This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer File: rnNsr92267jXx2lD9KJx4DhRCqk.cer (raw, json) Hash identifier: zp9UgWwt54o4td+mpkvONIdXK06TXN3YGJ4uyvZ/ClM= Subject key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7393EE58A761639A39C1C303B4F4C42B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 15:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 201500 AS: 204303 AS: 209906 AS: 214636 AS: 216135 IP: 5.182.164.0/22 IP: 45.8.4.0/22 IP: 185.72.212.0/22 IP: 185.137.52.0 -- 185.137.59.255 IP: 185.137.68.0/22 IP: 185.137.104.0/22 IP: 185.143.0.0/22 IP: 185.143.140.0/22 IP: 185.174.212.0/22 IP: 185.232.172.0/22 IP: 185.234.156.0/22 IP: 185.236.12.0/22 IP: 185.238.144.0/22 IP: 2a07:d900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:93:ee:58:a7:61:63:9a:39:c1:c3:03:b4:f4:c4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 15:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:89:ee:74:43:22:e6:21:b9:35:e8:c5:fc: 3c:f0:93:71:9f:1e:d2:36:52:0a:45:1c:ad:b0:45: 09:97:5b:9a:0c:98:e8:69:51:e1:f3:63:5d:89:3b: db:5e:12:5c:39:df:19:a6:69:99:ba:56:83:bd:58: 87:35:4d:2c:77:dc:d8:d2:50:5a:bc:10:c7:f0:4d: a8:57:76:a4:b9:df:f3:95:26:55:72:fb:2c:bc:1a: 72:9c:36:1b:f7:de:21:17:cd:12:d9:05:25:bb:78: c8:9c:61:e1:6b:ec:f4:b1:2d:8e:83:87:91:63:7c: 7c:47:36:39:a0:00:aa:83:1d:b4:8f:a0:be:86:bd: 6c:93:a8:31:3b:56:a9:04:e6:39:3f:f8:68:d6:76: 7e:62:b7:09:6b:90:ab:f9:d3:5a:e6:72:de:6c:1f: 29:6b:ef:40:b4:88:cb:54:a3:c3:80:26:4e:63:bd: af:64:bf:11:69:76:51:ed:c1:23:53:7d:dc:94:00: ea:d8:d1:cd:16:67:85:50:00:c8:a1:62:20:a7:d8: 3e:9d:64:df:34:b3:99:e1:d3:af:fd:7a:f6:58:05: 76:31:3a:22:8e:ad:e6:f2:7b:ab:03:a7:ba:50:48: b6:9e:82:54:27:88:0b:8d:56:f9:12:fc:c6:cd:60: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.164.0/22 45.8.4.0/22 185.72.212.0/22 185.137.52.0-185.137.59.255 185.137.68.0/22 185.137.104.0/22 185.143.0.0/22 185.143.140.0/22 185.174.212.0/22 185.232.172.0/22 185.234.156.0/22 185.236.12.0/22 185.238.144.0/22 IPv6: 2a07:d900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201500 204303 209906 214636 216135 Signature Algorithm: sha256WithRSAEncryption 84:54:e9:14:d0:48:e6:1b:fe:2a:9c:0f:74:0c:80:f4:14:a6: 58:22:5c:45:f1:23:30:b0:36:76:72:b7:8d:8f:af:de:60:be: b0:34:6c:7b:c2:18:69:af:91:38:cb:a2:64:19:c2:7b:4a:de: f8:93:ed:8f:5c:25:cb:50:6b:5a:09:ef:cf:fa:cd:e9:f7:a7: 73:3a:e6:0c:b7:1f:b4:60:b1:dd:6a:4b:57:bb:ef:4e:8b:73: 9a:3a:1e:46:97:d9:86:17:70:d9:b0:02:9f:4c:a1:fd:e8:d8: 34:62:be:1a:b3:c6:41:a0:40:68:5c:52:ff:3f:eb:4d:58:aa: fc:cc:15:2b:bf:40:39:91:66:40:40:21:e9:e0:7c:59:1b:14: e3:3a:94:6b:ad:a1:1e:ee:29:bc:66:97:bd:bc:87:f5:a1:59: 9b:dc:f2:fa:5c:78:83:b4:e4:3a:f0:04:5d:8c:64:3d:f8:3e: b0:25:d0:c1:47:2f:68:ee:89:1b:cb:6a:b1:41:e4:83:4c:67: 85:3d:64:c8:95:67:8a:21:fe:96:b6:79:29:2d:5f:af:37:78: 03:5a:e2:78:7c:bf:b4:b3:de:00:34:3c:c2:6e:24:e1:46:95: 3e:e5:98:cf:1f:ce:fb:5b:6f:9a:56:dc:5c:20:f8:b1:74:6f: 6b:60:c0:e2 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZpzk+5Yp2FjmjnBwwO09MQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTU0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTczNmNhZmRkYjZlYmI4ZDdjNzY5NDNmNGEyNzFlMDM4NTEwYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaqJ7nRDIuYhuTXoxfw88JNxnx7S NlIKRRytsEUJl1uaDJjoaVHh82NdiTvbXhJcOd8ZpmmZulaDvViHNU0sd9zY0lBa vBDH8E2oV3akud/zlSZVcvssvBpynDYb994hF80S2QUlu3jInGHha+z0sS2Og4eR Y3x8RzY5oACqgx20j6C+hr1sk6gxO1apBOY5P/ho1nZ+YrcJa5Cr+dNa5nLebB8p a+9AtIjLVKPDgCZOY72vZL8RaXZR7cEjU33clADq2NHNFmeFUADIoWIgp9g+nWTf NLOZ4dOv/Xr2WAV2MToijq3m8nurA6e6UEi2noJUJ4gLjVb5EvzGzWAwzwIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFK5zbK/dtuu418dpQ/SiceA4UQqpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1Lzg2ZTMy Yi1mMDY3LTQ1MGYtYjY3Yy0zYWExNTBhOTJhYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvODZlMzJi LWYwNjctNDUwZi1iNjdjLTNhYTE1MGE5MmFiNy8xL3JuTnNyOTIyNjdqWHgybEQ5 S0p4NERoUkNxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBcBAIAATBWAwQCBbakAwQCLQgEAwQCuUjUMAwDBAK5iTQDBAK5 iTgDBAK5iUQDBAK5iWgDBAK5jwADBAK5j4wDBAK5rtQDBAK56KwDBAK56pwDBAK5 7AwDBAK57pAwDQQCAAIwBwMFAyoH2QAwLgYIKwYBBQUHAQgBAf8EHzAdoBswGQID AxMcAgMDHg8CAwMz8gIDA0ZsAgMDTEcwDQYJKoZIhvcNAQELBQADggEBAIRU6RTQ SOYb/iqcD3QMgPQUplgiXEXxIzCwNnZyt42Pr95gvrA0bHvCGGmvkTjLomQZwntK 3viT7Y9cJctQa1oJ78/6zen3p3M65gy3H7Rgsd1qS1e7706Lc5o6HkaX2YYXcNmw Ap9Mof3o2DRivhqzxkGgQGhcUv8/601YqvzMFSu/QDmRZkBAIengfFkbFOM6lGut oR7uKbxml728h/WhWZvc8vpceIO05DrwBF2MZD34PrAl0MFHL2juiRvLarFB5INM Z4U9ZMiVZ4oh/pa2eSktX683eANa4nh8v7Sz3gA0PMJuJOFGlT7lmM8fzvtbb5pW 3Fwg+LF0b2tgwOI= -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:23 2025 by rpki-client