This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer (raw, json) Hash identifier: kdYwpgNM8Mc5An4NEwUHVwglQ94Ep+HaBKjcbX+ESGM= Subject key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B325A304A499B054146BABBBE980F1F30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 16:45:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 205059 AS: 210816 IP: 141.98.116.0/22 IP: 185.129.16.0/22 IP: 185.165.76.0/24 IP: 185.229.12.0/22 IP: 185.231.108.0/22 IP: 194.26.108.0/23 IP: 194.26.114.0/23 IP: 194.99.74.0/24 IP: 2a14:e180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:5a:30:4a:49:9b:05:41:46:ba:bb:be:98:0f:1f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 16:45:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:70:91:af:b2:2c:42:a4:8d:72:6b:e7:7e: 48:09:a0:db:cc:ef:19:a4:1c:9f:2c:a8:b2:ad:ac: 31:77:bd:dc:36:59:bd:48:f4:97:a2:f8:d5:d7:2b: 42:6f:2e:69:63:c1:e8:98:cc:35:09:9b:34:e6:6a: cc:07:61:8d:d3:4a:df:2e:c3:4c:72:67:90:48:73: ff:89:47:b7:82:9f:da:f8:00:0e:7f:66:c2:12:49: d8:4f:ab:a2:19:40:e7:b7:a3:12:5e:af:99:2a:40: b1:1d:4f:c2:18:c3:5b:2b:8f:c2:e7:8d:39:ef:f3: 9c:d3:ef:38:ab:a6:22:f5:c9:64:cd:11:00:4c:74: 0f:7e:8a:a3:18:aa:d0:ce:b8:88:cc:24:16:d2:6a: 7b:03:f7:32:16:42:65:9e:82:fd:df:c6:68:d6:2f: 52:b3:7f:3f:ca:83:bf:c8:0a:67:be:a4:4a:fa:ef: 24:27:46:a5:99:db:9a:7f:4f:9c:23:0a:f9:f5:54: 73:72:07:7e:fc:a3:1d:4c:90:a0:26:a0:fe:e1:80: 3c:0b:e3:45:8a:cf:c5:dd:10:04:ac:77:b1:ca:cc: 90:59:b4:67:85:60:60:70:97:6d:93:a2:ff:e5:d6: 51:5c:97:7e:45:76:35:78:d8:a1:1c:0c:ed:8d:be: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.116.0/22 185.129.16.0/22 185.165.76.0/24 185.229.12.0/22 185.231.108.0/22 194.26.108.0/23 194.26.114.0/23 194.99.74.0/24 IPv6: 2a14:e180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205059 210816 Signature Algorithm: sha256WithRSAEncryption 37:fb:52:c5:e1:22:20:3d:08:68:ae:d1:97:ca:82:23:ac:74: e1:af:59:a1:e3:e7:a0:52:2b:37:5e:2f:8a:d5:01:f3:79:f4: 7a:05:87:4e:bf:6b:67:f6:c9:b2:6b:9a:96:0f:4b:b3:a1:74: 7e:45:74:96:c5:fd:d0:3b:c9:ca:b2:8c:83:32:6b:33:75:5f: e6:73:89:5f:80:5c:a4:d4:e2:76:9d:8f:68:22:e6:ca:71:e6: 26:09:56:bb:80:d4:60:a5:3e:58:5d:a6:d6:28:75:b8:10:2f: 27:ce:3a:3b:7e:28:c5:b2:31:57:f6:56:9e:5b:1e:fd:44:26: 5f:af:2e:98:02:cc:98:1c:2f:bb:b5:1b:43:29:f8:73:de:d4: 92:20:02:de:22:de:79:54:92:1e:5b:99:53:e0:f6:56:7a:5a: ec:db:bd:0e:34:d0:02:6f:bf:71:03:75:d0:75:55:3f:a0:1f: 90:0e:ec:29:a4:00:bb:c5:1d:4c:12:ea:98:1d:6b:35:08:53: 30:bf:61:c8:25:a0:38:5c:49:86:c7:96:a4:30:99:e5:aa:cf: 92:6c:69:01:e0:47:bf:42:b5:3f:0f:50:9c:47:83:f8:b6:85: 11:9f:f9:40:ae:16:ee:44:bf:40:7e:07:5b:d7:61:3f:9b:23: 13:61:54:2c -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZsyWjBKSZsFQUa6u76YDx8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTY0NTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZiNDEwYTNiZmM3MzQwYjY2N2I0ZjIyMWM3Y2I4MDYyNjc4OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOdwka+yLEKkjXJr535ICaDbzO8Z pByfLKiyrawxd73cNlm9SPSXovjV1ytCby5pY8HomMw1CZs05mrMB2GN00rfLsNM cmeQSHP/iUe3gp/a+AAOf2bCEknYT6uiGUDnt6MSXq+ZKkCxHU/CGMNbK4/C5405 7/Oc0+84q6Yi9clkzREATHQPfoqjGKrQzriIzCQW0mp7A/cyFkJlnoL938Zo1i9S s38/yoO/yApnvqRK+u8kJ0almduaf0+cIwr59VRzcgd+/KMdTJCgJqD+4YA8C+NF is/F3RAErHexysyQWbRnhWBgcJdtk6L/5dZRXJd+RXY1eNihHAztjb5MowIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFIj7QQo7/HNAtme08iHHy4BiZ4luMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzQ0NjI0 Zi0yMzFkLTQ2NmMtYmIwMi1iMzhjODA5NTE5ODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNDQ2MjRm LTIzMWQtNDY2Yy1iYjAyLWIzOGM4MDk1MTk4MS8xL2lQdEJDanY4YzBDMlo3VHlJ Y2ZMZ0dKbmlXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCjWJ0AwQCuYEQAwQAuaVMAwQCueUMAwQCueds AwQBwhpsAwQBwhpyAwQAwmNKMA0EAgACMAcDBQMqFOGAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwMhAwIDAzeAMA0GCSqGSIb3DQEBCwUAA4IBAQA3+1LF4SIgPQho rtGXyoIjrHThr1mh4+egUis3Xi+K1QHzefR6BYdOv2tn9smya5qWD0uzoXR+RXSW xf3QO8nKsoyDMmszdV/mc4lfgFyk1OJ2nY9oIubKceYmCVa7gNRgpT5YXabWKHW4 EC8nzjo7fijFsjFX9laeWx79RCZfry6YAsyYHC+7tRtDKfhz3tSSIALeIt55VJIe W5lT4PZWelrs270ONNACb79xA3XQdVU/oB+QDuwppAC7xR1MEuqYHWs1CFMwv2HI JaA4XEmGx5akMJnlqs+SbGkB4Ee/QrU/D1CcR4P4toURn/lArhbuRL9Afgdb12E/ myMTYVQs -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:41 2025 by rpki-client