This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer File: rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer (raw, json) Hash identifier: iqhLOkH1Bi2jF6aZ4wuT6IS75NAs0PNBvgLhuPPMllc= Subject key identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC5420209EB755B48F2F7D6AC4D0A81DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 27 Nov 2025 12:20:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 31507 AS: 31634 IP: 78.110.80.0/20 IP: 83.166.0.0/19 IP: 2a0a:1000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:42:02:09:eb:75:5b:48:f2:f7:d6:ac:4d:0a:81:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 27 12:20:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac5d4cea41585a0a368401699280ac1b6bb73223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:68:3c:41:46:13:f2:6e:8d:0d:11:30:49: 8b:a3:ea:ba:0b:fe:38:bc:11:78:7f:b3:55:6e:6b: fc:c7:bb:bc:53:f7:c7:1e:99:37:af:1a:78:e5:80: 17:07:38:a2:8c:bb:de:3b:f4:b7:3e:5d:47:74:4c: ec:43:c5:d0:ce:7b:ea:d7:fe:13:67:9a:a0:7a:89: af:b4:b7:12:68:f2:64:14:4e:b1:b1:95:80:a8:96: 0b:98:45:a6:f5:75:a7:5e:b9:84:c0:de:90:09:62: 92:9d:41:c3:b5:9a:8d:20:5d:8f:6f:2a:e2:0f:a2: 37:96:e7:e5:ff:1d:a7:73:76:e7:6a:ca:52:1d:31: 7d:03:2d:df:b1:13:8b:47:47:01:89:20:d8:88:9a: 39:ed:ca:64:08:ad:8b:15:40:0d:c6:14:04:d4:ed: 30:74:69:37:44:9c:d9:f9:a0:97:af:b0:c2:7a:ff: b5:af:d2:0a:0a:89:f1:f7:0c:58:b9:9d:72:ae:69: 8b:c5:fc:23:26:ec:b7:5a:51:df:4a:c7:2f:ad:8b: 50:2a:05:9b:e2:b4:94:af:ed:6d:64:86:2d:41:78: af:ce:48:38:56:cf:57:a0:23:d6:25:f3:b5:aa:03: 84:fe:7a:04:26:9b:cd:87:d1:1e:dc:7d:70:13:3f: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.80.0/20 83.166.0.0/19 IPv6: 2a0a:1000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31507 31634 Signature Algorithm: sha256WithRSAEncryption 26:20:5c:5c:49:92:e3:1d:32:81:d8:af:ee:16:54:0a:95:0f: cf:ba:0a:cf:b4:3e:0f:f8:a5:4f:d2:50:52:24:8d:ea:be:86: a1:3c:2f:eb:53:54:70:1f:1d:98:9d:79:2a:9c:80:4e:4a:a6: 78:2e:42:ac:e0:23:f7:92:d4:00:30:9e:e7:2c:c0:fe:64:3f: 5d:6b:cd:4b:1a:e6:30:5b:db:08:e8:e7:db:53:7b:92:81:a4: 9e:e4:48:5c:d4:00:31:cf:1a:b5:eb:78:38:bd:42:4f:0f:81: bb:fa:8f:9b:f0:ce:16:c2:64:c6:39:ec:7f:8c:34:97:85:92: 41:6d:90:f9:ca:42:a0:c9:26:ca:b4:1d:c5:26:95:4f:43:57: 33:45:df:69:8e:98:36:14:18:5c:eb:e0:c6:49:1d:47:73:8e: 4d:dc:c2:32:74:3a:f2:2a:7f:ad:b7:f9:d5:c6:15:75:b6:c8: ee:46:1f:e2:57:7a:65:da:9b:f8:9f:b4:54:b0:3c:ea:16:b4: d6:1c:7d:93:58:a5:46:9d:59:ff:f0:3b:bc:f0:b1:49:5a:4b: 01:99:6f:5f:9d:86:56:64:79:54:91:99:1b:38:12:2e:26:96: 27:8f:05:21:a6:93:49:60:15:43:ad:09:9f:28:f2:84:2c:df: 32:c3:2f:e0 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZrFQgIJ63VbSPL31qxNCoHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI3MTIyMDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVkNGNlYTQxNTg1YTBhMzY4NDAxNjk5MjgwYWMxYjZiYjczMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxRoPEFGE/JujQ0RMEmLo+q6C/44 vBF4f7NVbmv8x7u8U/fHHpk3rxp45YAXBziijLveO/S3Pl1HdEzsQ8XQznvq1/4T Z5qgeomvtLcSaPJkFE6xsZWAqJYLmEWm9XWnXrmEwN6QCWKSnUHDtZqNIF2Pbyri D6I3lufl/x2nc3bnaspSHTF9Ay3fsROLR0cBiSDYiJo57cpkCK2LFUANxhQE1O0w dGk3RJzZ+aCXr7DCev+1r9IKConx9wxYuZ1yrmmLxfwjJuy3WlHfSscvrYtQKgWb 4rSUr+1tZIYtQXivzkg4Vs9XoCPWJfO1qgOE/noEJpvNh9Ee3H1wEz+MrwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFKxdTOpBWFoKNoQBaZKArBtrtzIjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzVhNWU4 Ny05NWRkLTQ1YjMtODdjMS1iYWRkNjk2Y2M5ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNWE1ZTg3 LTk1ZGQtNDViMy04N2MxLWJhZGQ2OTZjYzk4Ni8xL3JGMU02a0ZZV2dvMmhBRnBr b0NzRzJ1M01pTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQETm5QAwQFU6YAMA0EAgACMAcDBQMqChAAMB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAnsTAgJ7kjANBgkqhkiG9w0BAQsFAAOCAQEA JiBcXEmS4x0ygdiv7hZUCpUPz7oKz7Q+D/ilT9JQUiSN6r6GoTwv61NUcB8dmJ15 KpyATkqmeC5CrOAj95LUADCe5yzA/mQ/XWvNSxrmMFvbCOjn21N7koGknuRIXNQA Mc8atet4OL1CTw+Bu/qPm/DOFsJkxjnsf4w0l4WSQW2Q+cpCoMkmyrQdxSaVT0NX M0XfaY6YNhQYXOvgxkkdR3OOTdzCMnQ68ip/rbf51cYVdbbI7kYf4ld6Zdqb+J+0 VLA86ha01hx9k1ilRp1Z//A7vPCxSVpLAZlvX52GVmR5VJGZGzgSLiaWJ48FIaaT SWAVQ60JnyjyhCzfMsMv4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:35 2025 by rpki-client