This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer (raw, json) Hash identifier: mlEySWBfMHZDzg40Ejee8PGWHiRa/6ppVOtnXs2tAWs= Subject key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A9C58F4E030D223427F1464FBBE8A0906 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 19 Nov 2025 13:41:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44655 AS: 50898 IP: 46.254.72.0/22 IP: 91.202.124.0/22 IP: 91.239.168.0/22 IP: 91.243.115.0/24 IP: 91.244.182.0/24 IP: 185.228.57.0/24 IP: 213.5.8.0/21 IP: 2001:67c:740::/48 IP: 2a0f:1a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:58:f4:e0:30:d2:23:42:7f:14:64:fb:be:8a:09:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 19 13:41:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:f5:7d:45:66:bf:85:30:00:0d:5e:44:26: 86:40:7d:a4:4c:dc:d1:7e:3b:92:12:20:55:f8:a3: 70:1a:61:d0:a7:57:56:d4:13:e1:1b:91:c7:ed:76: f6:66:c3:ee:b0:27:0b:cd:97:cf:a6:16:14:87:31: 27:c9:67:94:b9:16:1d:bc:a4:5f:07:b2:a8:3d:b0: 8d:88:b0:bc:ca:a4:ee:8a:d1:b6:3a:38:2a:bd:dd: 2e:40:6c:b0:d0:82:31:02:29:bc:50:89:ea:8b:65: 01:99:56:88:67:63:29:c1:96:ae:ff:c3:9c:18:b1: 28:e2:d5:b8:a0:71:80:7a:4a:0e:43:09:85:25:ae: 7d:4c:8c:aa:4b:12:6a:ae:7a:0b:22:54:27:a0:0f: a4:be:fc:8e:bd:b1:e4:c0:2f:c3:50:da:21:57:48: 69:43:00:9d:15:83:59:47:7e:3e:0c:49:f0:ea:f0: 56:68:41:ca:7c:fe:d5:c4:4a:e4:e5:ae:69:b9:b7: 68:da:88:49:61:f9:ec:4e:78:12:ba:ca:14:25:04: be:71:7a:9d:3c:e8:db:d2:e6:b6:a1:86:9c:75:90: 57:28:23:b8:f6:9f:91:f0:31:78:24:c4:fa:eb:da: 33:17:6d:81:6d:2b:f7:48:96:ae:8a:e4:35:b9:b7: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.72.0/22 91.202.124.0/22 91.239.168.0/22 91.243.115.0/24 91.244.182.0/24 185.228.57.0/24 213.5.8.0/21 IPv6: 2001:67c:740::/48 2a0f:1a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44655 50898 Signature Algorithm: sha256WithRSAEncryption 79:47:a9:46:be:a2:2e:18:b4:8d:2d:0a:df:09:5e:d0:fa:84: 61:0c:89:00:a1:96:29:10:57:9b:73:71:c3:fb:d2:56:e3:56: 0e:32:c4:d1:17:74:17:35:51:ab:c5:28:0f:ce:70:e0:17:92: a9:cb:6e:69:81:fb:85:3b:3d:c3:e8:31:bd:95:bb:b1:da:0d: 0d:4b:fa:24:32:2b:2d:01:52:fe:23:d7:3e:99:e4:dc:b2:3d: 75:d6:56:20:0a:91:ae:07:71:5c:c2:56:14:38:1e:69:df:9b: ba:00:74:8b:a6:b7:ac:6e:e1:b7:3d:ce:22:db:d6:46:40:62: e9:bc:e3:9d:51:e9:7c:22:96:03:06:e8:0c:8f:af:fc:28:2b: 16:c7:d6:c5:f4:88:a5:cd:cf:fd:67:64:62:5f:11:dd:ce:41: 2a:f5:a5:59:e7:f5:b3:d6:ca:58:15:d9:76:91:db:7a:92:dd: e2:a3:4c:e1:8c:d6:f1:9c:15:9c:85:34:47:5e:07:92:d2:e3: a7:09:ff:3c:a0:cd:7f:ae:97:1d:9a:86:b5:16:8b:ce:96:99: 17:e0:8f:02:5a:77:62:af:50:5d:ce:87:38:1c:12:9e:74:d4: 6c:9d:41:0b:1d:6c:b3:f4:44:d3:51:4d:e5:e6:5e:c4:d5:da: 23:2c:43:3a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZqcWPTgMNIjQn8UZPu+igkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE5MTM0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzc3MjBjN2RjMWRjM2VkZDFkMGQ0N2Y5MjNiY2Q4MzNmMDZhZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvv1fUVmv4UwAA1eRCaGQH2kTNzR fjuSEiBV+KNwGmHQp1dW1BPhG5HH7Xb2ZsPusCcLzZfPphYUhzEnyWeUuRYdvKRf B7KoPbCNiLC8yqTuitG2Ojgqvd0uQGyw0IIxAim8UInqi2UBmVaIZ2MpwZau/8Oc GLEo4tW4oHGAekoOQwmFJa59TIyqSxJqrnoLIlQnoA+kvvyOvbHkwC/DUNohV0hp QwCdFYNZR34+DEnw6vBWaEHKfP7VxErk5a5pubdo2ohJYfnsTngSusoUJQS+cXqd POjb0ua2oYacdZBXKCO49p+R8DF4JMT669ozF22BbSv3SJauiuQ1ubdD+QIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFKd3IMfcHcPt0dDUf5I7zYM/Bq82MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2JhNzIx OS1hZDdjLTQ4YjAtOWM5Ni0xNzIyOGNlZjAwNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYmE3MjE5 LWFkN2MtNDhiMC05Yzk2LTE3MjI4Y2VmMDA0OS8xL3AzY2d4OXdkdy0zUjBOUl9r anZOZ3o4R3J6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAwBAIAATAqAwQCLv5IAwQCW8p8AwQCW++oAwQAW/NzAwQAW/S2 AwQAueQ5AwQD1QUIMBYEAgACMBADBwAgAQZ8B0ADBQMqDxoAMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAoCAwCubwIDAMbSMA0GCSqGSIb3DQEBCwUAA4IBAQB5R6lGvqIu GLSNLQrfCV7Q+oRhDIkAoZYpEFebc3HD+9JW41YOMsTRF3QXNVGrxSgPznDgF5Kp y25pgfuFOz3D6DG9lbux2g0NS/okMistAVL+I9c+meTcsj111lYgCpGuB3FcwlYU OB5p35u6AHSLpresbuG3Pc4i29ZGQGLpvOOdUel8IpYDBugMj6/8KCsWx9bF9Iil zc/9Z2RiXxHdzkEq9aVZ5/Wz1spYFdl2kdt6kt3io0zhjNbxnBWchTRHXgeS0uOn Cf88oM1/rpcdmoa1FovOlpkX4I8CWndir1Bdzoc4HBKedNRsnUELHWyz9ETTUU3l 5l7E1dojLEM6 -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:07 2025 by rpki-client