This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer File: xlodocsckgri-bdIJw_e2HN6kYQ.cer (raw, json) Hash identifier: Y5fDY5voeGal1P1ooMk7CjjQad3d5sot8Kg7w1Ok+cU= Subject key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE48AC53C2BD2C4129A48A0F08A1651C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 14:08:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 56434 IP: 37.44.199.0/24 IP: 45.67.215.0/24 IP: 45.129.79.0/24 IP: 45.136.144.0/23 IP: 46.150.240.0/20 IP: 77.83.84.0/24 IP: 85.235.80.0/23 IP: 91.188.244.0/24 IP: 91.214.117.0 -- 91.214.119.255 IP: 91.227.155.0/24 IP: 91.235.158.0/24 IP: 91.241.180.0/23 IP: 91.243.188.0/23 IP: 94.158.20.0/23 IP: 135.106.0.0/16 IP: 153.80.0.0/16 IP: 176.103.80.0/20 IP: 176.119.140.0/24 IP: 176.119.142.0/24 IP: 192.109.97.0/24 IP: 194.69.253.0/24 IP: 194.113.150.0 -- 194.113.152.255 IP: 194.187.100.0/22 IP: 195.3.181.0/24 IP: 195.95.216.0/23 IP: 195.245.238.0/24 IP: 2a0f:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:8a:c5:3c:2b:d2:c4:12:9a:48:a0:f0:8a:16:51:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 14:08:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:81:ba:89:8a:07:f4:34:f4:ba:14:fb:b6: 92:f8:52:d1:18:a0:53:35:1c:b6:d5:9c:22:90:45: bb:03:5c:b9:10:77:d6:20:64:22:ba:4b:b2:b1:b4: 6b:8b:61:65:67:15:c8:85:34:25:20:10:37:0a:d3: d3:66:44:54:c9:6b:0c:e7:04:c8:a0:2d:12:12:43: a9:d8:d3:bf:49:61:f4:b6:ea:85:5b:cb:0d:9c:a6: 16:4a:af:4d:3b:85:f8:e3:83:9d:2c:64:4e:0a:b5: f3:2f:60:92:89:cc:4f:ab:a8:4a:ca:4a:13:c3:63: ed:3f:bc:92:de:9f:9a:fc:7e:84:5a:46:e5:71:07: 0f:c9:72:22:3e:bc:05:95:b7:f6:18:f0:71:ee:48: 47:8f:01:3c:6e:a5:b4:40:3d:10:18:c6:77:fe:14: 0e:a8:b9:34:b5:9a:de:c8:64:ec:3a:5a:a1:fa:e1: bf:54:49:62:c7:b3:3e:1d:5b:ca:75:e4:02:e0:35: 8d:f2:96:9a:44:ca:f9:6e:6d:d8:bd:d4:2f:ca:6f: ae:87:37:97:6f:ee:3b:28:ab:9c:5a:c9:d4:6b:d4: 8e:cb:dc:8e:28:cd:80:b4:60:b2:37:a5:f3:4d:82: 37:41:ad:08:67:98:54:46:6f:08:1a:6e:a8:be:f9: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.199.0/24 45.67.215.0/24 45.129.79.0/24 45.136.144.0/23 46.150.240.0/20 77.83.84.0/24 85.235.80.0/23 91.188.244.0/24 91.214.117.0-91.214.119.255 91.227.155.0/24 91.235.158.0/24 91.241.180.0/23 91.243.188.0/23 94.158.20.0/23 135.106.0.0/16 153.80.0.0/16 176.103.80.0/20 176.119.140.0/24 176.119.142.0/24 192.109.97.0/24 194.69.253.0/24 194.113.150.0-194.113.152.255 194.187.100.0/22 195.3.181.0/24 195.95.216.0/23 195.245.238.0/24 IPv6: 2a0f:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56434 Signature Algorithm: sha256WithRSAEncryption 32:10:11:49:a7:7a:42:95:7c:a9:77:3e:b5:bf:6a:62:ef:4b: 5a:01:0f:dc:00:c8:fd:60:6f:56:a1:9d:69:7d:7e:e8:92:81: 95:b6:89:23:df:5c:7a:61:10:cf:21:a7:25:b2:00:e3:34:9a: 25:73:ea:ad:72:ef:b7:09:12:6c:71:b9:5a:d0:48:a4:d6:d4: aa:08:33:61:14:49:0b:88:9c:f7:14:52:a7:fb:07:d6:65:93: 6c:09:4e:86:bd:56:6f:32:15:24:3b:42:a2:68:ae:40:33:33: a6:96:54:8c:d5:52:71:a3:1b:44:3d:f2:13:91:20:97:da:30: 6e:a4:e1:83:7e:56:83:bf:2a:23:c4:4b:3d:8a:f0:7c:40:25: a3:40:72:ff:ad:6d:8d:25:00:e9:3e:2d:45:96:b4:87:b4:08: e7:03:b4:ad:3a:d1:92:1f:1d:1b:6b:92:e0:2b:40:7b:07:28: 7d:e4:dd:b4:06:b8:1b:e3:45:ff:f1:68:30:92:4a:38:9b:2f: d3:64:0d:10:46:52:01:a8:39:be:1a:f3:bb:d3:eb:f3:8e:b0: 30:5b:06:f4:70:18:6b:96:42:f8:22:b8:ee:e9:d3:58:0f:a0: d2:21:a0:62:11:e3:f6:02:36:0b:21:8f:4c:12:25:0e:06:f4: 57:67:18:f3 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISAZrkisU8K9LEEppIoPCKFlHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTQwODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjVhMWRhMWNiMWM5MjBhZTJmOWI3NDgyNzBmZGVkODczN2E5MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiBuomKB/Q09LoU+7aS+FLRGKBT NRy21ZwikEW7A1y5EHfWIGQiukuysbRri2FlZxXIhTQlIBA3CtPTZkRUyWsM5wTI oC0SEkOp2NO/SWH0tuqFW8sNnKYWSq9NO4X444OdLGROCrXzL2CSicxPq6hKykoT w2PtP7yS3p+a/H6EWkblcQcPyXIiPrwFlbf2GPBx7khHjwE8bqW0QD0QGMZ3/hQO qLk0tZreyGTsOlqh+uG/VElix7M+HVvKdeQC4DWN8paaRMr5bm3YvdQvym+uhzeX b+47KKucWsnUa9SOy9yOKM2AtGCyN6XzTYI3Qa0IZ5hURm8IGm6ovvmprQIDAQAB o4IDWDCCA1QwHQYDVR0OBBYEFMZaHaHLHJIK4vm3SCcP3thzepGEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzRmNTRi NC0wMDlmLTQ2Y2UtOWFjMC0zNmJhYzhkOTFlMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNGY1NGI0 LTAwOWYtNDZjZS05YWMwLTM2YmFjOGQ5MWUyZS8xL3hsb2RvY3Nja2dyaS1iZElK d19lMkhONmtZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHWBggrBgEF BQcBBwEB/wSBxjCBwzCBsQQCAAEwgaoDBAAlLMcDBAAtQ9cDBAAtgU8DBAEtiJAD BAQulvADBABNU1QDBAFV61ADBABbvPQwDAMEAFvWdQMEA1vWcAMEAFvjmwMEAFvr ngMEAVvxtAMEAVvzvAMEAV6eFAMDAIdqAwMAmVADBASwZ1ADBACwd4wDBACwd44D BADAbWEDBADCRf0wDAMEAcJxlgMEAMJxmAMEAsK7ZAMEAMMDtQMEAcNf2AMEAMP1 7jANBAIAAjAHAwUDKg9AQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3HIwDQYJ KoZIhvcNAQELBQADggEBADIQEUmnekKVfKl3PrW/amLvS1oBD9wAyP1gb1ahnWl9 fuiSgZW2iSPfXHphEM8hpyWyAOM0miVz6q1y77cJEmxxuVrQSKTW1KoIM2EUSQuI nPcUUqf7B9Zlk2wJToa9Vm8yFSQ7QqJorkAzM6aWVIzVUnGjG0Q98hORIJfaMG6k 4YN+VoO/KiPESz2K8HxAJaNAcv+tbY0lAOk+LUWWtIe0COcDtK060ZIfHRtrkuAr QHsHKH3k3bQGuBvjRf/xaDCSSjibL9NkDRBGUgGoOb4a87vT6/OOsDBbBvRwGGuW QvgiuO7p01gPoNIhoGIR4/YCNgshj0wSJQ4G9FdnGPM= -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:05 2025 by rpki-client