This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer File: z0pxf4-huwNZJ0IjrNriK3Dma-w.cer (raw, json) Hash identifier: F61z00HpvXBRUaZWtGb1j7whvl9GU4rCZdycKBMFL4Q= Subject key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A397B8CBA0E07A94281F88EAB20448E42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 31 Oct 2025 08:56:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15774 AS: 42323 AS: 51003 IP: 31.42.96.0/20 IP: 37.49.192.0/19 IP: 37.205.48.0/21 IP: 37.205.64.0/19 IP: 46.50.128.0/17 IP: 46.151.88.0/21 IP: 46.241.0.0/17 IP: 91.105.128.0/18 IP: 91.202.140.0/22 IP: 109.171.0.0/17 IP: 109.197.128.0/21 IP: 178.217.0.0/21 IP: 188.44.96.0/19 IP: 188.168.0.0/16 IP: 188.244.128.0/17 IP: 194.187.29.0/24 IP: 195.238.100.0/22 IP: 2a02:618::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:39:7b:8c:ba:0e:07:a9:42:81:f8:8e:ab:20:44:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 31 08:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:74:6f:41:be:a4:c4:5d:9e:eb:f4:ed:24: de:47:32:7a:d3:12:e2:e4:64:42:ea:05:86:00:a5: 55:cc:28:06:c9:ca:04:41:39:68:61:24:7a:b3:87: 38:0a:4d:b5:87:15:35:d3:99:f5:e8:a4:31:48:64: 60:d2:7a:bf:ba:4f:08:18:6e:01:8d:2c:27:c5:a7: ff:37:84:4f:97:ac:28:62:d3:ad:90:49:9b:22:07: 00:d9:8a:b8:80:86:61:73:44:2b:dd:b9:be:66:6c: fa:1b:54:e2:a2:af:2a:34:48:3a:42:d8:fa:fa:89: d9:c7:38:96:59:e3:d8:c4:5c:35:c2:25:98:0f:99: e2:3c:85:b8:c9:7d:fd:9e:fa:29:6b:14:00:1e:7a: be:57:29:83:65:43:56:0a:16:a2:56:e4:85:1f:00: 63:2f:1a:70:e5:58:23:e3:8e:ee:31:90:6d:ea:a8: f2:ba:94:f4:e8:4c:d7:ae:3a:ab:56:cc:ed:b5:25: 58:d7:38:4a:09:60:a3:c4:bd:57:47:ef:18:2f:ff: eb:e7:3b:65:7e:6d:f0:17:fd:fc:ae:8e:03:1a:82: 3e:7f:d0:2c:6e:a0:2e:c0:48:52:88:19:8a:0d:18: 4e:c0:27:38:dc:11:cc:7d:e3:4d:44:0f:51:7a:f1: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.96.0/20 37.49.192.0/19 37.205.48.0/21 37.205.64.0/19 46.50.128.0/17 46.151.88.0/21 46.241.0.0/17 91.105.128.0/18 91.202.140.0/22 109.171.0.0/17 109.197.128.0/21 178.217.0.0/21 188.44.96.0/19 188.168.0.0/16 188.244.128.0/17 194.187.29.0/24 195.238.100.0/22 IPv6: 2a02:618::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15774 42323 51003 Signature Algorithm: sha256WithRSAEncryption 59:46:18:5c:e0:3c:32:7b:a9:74:80:fd:9b:7b:e9:98:fe:4b: 37:6a:16:c6:a8:b8:28:1f:7a:d1:9e:52:b3:a5:b2:99:e9:e7: 9b:b0:8f:9e:39:6a:37:bd:2d:85:5b:8c:59:f8:78:5f:d8:c0: 0f:83:7a:e8:ad:f5:30:7a:14:2c:7d:e4:e0:38:75:db:b2:6e: 5e:4b:61:e6:64:92:ee:3f:ab:f9:c4:86:b9:dc:ae:c4:3b:67: 98:7a:00:c0:e8:61:7a:9d:81:69:87:72:b2:72:3c:8c:b7:b4: 55:18:90:6f:18:fc:5e:e0:3c:e3:4d:1f:29:a6:df:69:33:98: 34:c5:c8:39:3e:fb:a0:54:30:87:b8:7c:95:74:0b:85:61:6a: 84:8e:26:64:a2:5d:c8:fd:45:ed:56:6c:74:dc:9b:c3:e1:26: 2c:db:b7:b8:ba:c0:ea:d2:04:01:61:22:04:9c:b4:f9:0d:c8: fd:06:c6:2e:bc:ff:9a:4c:4e:63:26:74:3a:27:58:28:6f:12: c1:3f:b8:ff:6a:91:f2:6f:d9:1c:20:a4:aa:9c:fb:d9:e9:6a: ec:80:00:ed:08:f3:bb:51:9d:f6:6f:ce:3d:fd:fb:73:1f:e5: cb:a2:3e:11:f5:21:4c:36:2e:bd:8c:0b:04:c7:68:c5:6b:1b: 1e:84:dc:57 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZo5e4y6DgepQoH4jqsgRI5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDMxMDg1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjRhNzE3ZjhmYTFiYjAzNTkyNzQyMjNhY2RhZTIyYjcwZTY2YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimB0b0G+pMRdnuv07STeRzJ60xLi 5GRC6gWGAKVVzCgGycoEQTloYSR6s4c4Ck21hxU105n16KQxSGRg0nq/uk8IGG4B jSwnxaf/N4RPl6woYtOtkEmbIgcA2Yq4gIZhc0Qr3bm+Zmz6G1Tioq8qNEg6Qtj6 +onZxziWWePYxFw1wiWYD5niPIW4yX39nvopaxQAHnq+VymDZUNWChaiVuSFHwBj Lxpw5Vgj447uMZBt6qjyupT06EzXrjqrVszttSVY1zhKCWCjxL1XR+8YL//r5ztl fm3wF/38ro4DGoI+f9AsbqAuwEhSiBmKDRhOwCc43BHMfeNNRA9RevHNzwIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFM9KcX+PobsDWSdCI6za4itw5mvsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2U1MGY1 NC02ZmRkLTRmZTktOWZlOS02YWFhNmIwMjE2MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZTUwZjU0 LTZmZGQtNGZlOS05ZmU5LTZhYWE2YjAyMTYwZC8xL3owcHhmNC1odXdOWkowSWpy TnJpSzNEbWEtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGNBggrBgEF BQcBBwEB/wR+MHwwawQCAAEwZQMEBB8qYAMEBSUxwAMEAyXNMAMEBSXNQAMEBy4y gAMEAy6XWAMEBy7xAAMEBltpgAMEAlvKjAMEB22rAAMEA23FgAMEA7LZAAMEBbws YAMDALyoAwQHvPSAAwQAwrsdAwQCw+5kMA0EAgACMAcDBQAqAgYYMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAj2eAgMApVMCAwDHOzANBgkqhkiG9w0BAQsFAAOCAQEA WUYYXOA8MnupdID9m3vpmP5LN2oWxqi4KB960Z5Ss6Wymennm7CPnjlqN70thVuM Wfh4X9jAD4N66K31MHoULH3k4Dh127JuXkth5mSS7j+r+cSGudyuxDtnmHoAwOhh ep2BaYdysnI8jLe0VRiQbxj8XuA8400fKabfaTOYNMXIOT77oFQwh7h8lXQLhWFq hI4mZKJdyP1F7VZsdNybw+EmLNu3uLrA6tIEAWEiBJy0+Q3I/QbGLrz/mkxOYyZ0 OidYKG8SwT+4/2qR8m/ZHCCkqpz72elq7IAA7Qjzu1Gd9m/OPf37cx/ly6I+EfUh TDYuvYwLBMdoxWsbHoTcVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:49 2025 by rpki-client