This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer File: tFrdzVeWSPw_YSTlWEee8LB_AYw.cer (raw, json) Hash identifier: cTYMJW0RUjxVAqp/24siw/+SRH9Ns7mnE7qj/zefrWM= Subject key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3660259BEA112B340FEE46DDA577F3A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 11:30:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215024 IP: 45.138.0.0/22 IP: 45.148.64.0/22 IP: 109.71.159.0/24 IP: 2a14:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:60:25:9b:ea:11:2b:34:0f:ee:46:dd:a5:77:f3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 11:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b45addcd579648fc3f6124e558479ef0b07f018c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:ac:8e:88:84:18:a6:3b:82:ab:b5:fe:73: 48:d7:26:d0:d3:14:00:2e:33:23:55:f3:8a:e5:01: 52:7d:f7:45:c6:92:ed:a8:df:ec:e1:ac:7f:e7:6f: 7c:52:b9:08:1a:1e:a8:40:17:3f:ee:c3:9b:67:cd: 51:e0:ee:a7:bb:f7:c2:42:c3:4c:ca:0c:3d:41:24: 29:60:94:0d:11:f3:5a:0b:a5:08:b9:3e:eb:59:cb: bc:9c:8d:d4:2f:8c:ee:73:9d:15:80:a2:d7:4a:b1: 5d:02:70:74:86:02:ee:6f:03:93:25:b9:e9:71:52: 46:c6:53:fa:1e:53:41:8d:25:58:e5:69:7a:58:d3: 36:49:69:d0:25:77:62:2e:f0:52:28:27:be:89:ba: 21:32:68:a1:40:db:39:7d:89:aa:36:16:9a:ed:00: ce:28:b9:2b:6c:0f:ae:7b:23:38:f9:f2:f9:a6:c6: 7f:f1:47:f3:3a:f6:d0:51:4a:7c:a0:f9:be:ae:79: 06:b9:21:ff:d6:a5:dc:57:db:ae:2e:5c:9a:30:96: 31:0e:a9:2e:2a:22:b4:bd:24:b2:4b:4e:e7:77:93: 70:c8:1b:62:34:07:6b:14:c6:e3:75:73:90:e1:df: a1:19:5f:c4:74:4d:00:13:e0:3f:05:17:ac:17:47: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.0.0/22 45.148.64.0/22 109.71.159.0/24 IPv6: 2a14:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215024 Signature Algorithm: sha256WithRSAEncryption 62:d2:62:09:54:7f:40:fb:a5:f2:5c:dc:26:f6:98:7c:3c:ec: 1a:b4:f3:09:74:6f:c2:23:49:be:8f:83:a3:8d:20:13:aa:d5: 91:04:c8:14:49:c9:d5:8b:6a:b4:e1:78:f3:05:b5:40:72:70: d6:78:18:18:8b:0e:83:73:d2:aa:3a:99:19:0e:c6:3d:13:a3: d3:44:c2:b1:9b:bc:ea:56:20:1e:6c:5a:de:af:73:88:f5:f1: 0e:9e:be:ae:74:b2:bd:79:1f:7d:bd:64:09:c0:a0:15:62:a0: b0:cb:5c:c2:1a:31:4e:a0:bd:31:df:8e:41:cf:a1:59:f3:82: 28:f8:76:0f:11:44:89:d7:1d:b2:32:01:6f:9c:af:ab:f4:8d: ef:57:49:4e:11:4b:d3:bd:40:79:8a:75:da:c4:70:3c:d7:9c: f2:83:c1:95:06:05:7e:99:4b:7d:3c:05:a7:3c:66:5c:9f:b2: 9a:20:af:3c:e4:55:d9:65:1b:77:cb:89:9e:ab:98:95:9f:fb: 88:ff:01:b1:6b:45:2b:ae:1e:39:cd:d6:d2:61:e0:db:ed:e2: bb:93:db:fc:aa:8d:54:80:a3:75:b5:63:1f:0b:92:25:23:ec: fa:2f:a8:6c:11:d0:97:cd:6b:df:f7:11:71:64:3d:60:69:23: 13:94:64:4d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZs2YCWb6hErNA/uRt2ld/OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTEzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDVhZGRjZDU3OTY0OGZjM2Y2MTI0ZTU1ODQ3OWVmMGIwN2YwMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/OsjoiEGKY7gqu1/nNI1ybQ0xQA LjMjVfOK5QFSffdFxpLtqN/s4ax/5298UrkIGh6oQBc/7sObZ81R4O6nu/fCQsNM ygw9QSQpYJQNEfNaC6UIuT7rWcu8nI3UL4zuc50VgKLXSrFdAnB0hgLubwOTJbnp cVJGxlP6HlNBjSVY5Wl6WNM2SWnQJXdiLvBSKCe+ibohMmihQNs5fYmqNhaa7QDO KLkrbA+ueyM4+fL5psZ/8UfzOvbQUUp8oPm+rnkGuSH/1qXcV9uuLlyaMJYxDqku KiK0vSSyS07nd5NwyBtiNAdrFMbjdXOQ4d+hGV/EdE0AE+A/BResF0d9xwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2Y0ZjI0 NC04YzBjLTQ1NjQtOWM0Mi1hZjYwZmQ1ZjA2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZjRmMjQ0 LThjMGMtNDU2NC05YzQyLWFmNjBmZDVmMDZiMS8xL3RGcmR6VmVXU1B3X1lTVGxX RWVlOExCX0FZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLYoAAwQCLZRAAwQAbUefMA0EAgACMAcDBQMq FEjAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNH8DANBgkqhkiG9w0BAQsFAAOC AQEAYtJiCVR/QPul8lzcJvaYfDzsGrTzCXRvwiNJvo+Do40gE6rVkQTIFEnJ1Ytq tOF48wW1QHJw1ngYGIsOg3PSqjqZGQ7GPROj00TCsZu86lYgHmxa3q9ziPXxDp6+ rnSyvXkffb1kCcCgFWKgsMtcwhoxTqC9Md+OQc+hWfOCKPh2DxFEidcdsjIBb5yv q/SN71dJThFL071AeYp12sRwPNec8oPBlQYFfplLfTwFpzxmXJ+ymiCvPORV2WUb d8uJnquYlZ/7iP8BsWtFK64eOc3W0mHg2+3iu5Pb/KqNVICjdbVjHwuSJSPs+i+o bBHQl81r3/cRcWQ9YGkjE5RkTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:44 2025 by rpki-client