This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer (raw, json) Hash identifier: qUTN/h53mrIYcO9gxec/m+J749LoZPpbwHe7xlsvDNU= Subject key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B360DB1D6AB1052F6C10AD34FFD0791ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 10:00:25 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 49717 AS: 51002 AS: 203877 IP: 178.217.8.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:b1:d6:ab:10:52:f6:c1:0a:d3:4f:fd:07:91:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 10:00:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:49:7e:df:58:32:c5:aa:5a:a5:af:fd:56: 41:87:27:c4:15:a3:80:c6:fb:56:ba:fd:52:57:c3: 1e:07:18:94:c2:3a:31:c1:09:8a:85:47:2c:75:cb: 10:e7:6a:4a:78:4b:97:6e:0c:fe:fc:7b:ab:ce:ab: be:7c:4e:a1:9d:43:41:7e:3b:5f:d5:60:4a:78:dd: 35:e4:f0:17:b3:d3:6b:74:a2:59:68:41:77:4b:64: c6:8e:5d:32:d3:15:fd:d3:ef:9f:e9:ff:c0:0d:38: ea:b3:d3:f3:69:89:a8:33:79:12:23:af:a5:2f:70: 63:7c:d2:eb:a6:ff:b6:6c:98:d2:39:11:4f:34:f0: f8:6b:50:ce:74:24:e2:aa:ec:5a:2b:d9:d8:e0:1e: ef:ff:cc:e7:4e:bc:65:87:0c:df:11:04:64:b7:40: c3:5c:bb:13:f3:a7:92:a2:d1:dc:a6:4b:98:94:4d: 76:7b:65:f0:3b:db:b8:56:4b:73:44:05:01:fb:72: 80:6e:89:03:95:1c:cf:ae:47:94:ae:20:0a:ae:73: a7:74:4b:16:69:ea:5b:62:0c:84:eb:cc:30:47:2d: b4:ab:ed:d9:ff:8a:28:c6:71:03:62:c1:02:7f:95: 40:1b:6f:7d:e9:28:53:18:7a:c1:4b:23:f7:14:f0: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49717 51002 203877 Signature Algorithm: sha256WithRSAEncryption 30:5b:21:4f:d6:e9:8d:93:b9:7b:d6:22:13:bc:fc:22:4a:b7: 29:1c:06:40:55:2a:60:2c:89:f7:57:e1:4d:a1:62:69:2c:8b: 1f:6f:7b:83:48:46:78:c3:45:b2:fb:91:91:72:b3:e0:fa:bb: d2:3b:79:d6:17:94:94:c4:ef:0b:22:52:79:52:a6:25:f2:da: 40:4a:99:17:70:be:ed:fc:ce:b7:93:fb:be:f3:13:13:6e:9d: da:46:26:98:84:9a:94:85:a7:ff:67:b2:60:72:f2:18:35:8e: 84:ca:13:08:ba:e0:8d:02:95:c8:10:98:d0:a6:49:08:cc:eb: 27:6c:6a:f7:4b:24:b4:c2:9b:a3:93:9d:7c:94:0b:bf:a8:f2: c8:1d:83:10:3d:0a:3c:fc:22:3c:9f:f5:3c:33:71:e1:13:07: d7:24:86:7a:5c:b3:4b:b1:2a:29:01:02:7e:98:85:df:b3:79: c0:6c:bf:d9:d9:83:f6:19:61:0c:1f:ac:c2:dc:e8:a8:72:d9: fc:60:25:fe:12:08:fb:e0:4f:50:6d:54:2a:75:0a:f9:fa:1a: c3:fd:3d:73:cb:cc:ee:e2:fe:8b:19:22:f3:a7:e7:b4:a9:53: 2b:32:a1:25:f6:12:84:f1:56:40:3e:2a:41:71:6a:5c:bc:6b: e3:fe:3d:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZs2DbHWqxBS9sEK00/9B5HtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTAwMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ5MjA3OTk0YmE5YzdkOTFlYTdlNDc5ZmVmZDFiODA5OWY2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T5Jft9YMsWqWqWv/VZBhyfEFaOA xvtWuv1SV8MeBxiUwjoxwQmKhUcsdcsQ52pKeEuXbgz+/Hurzqu+fE6hnUNBfjtf 1WBKeN015PAXs9NrdKJZaEF3S2TGjl0y0xX90++f6f/ADTjqs9PzaYmoM3kSI6+l L3BjfNLrpv+2bJjSORFPNPD4a1DOdCTiquxaK9nY4B7v/8znTrxlhwzfEQRkt0DD XLsT86eSotHcpkuYlE12e2XwO9u4VktzRAUB+3KAbokDlRzPrkeUriAKrnOndEsW aepbYgyE68wwRy20q+3Z/4ooxnEDYsECf5VAG2996ShTGHrBSyP3FPCiLwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFK3ZIHmUupx9kep+R5/v0bgJn2LOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzQ3YTlj OS1kNDU3LTQ1NzktYjJiMC1lNTIxMjU3NGY5ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNDdhOWM5 LWQ0NTctNDU3OS1iMmIwLWU1MjEyNTc0ZjllYy8xL3Jka2dlWlM2bkgyUjZuNUhu LV9SdUFtZllzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDstkIMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8C AwDCNQIDAMc6AgMDHGUwDQYJKoZIhvcNAQELBQADggEBADBbIU/W6Y2TuXvWIhO8 /CJKtykcBkBVKmAsifdX4U2hYmksix9ve4NIRnjDRbL7kZFys+D6u9I7edYXlJTE 7wsiUnlSpiXy2kBKmRdwvu38zreT+77zExNundpGJpiEmpSFp/9nsmBy8hg1joTK Ewi64I0ClcgQmNCmSQjM6ydsavdLJLTCm6OTnXyUC7+o8sgdgxA9Cjz8Ijyf9Twz ceETB9ckhnpcs0uxKikBAn6Yhd+zecBsv9nZg/YZYQwfrMLc6Khy2fxgJf4SCPvg T1BtVCp1Cvn6GsP9PXPLzO7i/osZIvOn57SpUysyoSX2EoTxVkA+KkFxaly8a+P+ PXg= -----END CERTIFICATE-----Generated at Sat Dec 20 09:47:55 2025 by rpki-client