This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer (raw, json) Hash identifier: CtzFqng70QOPmefvv0wL9xgoqViCDU2ylo/Qlw6Y38g= Subject key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4580DCF3E8FBC5194A3FE7935DD88669 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 10:00:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 64480 AS: 200348 AS: 207092 IP: 5.154.188.0/23 IP: 89.40.171.0/24 IP: 93.113.129.0/24 IP: 185.84.67.0/24 IP: 185.162.228.0/22 IP: 185.179.89.0/24 IP: 185.193.12.0/22 IP: 195.210.50.0/23 IP: 2a0a:3440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:80:dc:f3:e8:fb:c5:19:4a:3f:e7:93:5d:d8:86:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 10:00:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:07:f0:17:30:e5:c2:11:22:5f:2e:3d:60: 15:75:59:17:a3:86:85:66:75:da:2b:e0:6e:ba:6a: c4:93:70:c4:2b:c9:f1:e4:8f:fa:b6:4b:f4:0a:14: 7f:b8:93:5f:4e:40:15:68:2e:7c:c8:5f:28:e0:35: 76:e5:4a:e1:82:dc:83:5e:6b:f5:8e:28:7d:b1:a7: 3e:dc:74:b0:b1:cf:ba:66:9d:78:9e:78:a9:9c:4f: 23:df:5d:44:34:dc:f6:93:8b:c3:69:04:60:24:8c: 96:59:1d:84:0f:83:c7:1d:48:59:58:76:75:af:fa: d3:a2:19:89:d6:8c:39:ad:fb:3b:50:61:cb:5d:2a: 72:81:20:f0:12:a9:69:e0:65:f7:f8:04:40:83:fb: bd:19:94:0d:da:6e:ee:d1:33:ea:7a:89:a7:06:ad: 15:d2:0c:2c:11:e9:a6:4a:6f:b3:96:66:75:fc:ef: e4:75:0d:38:53:79:2f:fd:98:d1:10:ca:3c:46:56: 3d:e2:e1:80:a4:19:a6:b3:af:f6:1f:a5:b6:87:ca: ea:37:0b:36:f6:54:21:41:82:39:f0:dc:d9:a3:78: 59:df:c7:7e:aa:60:c3:42:12:2a:a2:85:4a:33:57: 1b:c2:31:c4:b6:d5:a5:a6:a4:18:ee:d0:bb:87:65: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.188.0/23 89.40.171.0/24 93.113.129.0/24 185.84.67.0/24 185.162.228.0/22 185.179.89.0/24 185.193.12.0/22 195.210.50.0/23 IPv6: 2a0a:3440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64480 200348 207092 Signature Algorithm: sha256WithRSAEncryption 98:8d:05:65:bb:33:9e:a9:89:d8:25:97:8b:26:cc:78:a1:61: 7d:f3:77:0a:d4:c9:95:e8:78:c4:67:7a:d1:38:1d:a5:fa:2c: 37:22:51:b7:b8:99:d9:92:c1:f4:24:f9:e7:2a:75:1e:40:8b: d7:96:9e:21:bd:e8:a8:a0:83:90:bc:4d:51:99:0a:be:b9:97: 86:bf:ed:d0:b4:13:2d:a6:26:06:ed:f0:06:89:72:3b:ea:8a: 44:75:81:3a:e0:80:14:23:9d:97:b5:47:7f:fc:dc:24:00:1d: 18:22:23:7f:d0:86:a9:18:be:5e:b5:e3:61:b4:0f:78:de:7d: 72:7b:51:d5:a2:be:84:4a:e1:5a:64:7a:08:6e:75:9a:4c:aa: 4d:e9:76:cb:9e:63:8a:2c:f9:5a:c3:07:c6:a2:3b:2d:46:a0: ce:d6:df:ea:fe:2d:48:0e:6d:5a:62:a0:75:5f:e7:67:20:b9: f2:d3:9a:6a:8e:66:58:f6:ec:9d:24:c1:10:4b:67:ec:80:a0: e7:b0:d3:e2:6b:d9:1e:59:85:dc:57:32:6c:76:65:21:f8:1f: ab:65:46:72:93:74:55:41:46:6d:95:4d:62:24:58:91:fa:b0: c2:fa:65:cb:9e:bc:7d:25:5f:37:f2:8e:e5:ac:64:79:45:cd: 94:c8:cf:fd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZtFgNzz6PvFGUo/55Nd2IZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMTAwMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGUzOTc2ZDllY2I4MzA5YTgxODFmYmQwMjVjYTUyZmVmMTYxOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6oH8Bcw5cIRIl8uPWAVdVkXo4aF ZnXaK+BuumrEk3DEK8nx5I/6tkv0ChR/uJNfTkAVaC58yF8o4DV25UrhgtyDXmv1 jih9sac+3HSwsc+6Zp14nnipnE8j311ENNz2k4vDaQRgJIyWWR2ED4PHHUhZWHZ1 r/rTohmJ1ow5rfs7UGHLXSpygSDwEqlp4GX3+ARAg/u9GZQN2m7u0TPqeomnBq0V 0gwsEemmSm+zlmZ1/O/kdQ04U3kv/ZjREMo8RlY94uGApBmms6/2H6W2h8rqNws2 9lQhQYI58NzZo3hZ38d+qmDDQhIqooVKM1cbwjHEttWlpqQY7tC7h2WqHwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFODjl22ey4MJqBgfvQJcpS/vFhmZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2Q2MTJh My00NjMxLTQ3ZGUtOTQwZC04YmUwZDk3NjgyYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvZDYxMmEz LTQ2MzEtNDdkZS05NDBkLThiZTBkOTc2ODJhYi8xLzRPT1hiWjdMZ3dtb0dCLTlB bHlsTC04V0daay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQBBZq8AwQAWSirAwQAXXGBAwQAuVRDAwQCuaLk AwQAubNZAwQCucEMAwQBw9IyMA0EAgACMAcDBQMqCjRAMCQGCCsGAQUFBwEIAQH/ BBUwE6ARMA8CAwD74AIDAw6cAgMDKPQwDQYJKoZIhvcNAQELBQADggEBAJiNBWW7 M56pidgll4smzHihYX3zdwrUyZXoeMRnetE4HaX6LDciUbe4mdmSwfQk+ecqdR5A i9eWniG96Kigg5C8TVGZCr65l4a/7dC0Ey2mJgbt8AaJcjvqikR1gTrggBQjnZe1 R3/83CQAHRgiI3/QhqkYvl6142G0D3jefXJ7UdWivoRK4VpkeghudZpMqk3pdsue Y4os+VrDB8aiOy1GoM7W3+r+LUgObVpioHVf52cgufLTmmqOZlj27J0kwRBLZ+yA oOew0+Jr2R5ZhdxXMmx2ZSH4H6tlRnKTdFVBRm2VTWIkWJH6sML6ZcuevH0lXzfy juWsZHlFzZTIz/0= -----END CERTIFICATE-----Generated at Thu Dec 25 11:09:48 2025 by rpki-client