This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer File: tGasCkklUoPNUwZpcc17Pf4qPOg.cer (raw, json) Hash identifier: l8PLTVUydGL6GRnTaUHe8EUXy1tE7TlHV1axH0NDq7E= Subject key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9B7ED25CD82A6834F2D5B6E8FDF5FD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:15:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48101 IP: 37.25.44.0/22 IP: 91.151.240.0/20 IP: 91.228.232.0 -- 91.228.234.255 IP: 95.166.0.0/18 IP: 98.96.160.0/20 IP: 134.19.192.0/21 IP: 134.65.128.0/19 IP: 146.103.128.0/18 IP: 176.20.128.0/18 IP: 185.16.160.0/22 IP: 185.122.192.0/22 IP: 199.15.232.0/21 IP: 2a04:200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:b7:ed:25:cd:82:a6:83:4f:2d:5b:6e:8f:df:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:15:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b6:3e:bf:01:83:24:53:4a:ef:65:9c:56:07: c3:80:cb:ae:ac:4b:2e:49:77:ba:31:32:04:50:ca: 05:02:88:58:a4:01:04:bf:73:c9:c8:40:cf:09:b7: 87:fb:c6:61:6b:d8:09:b2:23:8d:10:10:e9:79:be: 22:43:25:5f:63:d5:df:28:08:cb:2f:91:a2:99:a7: 2a:70:76:34:c9:ca:fc:67:bf:7f:9d:6e:93:ef:90: 69:4e:ae:25:b0:bd:a6:db:12:fe:79:87:72:99:7e: bf:e7:c1:bc:c9:8d:21:94:d7:d8:29:b3:5b:c6:af: 58:fb:fa:39:cf:ef:86:b5:1a:48:bf:e9:4b:22:76: 69:50:10:49:74:15:86:f8:e5:68:03:82:56:b2:51: 11:a2:21:a8:12:40:ac:92:9f:3b:63:a7:80:45:91: e3:b3:cc:24:94:49:87:b3:fe:a2:f4:f0:56:e3:da: 42:da:87:af:b0:99:10:b6:ee:ac:17:52:69:3e:7a: f4:69:70:fa:04:a4:7b:f2:d4:d0:e3:8a:75:3a:9d: 76:22:e8:e0:b3:99:f5:3d:8e:68:cf:b5:a2:d6:2b: 5f:cc:3a:7e:86:3e:04:6e:2c:ab:8a:c6:6a:a4:b0: fd:0e:65:bd:04:f5:76:4b:c9:29:bf:6a:a0:6e:2f: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.44.0/22 91.151.240.0/20 91.228.232.0-91.228.234.255 95.166.0.0/18 98.96.160.0/20 134.19.192.0/21 134.65.128.0/19 146.103.128.0/18 176.20.128.0/18 185.16.160.0/22 185.122.192.0/22 199.15.232.0/21 IPv6: 2a04:200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48101 Signature Algorithm: sha256WithRSAEncryption 9b:22:13:71:54:0f:1e:4c:ff:67:7a:53:0d:41:1e:b5:82:ba: 23:c1:02:13:f3:74:01:07:50:66:14:2f:c6:d3:5a:96:47:75: 63:68:3a:6f:71:44:00:94:3b:c3:e1:2f:b5:0f:f4:cc:89:69: d7:0d:b9:11:6f:ec:bb:5d:a2:16:39:e4:05:71:2c:40:cc:52: f2:63:86:23:5f:51:b9:52:87:ef:c4:f2:e1:a9:46:ca:33:08: 44:45:d0:90:44:e0:94:04:52:ba:9f:da:f9:b3:f6:f7:d8:d1: c8:96:a1:d1:8c:81:e3:3a:12:ab:c9:bc:87:7a:d2:19:6a:30: 3b:67:33:2f:23:61:a8:74:07:33:58:9b:20:89:e6:64:6d:4d: 00:37:3e:0b:51:0e:0b:9c:43:c2:99:27:5c:80:2e:1b:cf:01: 29:70:98:d6:bb:67:72:ed:00:df:32:b2:b1:04:b8:db:50:09: 94:ab:8f:f2:7a:8c:92:a8:eb:4e:1d:2d:0a:c7:57:d8:da:51: 6d:96:f1:28:4a:be:c6:f9:e0:b8:62:25:2e:b8:ef:3b:63:f0: 31:bb:5e:a1:f4:b6:68:5c:58:8f:3b:be:ca:f7:8f:8f:2d:78: 5f:7b:ed:2e:d1:a7:2c:ba:33:f9:a8:5e:7a:4c:9c:15:09:ab: cb:4f:db:3b -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZrpt+0lzYKmg08tW26P31/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQxNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDY2YWMwYTQ5MjU1MjgzY2Q1MzA2Njk3MWNkN2IzZGZlMmEzY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LY+vwGDJFNK72WcVgfDgMuurEsu SXe6MTIEUMoFAohYpAEEv3PJyEDPCbeH+8Zha9gJsiONEBDpeb4iQyVfY9XfKAjL L5GimacqcHY0ycr8Z79/nW6T75BpTq4lsL2m2xL+eYdymX6/58G8yY0hlNfYKbNb xq9Y+/o5z++GtRpIv+lLInZpUBBJdBWG+OVoA4JWslERoiGoEkCskp87Y6eARZHj s8wklEmHs/6i9PBW49pC2oevsJkQtu6sF1JpPnr0aXD6BKR78tTQ44p1Op12Iujg s5n1PY5oz7Wi1itfzDp+hj4EbiyrisZqpLD9DmW9BPV2S8kpv2qgbi+ZrQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFLRmrApJJVKDzVMGaXHNez3+KjzoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzEzM2I1 Mi03YTY2LTQxYWItYWVlZS1jOWI0NzBkYzI0MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMTMzYjUy LTdhNjYtNDFhYi1hZWVlLWM5YjQ3MGRjMjQwYi8xL3RHYXNDa2tsVW9QTlV3WnBj YzE3UGY0cVBPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBWBAIAATBQAwQCJRksAwQEW5fwMAwDBANb5OgDBABb5OoDBAZf pgADBARiYKADBAOGE8ADBAWGQYADBAaSZ4ADBAawFIADBAK5EKADBAK5esADBAPH D+gwDQQCAAIwBwMFAyoEAgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALvlMA0G CSqGSIb3DQEBCwUAA4IBAQCbIhNxVA8eTP9nelMNQR61grojwQIT83QBB1BmFC/G 01qWR3VjaDpvcUQAlDvD4S+1D/TMiWnXDbkRb+y7XaIWOeQFcSxAzFLyY4YjX1G5 UofvxPLhqUbKMwhERdCQROCUBFK6n9r5s/b32NHIlqHRjIHjOhKrybyHetIZajA7 ZzMvI2GodAczWJsgieZkbU0ANz4LUQ4LnEPCmSdcgC4bzwEpcJjWu2dy7QDfMrKx BLjbUAmUq4/yeoySqOtOHS0Kx1fY2lFtlvEoSr7G+eC4YiUuuO87Y/Axu16h9LZo XFiPO77K94+PLXhfe+0u0acsujP5qF56TJwVCavLT9s7 -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:20 2025 by rpki-client