This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer File: sDmrgpj6NjroN-UwAolpzFy_EE4.cer (raw, json) Hash identifier: fBAwDg8KR20QarGGS6ycftbjCjdAsfTQzn5jx8m6BfA= Subject key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B31B6F0169E6C03445E2F6877B3940505 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 13:47:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214865 IP: 62.169.139.0/24 IP: 109.71.156.0/24 IP: 2a14:5140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:b6:f0:16:9e:6c:03:44:5e:2f:68:77:b3:94:05:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 13:47:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b039ab8298fa363ae837e530028969cc5cbf104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:1f:30:ec:25:f4:06:a6:2a:83:bc:e2:6a: e2:6c:14:30:97:c1:c8:e7:9b:26:59:95:72:6f:1e: 49:24:53:4a:29:3e:32:a3:13:e0:89:62:36:02:79: e0:f9:6a:ba:70:91:1f:60:05:10:1f:4c:c0:1f:4f: ee:ad:e6:6d:f4:dd:30:d5:3f:e1:0c:74:ed:66:5d: b4:35:a6:27:a5:08:12:3c:71:2d:5d:03:bd:2f:4b: c1:b3:f5:f5:eb:31:1e:48:2c:26:d1:ef:43:c8:b8: 27:98:62:de:7f:8f:aa:fa:53:ec:e4:a4:61:a9:59: a6:03:05:96:50:42:5b:a6:93:d8:d5:7d:dc:0a:ef: 01:18:c6:76:ac:69:ce:62:9b:18:fa:ee:2d:7a:40: 35:8d:ee:06:ce:a9:ab:2a:f2:02:62:26:45:e5:a6: 77:54:8f:cf:e6:e2:05:c9:95:ee:55:8e:7a:aa:1f: a2:c0:54:77:d9:44:2e:85:34:86:62:35:f6:f6:28: 9c:b7:3b:f4:21:9f:aa:4d:e6:b7:e2:54:29:cc:b9: 37:5f:11:56:1e:0a:72:87:b8:59:8c:3a:8a:83:a1: d9:0b:2f:28:ae:e1:99:6f:01:bd:74:5a:72:1f:ab: 56:97:a3:6d:45:47:c8:fe:67:77:a0:9f:be:34:90: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.139.0/24 109.71.156.0/24 IPv6: 2a14:5140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214865 Signature Algorithm: sha256WithRSAEncryption 25:97:8b:ed:5b:9a:e8:ff:2d:58:58:e4:6f:dc:c9:fe:86:3f: 24:4d:cd:ac:fa:7d:97:88:2b:d4:1a:a8:aa:db:70:54:03:b4: cb:25:a3:4a:e5:42:bb:3f:a3:48:b9:35:f0:20:99:f0:94:8c: f2:6a:2f:e0:5c:44:ea:a5:1d:9b:2e:d4:0c:f2:8c:8d:da:a6: a5:13:ec:7e:32:2b:2c:0d:42:09:7f:18:63:c9:2a:52:fc:4e: de:80:34:6f:51:a5:44:12:ae:05:06:48:62:e0:b1:76:73:25: a9:bf:b4:dc:d8:f0:06:d6:6f:34:a3:70:1b:6a:e5:6d:de:26: 50:cd:f9:ff:d3:8e:2a:7e:c9:48:03:9d:8f:8c:be:f6:03:99: 5f:a7:27:6e:52:4f:7c:da:08:cc:1e:3b:d8:72:cb:40:92:7d: 66:c6:12:9e:47:16:89:d3:c5:bb:95:a5:f4:34:aa:18:3b:fa: 0c:f5:29:5a:f5:3a:c4:7a:97:d8:df:cd:5d:9b:57:15:01:84: 85:83:7f:3c:8f:ba:97:2e:28:1a:05:24:fe:3c:24:79:f4:6d: 56:4a:e3:dc:0a:ef:ec:ce:fc:fa:8b:10:5f:b1:b9:89:41:8c: a4:c2:14:d8:a4:af:36:9a:ac:56:2e:7e:40:23:08:3c:4a:53: 6f:00:90:6f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsxtvAWnmwDRF4vaHezlAUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTM0NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDM5YWI4Mjk4ZmEzNjNhZTgzN2U1MzAwMjg5NjljYzVjYmYxMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MwfMOwl9AamKoO84mribBQwl8HI 55smWZVybx5JJFNKKT4yoxPgiWI2Anng+Wq6cJEfYAUQH0zAH0/ureZt9N0w1T/h DHTtZl20NaYnpQgSPHEtXQO9L0vBs/X16zEeSCwm0e9DyLgnmGLef4+q+lPs5KRh qVmmAwWWUEJbppPY1X3cCu8BGMZ2rGnOYpsY+u4tekA1je4GzqmrKvICYiZF5aZ3 VI/P5uIFyZXuVY56qh+iwFR32UQuhTSGYjX29iictzv0IZ+qTea34lQpzLk3XxFW Hgpyh7hZjDqKg6HZCy8oruGZbwG9dFpyH6tWl6NtRUfI/md3oJ++NJBZhQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLA5q4KY+jY66DflMAKJacxcvxBOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVmZDcy Zi1lZjc3LTQ1MzctODllOS05ZmJkOTYzYTUxM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWZkNzJm LWVmNzctNDUzNy04OWU5LTlmYmQ5NjNhNTEzYy8xL3NEbXJncGo2Tmpyb04tVXdB b2xwekZ5X0VFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAPqmLAwQAbUecMA0EAgACMAcDBQMqFFFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHUTANBgkqhkiG9w0BAQsFAAOCAQEAJZeL 7Vua6P8tWFjkb9zJ/oY/JE3NrPp9l4gr1BqoqttwVAO0yyWjSuVCuz+jSLk18CCZ 8JSM8mov4FxE6qUdmy7UDPKMjdqmpRPsfjIrLA1CCX8YY8kqUvxO3oA0b1GlRBKu BQZIYuCxdnMlqb+03NjwBtZvNKNwG2rlbd4mUM35/9OOKn7JSAOdj4y+9gOZX6cn blJPfNoIzB472HLLQJJ9ZsYSnkcWidPFu5Wl9DSqGDv6DPUpWvU6xHqX2N/NXZtX FQGEhYN/PI+6ly4oGgUk/jwkefRtVkrj3Arv7M78+osQX7G5iUGMpMIU2KSvNpqs Vi5+QCMIPEpTbwCQbw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:59:17 2025 by rpki-client