This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer File: gvolsvyxRoEUtziSirINh2G_iDE.cer (raw, json) Hash identifier: omcbxDFDxlKxkOI0jA0XZsUJtikGKsAC8WBuPPSh0mk= Subject key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B31497B8B9B8CA6F7A768CAFE1E1C2DF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 11:47:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 12664 AS: 20617 AS: 25215 AS: 25289 AS: 31450 AS: 43759 AS: 56859 AS: 205860 AS: 206450 AS: 210043 IP: 79.170.56.0/21 IP: 155.140.0.0/16 IP: 159.50.0.0/16 IP: 159.95.0.0/16 IP: 185.198.236.0/22 IP: 193.8.9.0 -- 193.8.11.255 IP: 193.8.148.0 -- 193.8.163.255 IP: 193.160.103.0/24 IP: 194.5.80.0/23 IP: 194.15.145.0/24 IP: 194.124.160.0/21 IP: 194.150.80.0/22 IP: 2001:67c:2a4::/48 IP: 2a04:a80::/29 IP: 2a0a:8a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:49:7b:8b:9b:8c:a6:f7:a7:68:ca:fe:1e:1c:2d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 11:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82fa25b2fcb1468114b738928ab20d8761bf8831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:60:86:73:a0:80:7b:7d:2c:10:72:b8:4a: 2c:04:33:3a:15:00:1f:d0:1e:f6:96:3c:76:a6:01: 02:ae:67:d2:36:d3:d9:99:1d:1b:64:29:19:c7:44: 86:16:79:8e:c8:0b:e2:cc:8f:b3:f3:2f:d8:f7:b2: 67:18:8e:68:e1:b3:44:e3:78:31:2d:d1:c6:24:37: 9c:c9:8e:22:41:ad:80:e0:98:c2:d7:d9:15:2f:0e: 6b:a3:5d:a3:e4:dd:82:44:ef:65:c0:f4:b1:15:6f: f6:13:bc:b3:f2:a5:5e:a5:c7:f2:47:03:b0:d8:b4: 7c:07:1f:27:1b:44:5c:e2:d4:c4:ed:7c:9f:31:ed: e6:ad:ef:88:10:6e:4d:f6:01:19:6e:7e:18:00:51: 82:12:c1:b9:81:8c:f0:5d:d0:2e:09:7a:3f:5d:50: 48:2e:6c:01:f0:40:a5:47:c8:4e:6b:09:5b:00:d1: fd:5a:c7:56:29:48:0e:e3:21:4c:27:fe:25:c7:0e: 1f:1d:3a:51:c0:25:69:35:c2:02:8d:dd:a2:18:dc: fc:74:78:7c:9d:71:dc:49:b3:a6:95:7b:1e:a9:dc: 07:00:bd:b5:3c:a2:a8:7a:72:44:65:c8:50:f5:38: 12:9c:38:ed:1e:5b:e9:37:21:0c:a1:3a:e7:0d:d0: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.56.0/21 155.140.0.0/16 159.50.0.0/16 159.95.0.0/16 185.198.236.0/22 193.8.9.0-193.8.11.255 193.8.148.0-193.8.163.255 193.160.103.0/24 194.5.80.0/23 194.15.145.0/24 194.124.160.0/21 194.150.80.0/22 IPv6: 2001:67c:2a4::/48 2a04:a80::/29 2a0a:8a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12664 20617 25215 25289 31450 43759 56859 205860 206450 210043 Signature Algorithm: sha256WithRSAEncryption 48:fc:79:14:b3:ba:55:1e:56:08:8e:d4:27:2b:5a:54:24:94: f1:4d:d6:10:97:3b:7b:c0:4b:55:e9:c4:6a:cc:f7:97:e2:88: ad:52:d5:a8:20:51:a6:63:32:7d:a0:97:f8:3d:83:a3:d3:6f: 28:b8:1c:6c:c3:de:2d:38:a4:a5:e9:b3:69:e3:42:5e:90:10: d2:11:84:ab:28:08:49:fb:3a:18:8c:c0:7e:a4:08:67:96:f2: 66:be:74:e7:0e:a4:75:fc:30:92:61:d8:a5:57:1d:1b:6e:3a: 8f:5b:19:58:32:a7:1e:61:3d:e2:65:e1:51:5e:ef:36:e2:1e: a9:0a:03:9f:9b:54:87:5f:93:f9:2b:b7:74:a6:3c:7b:2b:2e: fe:f6:0e:51:e5:6a:0a:57:cb:d5:a5:07:48:6e:50:1b:61:28: b3:0d:b7:44:41:f3:99:83:cf:af:6f:6d:f0:02:df:17:6e:98: 3e:a1:d7:b0:06:46:0e:1e:f6:ac:b4:6c:27:2e:c2:d4:e1:aa: 29:91:80:38:13:ed:d6:30:ea:ca:f0:f4:b5:e1:92:bf:5e:b8: a2:7b:d2:c3:ae:e9:7f:4d:a5:ee:b5:9b:a2:3d:b7:52:a5:4c: 06:cb:9a:d3:35:80:46:56:b1:d9:1c:8b:49:ae:8f:8d:73:cb: 88:2f:6c:6d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZsxSXuLm4ym96doyv4eHC3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZhMjViMmZjYjE0NjgxMTRiNzM4OTI4YWIyMGQ4NzYxYmY4ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknBghnOggHt9LBByuEosBDM6FQAf 0B72ljx2pgECrmfSNtPZmR0bZCkZx0SGFnmOyAvizI+z8y/Y97JnGI5o4bNE43gx LdHGJDecyY4iQa2A4JjC19kVLw5ro12j5N2CRO9lwPSxFW/2E7yz8qVepcfyRwOw 2LR8Bx8nG0Rc4tTE7XyfMe3mre+IEG5N9gEZbn4YAFGCEsG5gYzwXdAuCXo/XVBI LmwB8EClR8hOawlbANH9WsdWKUgO4yFMJ/4lxw4fHTpRwCVpNcICjd2iGNz8dHh8 nXHcSbOmlXseqdwHAL21PKKoenJEZchQ9TgSnDjtHlvpNyEMoTrnDdDSuQIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFIL6JbL8sUaBFLc4koqyDYdhv4gxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzEzNzFh Ni1mNWYzLTQzYmYtYWZmNC03Njg1Yzk2NzAwMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMTM3MWE2 LWY1ZjMtNDNiZi1hZmY0LTc2ODVjOTY3MDAxNy8xL2d2b2xzdnl4Um9FVXR6aVNp cklOaDJHX2lERS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGNBggrBgEF BQcBBwEB/wR+MHwwWwQCAAEwVQMEA0+qOAMDAJuMAwMAnzIDAwCfXwMEArnG7DAM AwQAwQgJAwQCwQgIMAwDBALBCJQDBALBCKADBADBoGcDBAHCBVADBADCD5EDBAPC fKADBALCllAwHQQCAAIwFwMHACABBnwCpAMFAyoECoADBQAqCopAMEIGCCsGAQUF BwEIAQH/BDMwMaAvMC0CAjF4AgJQiQICYn8CAmLJAgJ62gIDAKrvAgMA3hsCAwMk JAIDAyZyAgMDNHswDQYJKoZIhvcNAQELBQADggEBAEj8eRSzulUeVgiO1CcrWlQk lPFN1hCXO3vAS1XpxGrM95fiiK1S1aggUaZjMn2gl/g9g6PTbyi4HGzD3i04pKXp s2njQl6QENIRhKsoCEn7OhiMwH6kCGeW8ma+dOcOpHX8MJJh2KVXHRtuOo9bGVgy px5hPeJl4VFe7zbiHqkKA5+bVIdfk/krt3SmPHsrLv72DlHlagpXy9WlB0huUBth KLMNt0RB85mDz69vbfAC3xdumD6h17AGRg4e9qy0bCcuwtThqimRgDgT7dYw6srw 9LXhkr9euKJ70sOu6X9Npe61m6I9t1KlTAbLmtM1gEZWsdkci0muj41zy4gvbG0= -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:00 2025 by rpki-client