This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer File: lA_4gDMK92KubMBQ3l80tfV7Cwk.cer (raw, json) Hash identifier: QU2cWtSGDXWCDOWnJrt9+RVf5dh4RZCWygNmQ1f0q+E= Subject key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B30F50C8FFB8AF8959E6B2A50024DB4B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 10:15:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 20723 AS: 47868 IP: 31.177.24.0/21 IP: 79.170.248.0/21 IP: 94.125.216.0/21 IP: 131.117.208.0/21 IP: 178.20.136.0/21 IP: 185.84.232.0/22 IP: 217.112.160.0/20 IP: 217.115.240.0/20 IP: 2a00:6500::/29 IP: 2a00:db00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:f5:0c:8f:fb:8a:f8:95:9e:6b:2a:50:02:4d:b4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 10:15:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:4f:ab:ea:31:b9:00:98:ef:80:da:98:b2: 1e:33:c4:d4:e0:6b:b7:de:55:36:1b:1e:77:46:4a: 1b:0b:c7:99:1e:40:de:a2:d1:56:1f:57:80:b4:6c: 4b:38:b6:f6:91:e5:e1:da:a9:e3:54:ba:dd:5f:41: e8:01:48:d9:21:37:76:27:c4:c4:a6:89:99:18:d0: 16:22:c4:c6:44:da:21:34:f6:2c:1d:a6:2a:4b:35: 6c:2d:a5:28:79:3f:76:67:d8:8d:8c:2c:39:f4:00: 02:6a:d4:08:56:52:4d:d5:14:50:6a:78:93:74:69: f4:84:43:a3:c1:83:9e:13:ca:36:dc:eb:9a:db:44: 4f:21:7f:a5:d0:e7:96:a4:62:d5:e2:0e:21:49:6b: fa:b8:93:ad:f6:96:28:5a:ca:a5:10:9e:b6:8b:62: 05:d2:ac:d1:57:11:fa:c2:3f:aa:8d:90:3f:f8:68: 83:f2:a1:12:9d:3f:6b:50:62:43:13:90:01:a0:cf: 31:7a:8c:60:08:e7:21:f2:e6:72:95:a3:01:37:30: c9:df:b5:38:c1:77:8c:f0:1e:d5:19:0f:50:1a:f7: 40:c2:0c:98:80:08:88:83:e0:fd:1e:1b:e8:ce:15: 2d:a1:62:b0:b3:cf:85:93:2c:c4:b6:da:ac:5e:b9: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.24.0/21 79.170.248.0/21 94.125.216.0/21 131.117.208.0/21 178.20.136.0/21 185.84.232.0/22 217.112.160.0/20 217.115.240.0/20 IPv6: 2a00:6500::/29 2a00:db00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20723 47868 Signature Algorithm: sha256WithRSAEncryption 44:73:04:e9:35:c3:44:a0:11:44:04:aa:b6:ae:66:4f:a2:d8: 4e:d6:bc:1f:53:bb:a0:82:b0:31:51:f7:ba:d2:41:ac:40:c6: 71:50:42:40:d1:8c:f9:76:4d:9d:a4:80:36:a0:26:42:b7:35: 54:38:3d:27:ed:6e:97:a3:55:25:62:cd:16:7c:f7:f5:a0:97: 5c:f8:bf:b7:da:d4:06:76:cc:df:db:8a:ec:42:42:1b:52:a2: 79:2b:a7:97:0a:e1:21:92:69:ec:9b:ad:2f:f1:cd:c4:99:9d: 50:ae:9e:4e:05:03:59:c4:a8:de:ad:fa:e7:2a:4b:6b:b4:ca: ed:86:e2:4a:a0:d9:df:87:63:86:0d:40:65:b4:33:42:88:91: 8b:a6:5b:91:a5:4a:32:4e:a4:cb:36:9a:ba:de:bc:6f:d6:9c: 5e:ac:94:fe:d3:56:04:40:01:4e:8b:c3:5f:ed:62:a8:6a:7f: ef:d3:64:af:5a:23:a6:41:01:a3:d5:9e:3d:02:fb:3d:0f:0d: a9:ff:ef:11:9c:c8:9e:17:be:fb:76:02:8e:f6:6c:b5:5b:62: bd:aa:b8:a8:a1:8d:04:cf:5f:1e:69:04:32:b8:68:fd:91:68: d8:e9:63:be:64:9b:d5:9f:f1:81:b9:28:30:9c:37:ef:fb:34: 63:c3:46:b1 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZsw9QyP+4r4lZ5rKlACTbSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTAxNTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDBmZjg4MDMzMGFmNzYyYWU2Y2MwNTBkZTVmMzRiNWY1N2IwYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdPq+oxuQCY74DamLIeM8TU4Gu3 3lU2Gx53RkobC8eZHkDeotFWH1eAtGxLOLb2keXh2qnjVLrdX0HoAUjZITd2J8TE pomZGNAWIsTGRNohNPYsHaYqSzVsLaUoeT92Z9iNjCw59AACatQIVlJN1RRQaniT dGn0hEOjwYOeE8o23Oua20RPIX+l0OeWpGLV4g4hSWv6uJOt9pYoWsqlEJ62i2IF 0qzRVxH6wj+qjZA/+GiD8qESnT9rUGJDE5ABoM8xeoxgCOch8uZylaMBNzDJ37U4 wXeM8B7VGQ9QGvdAwgyYgAiIg+D9HhvozhUtoWKws8+FkyzEttqsXrmKqQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFJQP+IAzCvdirmzAUN5fNLX1ewsJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzIzZTE2 ZS05NDNlLTQ1OTUtOTUzMC1hODJmNjU4YTJhYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvMjNlMTZl LTk0M2UtNDU5NS05NTMwLWE4MmY2NThhMmFhMS8xL2xBXzRnRE1LOTJLdWJNQlEz bDgwdGZWN0N3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQDH7EYAwQDT6r4AwQDXn3YAwQDg3XQAwQDshSI AwQCuVToAwQE2XCgAwQE2XPwMBQEAgACMA4DBQMqAGUAAwUAKgDbADAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgJQ8wIDALr8MA0GCSqGSIb3DQEBCwUAA4IBAQBEcwTp NcNEoBFEBKq2rmZPothO1rwfU7uggrAxUfe60kGsQMZxUEJA0Yz5dk2dpIA2oCZC tzVUOD0n7W6Xo1UlYs0WfPf1oJdc+L+32tQGdszf24rsQkIbUqJ5K6eXCuEhkmns m60v8c3EmZ1Qrp5OBQNZxKjerfrnKktrtMrthuJKoNnfh2OGDUBltDNCiJGLpluR pUoyTqTLNpq63rxv1pxerJT+01YEQAFOi8Nf7WKoan/v02SvWiOmQQGj1Z49Avs9 Dw2p/+8RnMieF777dgKO9my1W2K9qriooY0Ez18eaQQyuGj9kWjY6WO+ZJvVn/GB uSgwnDfv+zRjw0ax -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:50 2025 by rpki-client