This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer File: xGn-PYgsk-OOi2ooajF33Bfpmsc.cer (raw, json) Hash identifier: KqU6WhM6Car2OJOfpnK9+CZM4KPMJWrNdQc32mPqH+Y= Subject key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AFDF1329D15544779007C3596E6C8A3FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 08 Dec 2025 12:30:34 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 197453 IP: 46.183.176.0/21 IP: 91.200.86.0/23 IP: 178.57.80.0/20 IP: 185.9.84.0/22 IP: 185.162.232.0/24 IP: 185.195.243.0/24 IP: 185.196.116.0/24 IP: 185.218.182.0/23 IP: 193.47.154.0/24 IP: 212.74.228.0 -- 212.74.230.255 IP: 213.5.224.0/23 IP: 217.72.0.0/23 IP: 2a01:bc40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:f1:32:9d:15:54:47:79:00:7c:35:96:e6:c8:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 8 12:30:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:04:ab:85:d2:c5:cf:d8:25:62:f9:7f:dc: e5:38:fe:43:01:bd:fb:f8:89:b3:62:c1:51:98:2d: dc:e2:c5:ee:87:7f:14:b4:15:ce:30:4b:db:99:56: 32:a3:69:94:73:70:56:bc:91:3a:78:84:f8:55:88: af:e9:85:60:0d:27:05:51:b1:24:78:e5:95:ca:d4: e9:87:db:40:8a:e4:e0:d0:e4:99:d7:2e:93:c8:0d: db:2f:98:12:d1:76:09:5d:ae:5d:52:aa:1e:8f:07: 6d:70:2b:30:5c:79:7c:58:e6:5f:6b:39:05:8d:16: f1:19:b7:a4:1a:1f:21:e0:a4:b2:74:22:e3:eb:e8: 63:9c:ee:26:d0:b5:64:d1:63:dc:c6:40:be:54:63: a9:c4:8b:dd:ff:98:66:3f:d2:d3:65:af:6e:4f:07: 14:64:c2:b1:16:46:9c:b7:13:32:93:37:c5:3d:81: 94:33:2a:79:02:d4:c7:f8:b3:51:52:a7:2e:8f:82: cc:6e:77:65:db:02:64:92:35:36:69:0a:6d:47:18: e7:cd:3f:24:dd:ec:ef:c5:c3:c9:64:77:58:78:aa: b5:49:1f:94:60:f3:00:e8:8e:ab:63:38:66:0d:4f: d9:9b:38:a1:67:c1:19:0d:4a:ef:05:8d:41:f3:71: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.176.0/21 91.200.86.0/23 178.57.80.0/20 185.9.84.0/22 185.162.232.0/24 185.195.243.0/24 185.196.116.0/24 185.218.182.0/23 193.47.154.0/24 212.74.228.0-212.74.230.255 213.5.224.0/23 217.72.0.0/23 IPv6: 2a01:bc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197453 Signature Algorithm: sha256WithRSAEncryption 54:96:62:ac:12:ae:4a:c3:8a:0a:39:c8:de:36:4a:94:54:6e: 47:ea:46:01:cf:bf:64:c6:b4:45:97:3f:07:79:9e:b0:ee:fc: 2a:18:25:55:8a:f5:39:af:d2:f9:66:0f:a4:6e:8c:6c:c7:04: cb:93:59:a1:fb:f6:cc:ee:2f:4c:04:4c:37:ef:62:4b:a0:b9: 1e:22:61:b3:dd:97:da:c8:ff:38:47:21:42:ff:f2:f7:e0:0f: 09:f8:b5:2a:03:0d:cb:70:ec:0a:df:5f:d8:9c:1e:94:bc:2f: d1:2c:a0:f5:b3:9c:bb:6c:57:5f:13:0c:ac:c4:d6:d3:93:ff: b5:6b:45:f6:de:b8:c9:85:80:8e:d8:5f:d5:85:33:d3:5b:11: 4d:77:97:a3:44:94:a8:d6:c2:13:51:a9:aa:70:e3:b1:2a:83: 97:c6:5d:66:f2:12:46:18:88:f7:96:ce:73:a0:1b:e6:66:6d: 50:11:f8:70:ef:d7:97:e7:55:c2:4f:e6:0c:cc:19:4c:36:a3: 98:1a:37:dc:ab:55:66:f8:e6:86:95:8c:9a:2b:35:71:f6:34: 7e:96:d2:f6:59:39:73:06:d2:3a:bd:f3:f3:6e:36:a6:bb:c3: 61:21:ab:d5:26:a5:a9:cb:97:0b:b3:a4:4b:2b:34:5d:47:d2: be:8e:2c:e7 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZr98TKdFVRHeQB8NZbmyKP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA4MTIzMDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY5ZmUzZDg4MmM5M2UzOGU4YjZhMjg2YTMxNzdkYzE3ZTk5YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCwEq4XSxc/YJWL5f9zlOP5DAb37 +ImzYsFRmC3c4sXuh38UtBXOMEvbmVYyo2mUc3BWvJE6eIT4VYiv6YVgDScFUbEk eOWVytTph9tAiuTg0OSZ1y6TyA3bL5gS0XYJXa5dUqoejwdtcCswXHl8WOZfazkF jRbxGbekGh8h4KSydCLj6+hjnO4m0LVk0WPcxkC+VGOpxIvd/5hmP9LTZa9uTwcU ZMKxFkactxMykzfFPYGUMyp5AtTH+LNRUqcuj4LMbndl2wJkkjU2aQptRxjnzT8k 3ezvxcPJZHdYeKq1SR+UYPMA6I6rYzhmDU/ZmzihZ8EZDUrvBY1B83FE6wIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFMRp/j2ILJPjjotqKGoxd9wX6ZrHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2M0NzVh Yi1mZGQ1LTQ5MmYtODEzYS02MWQ5YTIzZjM0MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYzQ3NWFi LWZkZDUtNDkyZi04MTNhLTYxZDlhMjNmMzQxMS8xL3hHbi1QWWdzay1PT2kyb29h akYzM0JmcG1zYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBWBAIAATBQAwQDLrewAwQBW8hWAwQEsjlQAwQCuQlUAwQAuaLo AwQAucPzAwQAucR0AwQBudq2AwQAwS+aMAwDBALUSuQDBADUSuYDBAHVBeADBAHZ SAAwDQQCAAIwBwMFACoBvEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwNNMA0G CSqGSIb3DQEBCwUAA4IBAQBUlmKsEq5Kw4oKOcjeNkqUVG5H6kYBz79kxrRFlz8H eZ6w7vwqGCVVivU5r9L5Zg+kboxsxwTLk1mh+/bM7i9MBEw372JLoLkeImGz3Zfa yP84RyFC//L34A8J+LUqAw3LcOwK31/YnB6UvC/RLKD1s5y7bFdfEwysxNbTk/+1 a0X23rjJhYCO2F/VhTPTWxFNd5ejRJSo1sITUamqcOOxKoOXxl1m8hJGGIj3ls5z oBvmZm1QEfhw79eX51XCT+YMzBlMNqOYGjfcq1Vm+OaGlYyaKzVx9jR+ltL2WTlz BtI6vfPzbjamu8NhIavVJqWpy5cLs6RLKzRdR9K+jizn -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:23 2025 by rpki-client