This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer File: urRT2Xui9KBFhD5rSpU7PlEG6vI.cer (raw, json) Hash identifier: NmoaO5d1T05O07AZ2zNbiPTi+xPvu9jNOQkziukoXwo= Subject key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC9A994D847318991AC35FE638BA90589 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 08:52:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 29385 IP: 94.230.224.0/24 IP: 94.230.227.0/24 IP: 94.230.232.0/24 IP: 213.206.32.0 -- 213.206.38.255 IP: 213.206.43.0/24 IP: 2a02:c8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:a9:94:d8:47:31:89:91:ac:35:fe:63:8b:a9:05:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 08:52:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:8f:4c:b2:95:6f:4d:9f:ff:91:7b:b0:e3: c2:d4:83:fe:67:76:7d:00:67:98:36:49:37:6a:6a: 42:d9:11:4f:02:c0:ad:55:25:64:17:d2:78:4e:fb: 24:81:57:b3:bf:4e:20:cf:6a:20:d4:48:51:1b:f1: 3e:36:21:95:fa:ee:fc:95:9d:46:87:a2:cb:f8:59: b5:46:35:f8:70:ba:66:3f:0f:08:af:4d:03:cc:fe: 7d:17:ba:96:49:c0:54:93:45:d6:d1:6a:5a:7b:dc: 50:ab:0d:3d:46:bb:7c:4d:63:25:2d:42:8d:91:84: 35:eb:e3:07:fd:f6:7a:3c:19:6e:11:eb:68:24:a1: 10:b7:bd:61:9b:b8:b8:00:30:c9:62:dc:20:b8:70: 50:46:50:7e:44:f2:91:9c:49:78:bf:2c:c7:b7:eb: dc:94:3c:da:db:b7:f1:08:9a:1e:01:12:db:81:9c: 7a:13:87:c0:2b:81:57:75:d1:dc:75:3c:a5:4c:25: 6f:6a:47:29:1a:1d:43:bd:6d:c6:03:12:98:49:35: 20:88:96:5e:c8:d5:2d:8e:fc:88:f4:5c:95:b2:42: 2f:b3:85:a7:39:8f:7a:3d:f2:a1:2d:14:bd:ef:09: 31:1e:25:01:15:af:86:85:db:5e:f8:da:1a:0c:ad: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.230.224.0/24 94.230.227.0/24 94.230.232.0/24 213.206.32.0-213.206.38.255 213.206.43.0/24 IPv6: 2a02:c8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29385 Signature Algorithm: sha256WithRSAEncryption 5e:66:ca:47:cd:da:2f:33:c4:59:fe:81:25:12:4f:65:ca:54: 94:ab:07:8b:ef:44:7e:4a:2a:46:5e:f2:f9:ab:4f:4e:da:30: 14:97:b0:a1:bb:c9:16:83:b8:24:b0:cf:d6:f5:55:f4:77:f6: 3d:b2:43:8e:83:a0:89:4c:c8:a0:00:86:73:24:72:e2:cf:a9: de:3d:25:14:88:0a:51:6b:97:14:f5:c9:8e:ee:cc:e8:a9:4b: 2e:3c:db:ad:e8:96:75:26:bc:99:9a:89:b3:45:a6:04:88:56: 15:a4:40:e2:e2:7c:96:e5:e8:44:54:96:59:67:6c:22:32:1a: 97:9a:71:21:df:fd:2f:37:73:12:15:47:58:a6:4f:6b:a7:75: 07:1a:ce:6e:50:57:c3:68:99:7e:c5:6f:68:88:82:ab:59:fc: ae:69:a6:80:67:93:66:d5:95:a2:4f:c9:bc:45:b9:3f:4e:9f: d3:1d:f1:21:63:73:85:62:9c:61:1f:8d:26:63:51:d7:95:c8: 16:fe:68:3b:cb:46:8b:f2:3f:74:14:16:6c:e4:41:8a:24:df: 56:3f:f8:30:0c:96:c0:c5:7b:f0:25:51:43:1d:42:ee:ad:19: c2:f2:58:64:20:04:f3:53:95:bc:2f:09:c9:07:36:73:41:ad: 0e:a2:1b:e3 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZrJqZTYRzGJkaw1/mOLqQWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MDg1MjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWI0NTNkOTdiYTJmNGEwNDU4NDNlNmI0YTk1M2IzZTUxMDZlYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj6PTLKVb02f/5F7sOPC1IP+Z3Z9 AGeYNkk3ampC2RFPAsCtVSVkF9J4TvskgVezv04gz2og1EhRG/E+NiGV+u78lZ1G h6LL+Fm1RjX4cLpmPw8Ir00DzP59F7qWScBUk0XW0Wpae9xQqw09Rrt8TWMlLUKN kYQ16+MH/fZ6PBluEetoJKEQt71hm7i4ADDJYtwguHBQRlB+RPKRnEl4vyzHt+vc lDza27fxCJoeARLbgZx6E4fAK4FXddHcdTylTCVvakcpGh1DvW3GAxKYSTUgiJZe yNUtjvyI9FyVskIvs4WnOY96PfKhLRS97wkxHiUBFa+Ghdte+NoaDK1XUwIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFLq0U9l7ovSgRYQ+a0qVOz5RBuryMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzY3MDNj YS1jZWQ0LTQyMDctYWIwNS00YTZmNTU3NzFiZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNjcwM2Nh LWNlZDQtNDIwNy1hYjA1LTRhNmY1NTc3MWJkMS8xL3VyUlQyWHVpOUtCRmhENXJT cFU3UGxFRzZ2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQAXubgAwQAXubjAwQAXuboMAwDBAXVziADBADV ziYDBADVziswDQQCAAIwBwMFAyoCyMAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC cskwDQYJKoZIhvcNAQELBQADggEBAF5mykfN2i8zxFn+gSUST2XKVJSrB4vvRH5K KkZe8vmrT07aMBSXsKG7yRaDuCSwz9b1VfR39j2yQ46DoIlMyKAAhnMkcuLPqd49 JRSIClFrlxT1yY7uzOipSy48263olnUmvJmaibNFpgSIVhWkQOLifJbl6ERUllln bCIyGpeacSHf/S83cxIVR1imT2undQcazm5QV8NomX7Fb2iIgqtZ/K5ppoBnk2bV laJPybxFuT9On9Md8SFjc4VinGEfjSZjUdeVyBb+aDvLRovyP3QUFmzkQYok31Y/ +DAMlsDFe/AlUUMdQu6tGcLyWGQgBPNTlbwvCckHNnNBrQ6iG+M= -----END CERTIFICATE-----Generated at Sat Dec 6 06:41:12 2025 by rpki-client