This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer File: aZbfqRr5HsxjhBKLGMUDoywoNxM.cer (raw, json) Hash identifier: 0MRQrvEo1bplnNGK2r5nBIxULeWY5QGbQRYPsBRQYYg= Subject key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AFE4AFD7391EBFA7D326C3D990D8233E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 08 Dec 2025 14:08:38 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.143.90.0/24 IP: 193.143.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:4a:fd:73:91:eb:fa:7d:32:6c:3d:99:0d:82:33:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 8 14:08:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6996dfa91af91ecc6384128b18c503a32c283713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c6:c1:0d:58:ff:18:5a:63:40:7b:dc:f8:7b: 58:61:3b:3b:0d:56:41:19:7c:3e:42:a1:ff:57:86: 4f:fe:7a:7e:d9:1f:d4:ab:87:3e:2e:9d:e5:1a:3b: 12:cf:da:97:1d:2c:84:fa:30:de:5c:68:d0:0c:d9: 7d:11:8c:83:96:ff:78:dd:bb:ee:49:e2:11:1b:80: e7:53:29:cc:49:c2:7a:7f:00:14:8a:5d:1f:13:39: c5:51:3c:c3:70:42:8f:ec:b1:fb:83:f6:3e:d4:23: bc:94:2c:65:19:8e:72:8a:7a:c9:3c:3b:8f:a8:83: c8:13:4f:28:5e:24:06:b1:22:d9:94:39:3b:9c:3e: ae:d6:85:80:31:86:d8:bb:cb:f7:fb:1c:d2:28:c9: 2f:9a:d7:a1:8c:1b:b7:10:0a:0b:03:ee:89:5f:21: b2:94:4f:e4:26:e2:03:56:b4:b6:b6:3b:86:ec:0a: 05:b5:51:a5:64:16:6a:2e:5d:a9:cf:29:c2:5e:65: 72:c3:4b:ea:1f:55:0c:03:67:ad:ab:ac:c9:57:b0: 92:16:b7:fa:4e:d6:05:bd:5d:72:96:da:fa:dc:aa: ae:05:fb:31:00:69:cc:4f:37:7a:ac:ee:f6:8a:43: 07:62:5c:20:6c:ab:16:7b:59:99:cc:ba:c0:fe:0b: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.90.0/24 193.143.98.0/24 Signature Algorithm: sha256WithRSAEncryption 28:3f:2e:c7:fd:e9:a1:51:ad:52:4f:1c:5a:a5:eb:e4:30:8a: 24:75:77:f3:7f:5e:c7:6e:86:63:31:04:37:0a:79:0e:47:ec: 9d:22:72:ef:4f:99:92:8b:71:18:79:e7:8c:55:24:7b:10:22: fc:83:c2:e9:f9:f9:0b:20:5e:9c:52:29:4d:7d:a1:29:b3:7e: 5a:d6:1f:ec:da:7c:1d:37:b0:11:d5:47:2f:03:6d:6c:b2:8e: 59:ec:b2:dd:04:fd:67:e2:f3:61:37:ec:5c:4c:d3:0e:40:9d: 36:d1:f2:85:14:72:fa:9a:c9:0e:db:6c:e9:61:0e:38:28:a3: e1:3e:50:ee:84:cc:c0:0a:72:e8:59:00:73:d1:7b:e7:44:de: 12:cd:9b:03:7e:94:cc:3a:68:ba:93:de:3f:ae:54:a3:e7:3a: 8a:2b:d2:c1:eb:33:9f:c9:fe:97:7f:9a:28:70:8a:84:bb:d9: 07:9e:e4:46:74:7c:f1:a5:e6:26:bc:84:8c:a3:a1:68:c5:b4: 4e:71:95:97:40:d8:14:42:60:5f:90:97:43:9a:93:a5:78:28: b3:0c:ea:86:7a:f2:7b:e3:76:d0:9d:31:fb:94:fc:2c:50:33: e4:4d:16:f6:fa:94:4d:ed:44:c3:82:33:c9:e7:d3:cc:55:3d: 65:84:8c:2f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZr+Sv1zkev6fTJsPZkNgjPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA4MTQwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk2ZGZhOTFhZjkxZWNjNjM4NDEyOGIxOGM1MDNhMzJjMjgzNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68bBDVj/GFpjQHvc+HtYYTs7DVZB GXw+QqH/V4ZP/np+2R/Uq4c+Lp3lGjsSz9qXHSyE+jDeXGjQDNl9EYyDlv943bvu SeIRG4DnUynMScJ6fwAUil0fEznFUTzDcEKP7LH7g/Y+1CO8lCxlGY5yinrJPDuP qIPIE08oXiQGsSLZlDk7nD6u1oWAMYbYu8v3+xzSKMkvmtehjBu3EAoLA+6JXyGy lE/kJuIDVrS2tjuG7AoFtVGlZBZqLl2pzynCXmVyw0vqH1UMA2etq6zJV7CSFrf6 TtYFvV1yltr63KquBfsxAGnMTzd6rO72ikMHYlwgbKsWe1mZzLrA/gtGlwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGmW36ka+R7MY4QSixjFA6MsKDcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzY4NGY3 NC1lODNmLTQ1YjYtYWEzMi04YWQzYzBkMTE1NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNjg0Zjc0 LWU4M2YtNDViNi1hYTMyLThhZDNjMGQxMTU2NS8xL2FaYmZxUnI1SHN4amhCS0xH TVVEb3l3b054TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwY9aAwQAwY9iMA0GCSqGSIb3DQEBCwUAA4IB AQAoPy7H/emhUa1STxxapevkMIokdXfzf17HboZjMQQ3CnkOR+ydInLvT5mSi3EY eeeMVSR7ECL8g8Lp+fkLIF6cUilNfaEps35a1h/s2nwdN7AR1UcvA21sso5Z7LLd BP1n4vNhN+xcTNMOQJ020fKFFHL6mskO22zpYQ44KKPhPlDuhMzACnLoWQBz0Xvn RN4SzZsDfpTMOmi6k94/rlSj5zqKK9LB6zOfyf6Xf5oocIqEu9kHnuRGdHzxpeYm vISMo6FoxbROcZWXQNgUQmBfkJdDmpOleCizDOqGevJ743bQnTH7lPwsUDPkTRb2 +pRN7UTDgjPJ59PMVT1lhIwv -----END CERTIFICATE-----Generated at Sat Dec 20 13:52:21 2025 by rpki-client