This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer File: rfDfdxFHQeE6F9chPmlWv5YntVg.cer (raw, json) Hash identifier: St6xDrksNJC+LqcQcmFPTA77qHyrbAOmOjoRnJfFNRc= Subject key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B085951E258C0A168D9900D1BEC738FEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:00:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42236 AS: 49930 AS: 50457 AS: 62319 AS: 205662 IP: 37.44.248.0/22 IP: 77.72.48.0/21 IP: 91.142.136.0/24 IP: 91.194.36.0/23 IP: 91.216.118.0/24 IP: 91.238.212.0/24 IP: 178.209.160.0/19 IP: 185.4.216.0/22 IP: 185.40.44.0/22 IP: 185.66.184.0/22 IP: 185.116.188.0/22 IP: 185.150.72.0/22 IP: 185.203.0.0/22 IP: 185.210.132.0/22 IP: 193.104.43.0/24 IP: 193.106.120.0/22 IP: 193.169.74.0/23 IP: 194.116.178.0/23 IP: 194.126.192.0/24 IP: 195.253.216.0/21 IP: 2001:67c:2684::/48 IP: 2a01:4d20::/32 IP: 2a02:c900::/29 IP: 2a03:2220::/32 IP: 2a05:f700::/29 IP: 2a0b:5840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:59:51:e2:58:c0:a1:68:d9:90:0d:1b:ec:73:8f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 13:00:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adf0df77114741e13a17d7213e6956bf9627b558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:26:78:a7:3f:9e:cb:6b:00:4a:e4:dc:5a: 14:e3:55:15:e5:1c:2c:ba:ee:d1:85:f7:c5:44:cf: 17:25:cc:c2:f2:c7:11:44:8a:24:01:33:2f:57:a9: 26:41:38:00:3f:b8:ab:fb:e7:00:ad:54:86:63:55: 9f:d8:f5:83:d7:2b:a8:f6:e5:c1:27:64:8c:00:ea: 86:7a:57:6a:bc:93:07:dd:a7:09:55:aa:b1:55:7d: 56:35:08:80:c4:b7:5b:a6:2a:25:e9:86:bb:86:bc: a6:f6:98:f4:f1:eb:91:9f:fd:12:da:25:73:8f:7c: e5:dc:f5:71:35:ea:90:b7:8f:21:bf:6f:88:7d:c5: 83:a3:0f:00:bc:da:ab:ee:15:71:18:38:2c:a4:6c: 16:82:3d:ff:66:12:25:f8:e1:d7:75:d8:cc:2d:b6: b3:15:e2:50:a5:36:44:16:b6:95:e1:11:36:13:19: e5:14:fb:88:1d:35:f6:d3:f8:72:32:4e:5d:84:d3: 44:a6:1e:d2:ab:7c:09:46:11:9a:67:23:56:87:13: 7e:28:f5:6d:f7:03:b1:8d:95:07:b8:38:f5:aa:0f: a4:34:0f:8f:6c:7b:1a:3c:0d:af:50:1a:ae:49:7e: a3:01:01:41:e3:d4:e4:46:30:ee:c5:35:33:70:bc: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.248.0/22 77.72.48.0/21 91.142.136.0/24 91.194.36.0/23 91.216.118.0/24 91.238.212.0/24 178.209.160.0/19 185.4.216.0/22 185.40.44.0/22 185.66.184.0/22 185.116.188.0/22 185.150.72.0/22 185.203.0.0/22 185.210.132.0/22 193.104.43.0/24 193.106.120.0/22 193.169.74.0/23 194.116.178.0/23 194.126.192.0/24 195.253.216.0/21 IPv6: 2001:67c:2684::/48 2a01:4d20::/32 2a02:c900::/29 2a03:2220::/32 2a05:f700::/29 2a0b:5840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42236 49930 50457 62319 205662 Signature Algorithm: sha256WithRSAEncryption 93:31:1f:d1:9c:ed:20:66:fe:da:71:9c:27:d6:52:8c:90:50: 7b:57:0e:78:cd:17:0e:eb:1f:67:3d:d0:3b:d5:c1:04:d0:d7: 35:cf:32:bc:9c:5b:70:df:8f:45:67:28:1a:e8:cc:84:90:fb: a2:14:2b:12:dd:71:c3:a8:0c:2e:41:7b:bb:df:71:08:a7:a5: 43:9a:56:cd:3b:ff:89:d3:33:a0:74:9a:08:cc:41:a4:8c:1e: 62:61:a9:81:f8:2a:c4:73:1a:61:d3:bd:da:db:9f:aa:9e:8c: 30:a5:02:bd:e6:97:84:47:8c:73:89:3e:89:a7:13:2f:e8:4b: 75:6e:dc:ea:27:2a:4a:0f:f6:a1:ec:45:f7:d2:8a:cd:60:b1: 7e:6b:96:b2:d7:97:ed:aa:52:8a:0e:5d:63:a1:55:5d:83:8d: a2:e5:4d:f2:e0:da:39:fb:14:66:bb:4c:22:ed:4d:4f:0e:5c: a2:58:18:6e:2d:6d:0a:7d:b4:f9:ae:67:f8:63:26:fe:d2:54: 1d:af:22:e9:0b:fa:b6:29:b1:c5:14:6b:21:f6:1b:bd:14:e9: 4e:89:2a:69:35:15:24:f1:2c:fb:be:1e:a8:c9:1d:46:0d:bc: 1b:c3:06:c4:42:23:65:d0:c9:b2:d8:e4:f6:9a:c0:0d:7f:70: 3f:3b:21:1d -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAZsIWVHiWMChaNmQDRvsc4/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMTMwMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGYwZGY3NzExNDc0MWUxM2ExN2Q3MjEzZTY5NTZiZjk2MjdiNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUmeKc/nstrAErk3FoU41UV5Rws uu7RhffFRM8XJczC8scRRIokATMvV6kmQTgAP7ir++cArVSGY1Wf2PWD1yuo9uXB J2SMAOqGeldqvJMH3acJVaqxVX1WNQiAxLdbpiol6Ya7hrym9pj08euRn/0S2iVz j3zl3PVxNeqQt48hv2+IfcWDow8AvNqr7hVxGDgspGwWgj3/ZhIl+OHXddjMLbaz FeJQpTZEFraV4RE2ExnlFPuIHTX20/hyMk5dhNNEph7Sq3wJRhGaZyNWhxN+KPVt 9wOxjZUHuDj1qg+kNA+PbHsaPA2vUBquSX6jAQFB49TkRjDuxTUzcLz//wIDAQAB o4IDXTCCA1kwHQYDVR0OBBYEFK3w33cRR0HhOhfXIT5pVr+WJ7VYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2EzMGJl YS05ZTkzLTQwOTEtYjZlMS1lMWVmMjc3NzJlYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYTMwYmVh LTllOTMtNDA5MS1iNmUxLWUxZWYyNzc3MmVhZi8xL3JmRGZkeEZIUWVFNkY5Y2hQ bWxXdjVZbnRWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHHBggrBgEF BQcBBwEB/wSBtzCBtDB+BAIAATB4AwQCJSz4AwQDTUgwAwQAW46IAwQBW8IkAwQA W9h2AwQAW+7UAwQFstGgAwQCuQTYAwQCuSgsAwQCuUK4AwQCuXS8AwQCuZZIAwQC ucsAAwQCudKEAwQAwWgrAwQCwWp4AwQBwalKAwQBwnSyAwQAwn7AAwQDw/3YMDIE AgACMCwDBwAgAQZ8JoQDBQAqAU0gAwUDKgLJAAMFACoDIiADBQMqBfcAAwUDKgtY QDAuBggrBgEFBQcBCAEB/wQfMB2gGzAZAgMApPwCAwDDCgIDAMUZAgMA828CAwMj XjANBgkqhkiG9w0BAQsFAAOCAQEAkzEf0ZztIGb+2nGcJ9ZSjJBQe1cOeM0XDusf Zz3QO9XBBNDXNc8yvJxbcN+PRWcoGujMhJD7ohQrEt1xw6gMLkF7u99xCKelQ5pW zTv/idMzoHSaCMxBpIweYmGpgfgqxHMaYdO92tufqp6MMKUCveaXhEeMc4k+iacT L+hLdW7c6icqSg/2oexF99KKzWCxfmuWsteX7apSig5dY6FVXYONouVN8uDaOfsU ZrtMIu1NTw5colgYbi1tCn20+a5n+GMm/tJUHa8i6Qv6timxxRRrIfYbvRTpTokq aTUVJPEs+74eqMkdRg28G8MGxEIjZdDJstjk9prADX9wPzshHQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:50:02 2025 by rpki-client