This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer File: p0NjdfsDInVrVdr_ZOJl73LA2lI.cer (raw, json) Hash identifier: VRtTpdjvT21NY13e/zgLuOOEepmsO87CFQ+wkXczOa0= Subject key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9C5ACCA487A8D0B8548185A3549F386 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:30:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 206575 IP: 80.253.160.0/22 IP: 85.155.232.0/21 IP: 86.54.32.0/21 IP: 185.155.224.0/22 IP: 194.5.68.0/22 IP: 2a07:9740::/29 IP: 2a0c:e540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c5:ac:ca:48:7a:8d:0b:85:48:18:5a:35:49:f3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7436375fb0322756b55daff64e265ef72c0da52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:94:c0:9c:92:81:10:36:bb:7e:ba:42:44: cb:c7:7a:26:20:86:8e:ba:47:5d:4b:f5:ae:b2:b5: 97:78:9f:7f:b7:f8:fa:c6:c7:f6:c3:04:c6:f6:8a: a9:ee:88:70:49:87:17:cb:18:d1:e0:1c:35:56:06: ce:81:10:54:2c:43:87:82:bf:99:09:ed:bf:d6:60: c7:74:55:87:1f:c6:ec:6f:01:65:5e:bb:52:bc:90: 03:a8:1c:fd:da:9f:9f:54:7f:92:8d:2e:c5:a0:47: f4:ff:a3:8b:5c:1f:9d:fd:69:6c:e7:8c:6a:15:3f: a1:58:05:34:32:37:ac:5c:a9:66:e4:25:81:a7:c9: b5:20:42:bf:c8:49:b3:a9:d3:c3:e6:ad:20:f4:bf: cc:1c:e3:1c:96:da:3f:03:f9:4b:12:68:e7:9a:c0: f4:4c:33:8e:76:3b:e6:c4:76:95:d1:1e:6d:eb:1e: 98:04:00:fa:fb:ec:c1:d1:fb:a5:2c:34:05:9f:78: 00:6b:6c:98:2d:17:4e:e5:ae:9c:b4:0d:76:3d:36: 56:74:5c:ee:1d:ad:92:b7:ee:d6:62:c6:89:6b:e3: 91:3b:f4:b2:5f:6d:e3:8c:b1:a0:00:c1:ec:0b:53: 05:fe:35:c8:f5:64:84:e4:dc:68:7b:f1:0b:97:ac: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.160.0/22 85.155.232.0/21 86.54.32.0/21 185.155.224.0/22 194.5.68.0/22 IPv6: 2a07:9740::/29 2a0c:e540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206575 Signature Algorithm: sha256WithRSAEncryption 85:cd:c6:ee:31:56:5d:e7:d6:f7:c9:38:0a:b7:7a:75:62:10: 74:1c:55:57:b6:6f:54:c7:f6:e8:1c:24:aa:49:dd:79:f6:4d: 3a:82:05:5a:9c:a4:23:c4:04:87:77:3b:90:b6:c2:8e:dd:0a: 0c:7d:2c:2d:c5:59:e3:50:df:f8:07:74:35:a6:27:31:73:57: cb:13:88:4a:08:bb:bf:af:17:18:d2:6a:bd:5f:ac:78:00:df: f0:69:da:12:f4:d5:de:8a:6b:fc:6b:8c:13:aa:71:46:46:c1: 3a:03:45:7d:d0:2e:44:4c:a4:de:2c:0f:51:b7:96:7c:76:6b: 69:4b:69:eb:8d:38:d3:3b:c7:d4:83:55:38:21:b3:34:f6:22: b9:57:cc:e9:00:c4:21:2c:a9:e6:c4:60:1a:f5:fb:d7:f9:d3: 3e:42:42:e7:15:40:72:f2:dc:53:91:a9:f4:97:f7:50:69:91: be:a1:d2:f6:0c:7d:7e:a5:42:4c:46:5f:d1:29:71:ca:73:1b: a6:e1:62:99:18:a7:23:56:70:c1:f7:48:43:8e:a5:e3:ae:cc: ac:71:e4:12:d2:21:18:8c:6f:a1:40:59:f0:d0:55:76:59:33: 9e:b1:86:ef:66:5b:cd:6b:07:23:67:49:b1:66:0a:87:8e:d4: 30:fb:e0:41 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZrpxazKSHqNC4VIGFo1SfOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQzNjM3NWZiMDMyMjc1NmI1NWRhZmY2NGUyNjVlZjcyYzBkYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgiUwJySgRA2u366QkTLx3omIIaO ukddS/WusrWXeJ9/t/j6xsf2wwTG9oqp7ohwSYcXyxjR4Bw1VgbOgRBULEOHgr+Z Ce2/1mDHdFWHH8bsbwFlXrtSvJADqBz92p+fVH+SjS7FoEf0/6OLXB+d/Wls54xq FT+hWAU0MjesXKlm5CWBp8m1IEK/yEmzqdPD5q0g9L/MHOMclto/A/lLEmjnmsD0 TDOOdjvmxHaV0R5t6x6YBAD6++zB0fulLDQFn3gAa2yYLRdO5a6ctA12PTZWdFzu Ha2St+7WYsaJa+ORO/SyX23jjLGgAMHsC1MF/jXI9WSE5Nxoe/ELl6yErQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2U1ZTNm YS05OWVlLTQ1Y2YtYmQ5YS0wZTZjMWZlOWQwMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZTVlM2Zh LTk5ZWUtNDVjZi1iZDlhLTBlNmMxZmU5ZDAxNS8xL3AwTmpkZnNESW5WclZkcl9a T0psNzNMQTJsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCUP2gAwQDVZvoAwQDVjYgAwQCuZvgAwQCwgVE MBQEAgACMA4DBQMqB5dAAwUDKgzlQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD Ju8wDQYJKoZIhvcNAQELBQADggEBAIXNxu4xVl3n1vfJOAq3enViEHQcVVe2b1TH 9ugcJKpJ3Xn2TTqCBVqcpCPEBId3O5C2wo7dCgx9LC3FWeNQ3/gHdDWmJzFzV8sT iEoIu7+vFxjSar1frHgA3/Bp2hL01d6Ka/xrjBOqcUZGwToDRX3QLkRMpN4sD1G3 lnx2a2lLaeuNONM7x9SDVTghszT2IrlXzOkAxCEsqebEYBr1+9f50z5CQucVQHLy 3FORqfSX91Bpkb6h0vYMfX6lQkxGX9EpccpzG6bhYpkYpyNWcMH3SEOOpeOuzKxx 5BLSIRiMb6FAWfDQVXZZM56xhu9mW81rByNnSbFmCoeO1DD74EE= -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:13 2025 by rpki-client