This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer File: 4336E008jUaNzls3Q1-Z4yPa4Og.cer (raw, json) Hash identifier: G+SzVr2NGsPnoCNZMGcrXyL3yQfcvwN6vnL5oo5IKC8= Subject key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B038472F28508DD72C4FAA9FA495230D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 14:29:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.236.22.0/23 IP: 193.32.177.0 -- 193.32.179.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:84:72:f2:85:08:dd:72:c4:fa:a9:fa:49:52:30:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 14:29:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:9d:e8:16:76:12:93:d8:b1:43:9a:64:e8: b8:5f:99:cb:ee:d4:69:08:fe:4a:f3:cc:7e:41:7c: 65:b3:8e:77:30:db:5b:85:9c:79:ba:61:0d:25:c5: a6:dc:ac:ce:2b:dc:20:0f:6e:c2:40:ac:d2:33:b9: 24:7a:c6:ad:e8:35:8c:64:08:7a:31:1e:93:55:ff: e7:18:55:d1:e0:36:78:af:4d:24:fb:ff:ae:80:ca: 53:57:bc:3a:70:3b:e6:b5:bf:cf:67:c2:4a:07:c5: eb:c1:d5:d7:1e:29:61:f6:74:70:e8:14:05:9e:f8: d4:1c:86:e4:d9:af:04:83:b7:ee:3d:14:98:0a:54: 88:c4:c0:35:cc:1c:d4:dc:b3:c4:79:3b:a5:16:cf: ed:d6:91:5f:e4:7e:e8:a3:98:ee:48:76:ff:4f:a9: d8:fd:11:30:1a:a0:eb:11:64:21:94:69:60:93:fb: ae:45:42:12:9d:70:9c:f3:35:0b:c2:53:a2:81:72: 8a:82:a1:a0:cf:f0:e8:6b:c2:9f:ee:ed:6f:1b:9b: 2f:54:f9:b5:c3:bf:12:2b:3a:41:da:f8:61:61:a6: 05:80:f6:0e:22:72:f9:4b:09:31:33:e5:bb:43:32: dd:99:86:ce:fe:64:09:e6:e6:95:9f:73:e3:c9:23: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.22.0/23 193.32.177.0-193.32.179.255 Signature Algorithm: sha256WithRSAEncryption 5a:8e:f4:7a:26:65:f2:36:a7:aa:db:32:1c:e3:c2:7f:fa:70: 98:fd:f1:de:79:52:b4:15:62:a6:2f:d4:47:5c:56:1f:c9:c0: 36:5c:e9:1f:d9:c0:03:a8:6d:a3:62:ab:0f:28:66:fd:87:b8: f0:ac:5c:ec:f7:8f:96:40:4a:4b:94:0d:19:3a:bc:ea:30:93: e3:95:f2:a8:9f:8b:46:6a:23:b4:c5:36:3d:ca:c0:1b:17:7b: f7:d9:b1:c1:af:17:9b:51:0d:e0:0b:51:cb:ff:e1:a2:83:6a: 49:e3:bc:ea:22:00:aa:c8:c4:90:d1:57:8b:e9:c6:bd:fc:dd: fc:85:e8:6d:2d:b8:ae:81:8a:eb:f4:61:2a:ec:97:8d:1d:e3: da:5f:0d:fd:e5:f4:37:de:0a:55:0e:cc:ec:e5:bd:d6:c5:57: 53:a1:3b:ad:5c:c4:40:12:13:7e:46:fa:3b:53:30:a8:e9:35: cc:7b:16:77:7d:a3:1c:fa:3a:29:ca:e1:23:cb:98:78:89:8f: 8e:96:85:a5:80:14:f4:c0:f3:c4:50:dc:8f:8e:07:30:f8:21: 4a:ea:98:31:ad:83:8b:46:e8:fe:a6:1a:74:5a:07:62:fa:91: d2:61:f8:fc:a5:54:ac:28:72:ca:1d:2e:2b:7a:33:07:7b:01: 3a:b0:82:6c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZsDhHLyhQjdcsT6qfpJUjDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MTQyOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdkZmExMzRkM2M4ZDQ2OGRjZTViMzc0MzVmOTllMzIzZGFlMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZSd6BZ2EpPYsUOaZOi4X5nL7tRp CP5K88x+QXxls453MNtbhZx5umENJcWm3KzOK9wgD27CQKzSM7kkesat6DWMZAh6 MR6TVf/nGFXR4DZ4r00k+/+ugMpTV7w6cDvmtb/PZ8JKB8XrwdXXHilh9nRw6BQF nvjUHIbk2a8Eg7fuPRSYClSIxMA1zBzU3LPEeTulFs/t1pFf5H7oo5juSHb/T6nY /REwGqDrEWQhlGlgk/uuRUISnXCc8zULwlOigXKKgqGgz/Doa8Kf7u1vG5svVPm1 w78SKzpB2vhhYaYFgPYOInL5SwkxM+W7QzLdmYbO/mQJ5uaVn3PjySNVkQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFON9+hNNPI1Gjc5bN0NfmeMj2uDoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2MxYjQ0 Ny00MzUyLTRmZDEtOWMyNy01ZjRhNzA3MTJjMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYzFiNDQ3 LTQzNTItNGZkMS05YzI3LTVmNGE3MDcxMmMyMy8xLzQzMzZFMDA4alVhTnpsczNR MS1aNHlQYTRPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQBuewWMAwDBADBILEDBALBILAwDQYJKoZIhvcN AQELBQADggEBAFqO9HomZfI2p6rbMhzjwn/6cJj98d55UrQVYqYv1EdcVh/JwDZc 6R/ZwAOobaNiqw8oZv2HuPCsXOz3j5ZASkuUDRk6vOowk+OV8qifi0ZqI7TFNj3K wBsXe/fZscGvF5tRDeALUcv/4aKDaknjvOoiAKrIxJDRV4vpxr383fyF6G0tuK6B iuv0YSrsl40d49pfDf3l9DfeClUOzOzlvdbFV1OhO61cxEASE35G+jtTMKjpNcx7 Fnd9oxz6OinK4SPLmHiJj46WhaWAFPTA88RQ3I+OBzD4IUrqmDGtg4tG6P6mGnRa B2L6kdJh+PylVKwocsodLit6Mwd7ATqwgmw= -----END CERTIFICATE-----Generated at Sun Dec 21 13:19:38 2025 by rpki-client