89:68:5c:7b:aa:62:62:25: 12:6d:5d:0e:d2:8a:62:da:47:7d:66:eb:b2:03:8b: 70:59:9c:c1:65:d9:4f:62:5e:0b:bd:9e:1a:5c:9d: eb:c9:79:60:c3:cb:89:8a:93:c3:f1:c6:80:0f:8e: ea:f8:ff:d5:6a:0a:3f:58:ef:ce:c6:67:a7:1a:2d: f9:bb:c1:48:bb:e3:05:53:7e:db:9c:13:04:c7:d4: cd:a4:53:1a:52:64:6c:23:98:eb:b1:7f:df:53:b5: 71:18:b4:f3:fc:48:2a:6a:f0:d7:f9:0d:8b:d5:e4: b3:7d:a2:00:84:09:32:30:63:2c:3d:8b:cc:c7:01: 43:d2:c8:fd:33:59:9a:ac:2c:c9:c6:c9:37:41:53: eb:89:e7:ce:92:a6:6c:1d:a9:1a:37:3a:d8:f2:13: 27:73:6b:53:d5:ec:1c:5a:53:27:b7:05:a1:70:89: da:cd:19:e7:13:a6:34:3c:b1:b2:af:73:36:5e:4d: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.176.0/20 81.19.0.0/20 85.132.144.0/20 95.129.96.0/21 176.74.128.0/19 185.146.4.0/22 193.200.244.0/24 193.200.246.0/24 193.200.251.0-193.200.252.255 IPv6: 2a00:9c80::/32 2a02:e98::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24641 35613 206601 Signature Algorithm: sha256WithRSAEncryption 16:92:67:3f:4a:5f:48:25:31:10:c7:d7:10:ce:d9:ae:95:b4: e2:cc:54:6f:ec:da:e0:e1:57:5f:12:57:3c:92:70:30:eb:07: ee:d0:26:ca:f3:5d:c5:9b:88:de:26:e1:78:d3:d9:5b:30:39: fd:c4:ec:15:10:25:44:11:6c:f6:44:15:e0:6f:10:b4:56:71: d7:b7:b4:63:d0:5c:98:59:03:6a:ab:7a:c2:40:03:de:f6:26: fd:37:fd:11:c0:06:14:ee:fe:fd:8b:8e:d2:6d:96:db:62:5e: e9:9b:cb:4f:5f:8e:e7:39:60:b9:28:9d:8b:6f:78:1a:94:38: 97:13:ba:bf:4d:53:45:e7:44:3f:9c:4a:7e:08:38:a3:51:78: e3:ca:f2:94:0a:c3:68:a9:1b:65:c7:ed:84:f5:c6:4f:b2:db: 82:34:e2:78:a3:b5:74:a8:b4:ae:ea:72:a4:df:81:89:71:ca: 54:b4:55:07:4e:99:3d:9a:f7:f1:94:29:10:e9:84:f1:77:53: 35:69:7f:2c:6e:2b:db:09:1b:74:7b:7c:f4:d3:da:7a:e9:26: d6:c9:71:51:c6:da:80:2e:b9:cb:fe:e3:fd:94:b1:9e:79:67: 44:43:59:e6:8b:2b:6a:20:eb:d3:78:62:c3:6a:0e:8d:a3:8c: 26:6f:d7:13 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZrZiST19vQ5zoLK/OWVpdz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTA1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGExNTQ0NDFkZjk2MjNlZWI1YTE5NjEzOGQyMWJlZjU4MjRiNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1YW5s48ktIfmhM/fXVgUyA6PGZ MchWR0/2VGAb9dDnNOsMO/67+GlU8MhmLDwB7TxLGOE9IZ8yTefkxaWK4XxgiWhc e6piYiUSbV0O0opi2kd9ZuuyA4twWZzBZdlPYl4LvZ4aXJ3ryXlgw8uJipPD8caA D47q+P/Vago/WO/OxmenGi35u8FIu+MFU37bnBMEx9TNpFMaUmRsI5jrsX/fU7Vx GLTz/EgqavDX+Q2L1eSzfaIAhAkyMGMsPYvMxwFD0sj9M1marCzJxsk3QVPriefO kqZsHakaNzrY8hMnc2tT1ewcWlMntwWhcInazRnnE6Y0PLGyr3M2Xk2FEwIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFKChVEQd+WI+61oZYTjSG+9YJLRBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzViM2Q2 ZC1lNmYxLTQ3YWQtYjUyYi05ZDk0MzY3MWE4YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNWIzZDZk LWU2ZjEtNDdhZC1iNTJiLTlkOTQzNjcxYThhMy8xL29LRlVSQjM1WWo3cldobGhP TkliNzFna3RFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDBEBAIAATA+AwQETfCwAwQEURMAAwQEVYSQAwQDX4FgAwQFsEqA AwQCuZIEAwQAwcj0AwQAwcj2MAwDBADByPsDBADByPwwFAQCAAIwDgMFACoAnIAD BQMqAg6YMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAmBBAgMAix0CAwMnCTANBgkq hkiG9w0BAQsFAAOCAQEAFpJnP0pfSCUxEMfXEM7ZrpW04sxUb+za4OFXXxJXPJJw MOsH7tAmyvNdxZuI3ibheNPZWzA5/cTsFRAlRBFs9kQV4G8QtFZx17e0Y9BcmFkD aqt6wkAD3vYm/Tf9EcAGFO7+/YuO0m2W22Je6ZvLT1+O5zlguSidi294GpQ4lxO6 v01TRedEP5xKfgg4o1F448rylArDaKkbZcfthPXGT7LbgjTieKO1dKi0rupypN+B iXHKVLRVB06ZPZr38ZQpEOmE8XdTNWl/LG4r2wkbdHt89NPaeukm1slxUcbagC65 y/7j/ZSxnnlnRENZ5osraiDr03hiw2oOjaOMJm/XEw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:44 2025 by rpki-client