This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer File: p5zxDDHy7btVfVVAlzyIB5szIA8.cer (raw, json) Hash identifier: 91kOKerQGUdcZ9z6XPIqO1Cvjl1cfurOl7rSMJLpJHE= Subject key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE43858D8A9591ECFBFFD80F071B169FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 12:38:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 20565 AS: 203585 IP: 45.81.208.0/22 IP: 45.153.204.0/22 IP: 84.246.104.0/24 IP: 85.222.200.0/21 IP: 185.16.220.0/22 IP: 185.113.48.0/22 IP: 185.241.0.0/22 IP: 2a04:180::/29 IP: 2a06:6800::/29 IP: 2a11:3380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:38:58:d8:a9:59:1e:cf:bf:fd:80:f0:71:b1:69:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 12:38:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a79cf10c31f2edbb557d5540973c88079b33200f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:f1:f8:69:a2:98:1b:53:97:f2:66:82:3a: 60:21:d2:bd:83:8a:fe:c4:ff:23:f4:1f:b0:84:a1: a5:b6:03:0b:cb:44:22:50:ea:3d:7a:eb:9d:33:fe: ae:f1:f3:ad:37:0f:37:2d:2e:69:2c:e4:18:37:d6: 82:98:81:96:df:6d:c5:29:3c:ab:13:93:ee:ae:27: 17:b7:1f:39:b9:32:4f:41:df:96:10:83:af:f2:44: f2:b9:07:4a:38:56:e4:6b:e8:00:69:0e:d6:69:d7: 44:d6:33:60:ad:52:f3:c3:ab:00:c5:98:5a:5a:d4: c9:a7:46:b1:1c:2c:76:28:4d:5c:55:bb:26:03:31: a7:0b:77:60:0f:42:af:7a:8f:e9:a9:28:50:54:89: 4b:2e:08:17:be:e8:ce:c4:e6:f6:88:b6:01:49:58: bb:42:e4:a6:d5:8f:a0:a1:00:d9:42:c4:04:ee:b7: b4:d9:aa:bc:7d:11:0c:c0:f6:a9:15:c1:b7:5e:0b: 40:91:ad:ad:dd:9f:55:01:1f:7b:c1:1a:26:68:20: a5:3d:0b:1b:77:69:d3:c7:d5:19:d3:7b:9c:cc:41: 06:b5:eb:61:49:2c:f9:8b:83:d2:bc:7b:ee:77:e4: d9:96:1b:5c:ef:a2:99:23:25:7d:d4:ff:5d:c4:3d: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.208.0/22 45.153.204.0/22 84.246.104.0/24 85.222.200.0/21 185.16.220.0/22 185.113.48.0/22 185.241.0.0/22 IPv6: 2a04:180::/29 2a06:6800::/29 2a11:3380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20565 203585 Signature Algorithm: sha256WithRSAEncryption 0d:c7:0c:88:96:79:46:70:23:f0:d2:bc:8a:e6:2f:44:4e:2d: 75:2a:02:7f:26:18:0a:79:c9:2b:66:02:a4:0a:64:cd:da:62: 41:47:87:23:ec:81:2d:a4:57:19:8e:ec:c8:e0:8d:a8:a0:cc: df:84:12:ee:d7:fb:08:6b:c1:7e:81:23:82:1e:5e:c7:84:84: 57:32:3b:4f:7c:05:9e:c8:6f:07:9e:ca:94:28:f0:d8:a5:c4: 34:3a:d8:bb:07:be:5e:55:9d:6a:18:26:28:72:ac:26:e0:be: 03:5c:72:5e:d5:af:2c:4b:2d:2d:98:62:8c:b5:0e:18:35:06: 33:fe:b5:18:cf:04:8d:cd:62:a8:73:ba:80:11:b2:b5:ca:e1: 8f:1c:ae:f6:c5:e0:b5:ec:1e:90:3d:fa:64:32:4e:41:81:2e: cf:0c:ec:50:ce:8f:66:b5:ca:ec:6f:e2:11:ba:0c:e7:82:22: 1e:41:43:f1:5f:db:2a:59:f3:64:e4:af:e6:36:df:a8:0c:7c: 80:aa:f0:40:32:21:08:c8:17:8f:96:45:f5:dc:67:6f:54:a8: e2:76:6d:8b:b1:a6:f3:21:53:a8:3c:1c:69:95:d1:b2:91:75: ca:42:04:18:3b:1e:43:23:03:4b:69:73:21:da:bd:08:5f:6a: 87:ac:d0:24 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZrkOFjYqVkez7/9gPBxsWn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTIzODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzljZjEwYzMxZjJlZGJiNTU3ZDU1NDA5NzNjODgwNzliMzMyMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx7x+GmimBtTl/JmgjpgIdK9g4r+ xP8j9B+whKGltgMLy0QiUOo9euudM/6u8fOtNw83LS5pLOQYN9aCmIGW323FKTyr E5PuricXtx85uTJPQd+WEIOv8kTyuQdKOFbka+gAaQ7WaddE1jNgrVLzw6sAxZha WtTJp0axHCx2KE1cVbsmAzGnC3dgD0Kveo/pqShQVIlLLggXvujOxOb2iLYBSVi7 QuSm1Y+goQDZQsQE7re02aq8fREMwPapFcG3XgtAka2t3Z9VAR97wRomaCClPQsb d2nTx9UZ03uczEEGtethSSz5i4PSvHvud+TZlhtc76KZIyV91P9dxD0cbwIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFKec8Qwx8u27VX1VQJc8iAebMyAPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzI2OWJl OS05M2ZmLTRjMTItOTFiYS0xYTliMTU1NTEzNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMjY5YmU5 LTkzZmYtNGMxMi05MWJhLTFhOWIxNTU1MTM2YS8xL3A1enhEREh5N2J0VmZWVkFs enlJQjVzeklBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQCLVHQAwQCLZnMAwQAVPZoAwQDVd7IAwQCuRDc AwQCuXEwAwQCufEAMBsEAgACMBUDBQMqBAGAAwUDKgZoAAMFAyoRM4AwHgYIKwYB BQUHAQgBAf8EDzANoAswCQICUFUCAwMbQTANBgkqhkiG9w0BAQsFAAOCAQEADccM iJZ5RnAj8NK8iuYvRE4tdSoCfyYYCnnJK2YCpApkzdpiQUeHI+yBLaRXGY7syOCN qKDM34QS7tf7CGvBfoEjgh5ex4SEVzI7T3wFnshvB57KlCjw2KXENDrYuwe+XlWd ahgmKHKsJuC+A1xyXtWvLEstLZhijLUOGDUGM/61GM8Ejc1iqHO6gBGytcrhjxyu 9sXgtewekD36ZDJOQYEuzwzsUM6PZrXK7G/iEboM54IiHkFD8V/bKlnzZOSv5jbf qAx8gKrwQDIhCMgXj5ZF9dxnb1So4nZti7Gm8yFTqDwcaZXRspF1ykIEGDseQyMD S2lzIdq9CF9qh6zQJA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:12:46 2025 by rpki-client