This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer File: zPFCMN6e_sYQ_90zngxEgLaLrUU.cer (raw, json) Hash identifier: 9XoPKNnD3PK6dJNpOuYDU91VK7Va/IuVJWJQW2HDOD8= Subject key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B22E728A31BC7283E7214F5ED8E1D2AB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 16:45:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42694 AS: 50700 IP: 84.234.56.0/22 IP: 193.105.195.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:e7:28:a3:1b:c7:28:3e:72:14:f5:ed:8e:1d:2a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 16:45:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ccf14230de9efec610ffdd339e0c4480b68bad45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:0a:17:e5:90:15:a8:32:05:f0:f1:31:ba: 69:f0:c2:5a:ee:f5:79:f2:8a:9b:93:67:cd:fa:9e: 6e:43:3e:e9:fe:7c:06:74:cb:dc:00:81:9d:96:ba: 17:c6:63:79:bc:29:7f:ff:f1:c5:2f:45:bc:9c:fe: 5a:91:fe:ca:b6:2d:e1:d6:a2:4a:22:ad:c4:fb:38: c8:28:b5:aa:a7:77:47:c1:9f:4a:66:5c:07:76:6c: 4b:ba:33:5a:6e:8e:18:8d:8a:5f:53:67:d7:1c:2b: c0:f4:80:45:91:00:40:4e:dc:0e:36:45:dd:78:1d: d6:55:ea:55:57:5c:e5:8d:27:41:17:37:e7:87:cc: 9b:1a:5f:3f:65:c9:21:95:11:c7:25:08:8d:33:0d: f3:7a:54:58:fa:8f:e3:cd:4b:79:62:85:bc:3b:4c: cf:4e:df:90:9a:d3:0d:6e:a9:62:96:30:25:65:5a: ed:01:25:26:f8:8a:9d:3c:c4:ff:4a:a5:ae:b0:44: f2:75:17:b4:71:4a:ec:be:48:42:77:52:72:64:92: 81:ea:36:1e:5c:7d:53:f8:a9:ca:ad:ce:10:82:5a: 89:ca:6e:79:69:a4:f7:f3:f3:7b:e0:85:c7:60:d4: ee:a4:5c:28:f9:fa:b0:a7:96:d4:bf:5d:31:e1:31: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.56.0/22 193.105.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42694 50700 Signature Algorithm: sha256WithRSAEncryption 0b:e7:6a:b1:74:43:b8:56:52:c4:84:b7:38:30:ba:17:78:4e: 0c:e7:7c:30:39:11:d1:0c:e5:19:a1:66:47:bc:0e:66:b9:69: 26:60:48:a7:65:ad:65:d5:72:1b:63:06:c5:9d:fb:60:18:dd: e0:c4:3c:63:f8:42:d7:93:5a:ec:13:a8:60:f0:1b:51:4e:1e: ba:f8:e4:00:15:38:e7:09:41:9d:fd:02:1a:ac:c7:b7:8a:6f: eb:3e:87:8b:c0:09:de:4c:6d:17:c2:ff:73:c4:04:b6:37:6e: 50:6d:1d:e4:5d:48:1e:f5:2c:14:8c:b9:02:e7:bb:db:86:0a: f4:cf:e0:b0:8f:a1:ab:8a:55:fd:fe:c9:f8:bd:0e:31:f5:0b: 81:a0:42:16:51:2e:d7:19:b5:b6:b4:f9:4a:b9:66:11:42:cc: c0:2f:b4:ee:20:c4:ac:ab:46:da:8d:ba:f3:97:8a:65:ab:b0: 9d:b4:e1:f3:dc:99:40:7d:87:02:38:7e:29:9e:0f:52:e7:d2: d7:44:58:33:11:87:40:56:78:39:e0:68:41:48:a0:2c:27:38: b8:f4:00:0a:86:72:b3:44:9f:06:6a:50:98:09:d1:52:30:ad: 43:aa:de:10:33:88:f1:70:33:d7:7f:8c:d3:ca:a6:36:2c:c6: a3:2a:18:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZsi5yijG8coPnIU9e2OHSq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTY0NTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2YxNDIzMGRlOWVmZWM2MTBmZmRkMzM5ZTBjNDQ4MGI2OGJhZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf8KF+WQFagyBfDxMbpp8MJa7vV5 8oqbk2fN+p5uQz7p/nwGdMvcAIGdlroXxmN5vCl///HFL0W8nP5akf7Kti3h1qJK Iq3E+zjIKLWqp3dHwZ9KZlwHdmxLujNabo4YjYpfU2fXHCvA9IBFkQBATtwONkXd eB3WVepVV1zljSdBFzfnh8ybGl8/ZckhlRHHJQiNMw3zelRY+o/jzUt5YoW8O0zP Tt+QmtMNbqliljAlZVrtASUm+IqdPMT/SqWusETydRe0cUrsvkhCd1JyZJKB6jYe XH1T+KnKrc4QglqJym55aaT38/N74IXHYNTupFwo+fqwp5bUv10x4TEKQQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFMzxQjDenv7GEP/dM54MRIC2i61FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzQ4MjYz My1jOWE5LTQ2MzMtYjEzOC1hMTdiODJlNmQ3ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvNDgyNjMz LWM5YTktNDYzMy1iMTM4LWExN2I4MmU2ZDc4Ni8xL3pQRkNNTjZlX3NZUV85MHpu Z3hFZ0xhTHJVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCVOo4AwQAwWnDMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCmxgIDAMYMMA0GCSqGSIb3DQEBCwUAA4IBAQAL52qxdEO4VlLEhLc4 MLoXeE4M53wwORHRDOUZoWZHvA5muWkmYEinZa1l1XIbYwbFnftgGN3gxDxj+ELX k1rsE6hg8BtRTh66+OQAFTjnCUGd/QIarMe3im/rPoeLwAneTG0Xwv9zxAS2N25Q bR3kXUge9SwUjLkC57vbhgr0z+Cwj6GrilX9/sn4vQ4x9QuBoEIWUS7XGbW2tPlK uWYRQszAL7TuIMSsq0bajbrzl4plq7CdtOHz3JlAfYcCOH4png9S59LXRFgzEYdA Vng54GhBSKAsJzi49AAKhnKzRJ8GalCYCdFSMK1Dqt4QM4jxcDPXf4zTyqY2LMaj KhjO -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:17 2025 by rpki-client