This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer File: 08tc7MITufhtu6UYUh6FRuyThhw.cer (raw, json) Hash identifier: CSzx6Ln7uBGe1+Ylzeb1i7KXHA/0Cpb+PxG+a7t01IY= Subject key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B03A0DBBACC3F6137E7134EEA8A14C53F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 15:00:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 31034 AS: 199653 AS: 199883 AS: 200185 AS: 202242 AS: 202613 AS: 205727 AS: 213224 IP: 5.249.128.0/19 IP: 31.11.32.0/21 IP: 31.14.128.0/20 IP: 46.37.0.0/19 IP: 62.149.128.0/17 IP: 66.71.128.0/18 IP: 77.81.224.0/20 IP: 80.73.224.0/20 IP: 80.88.80.0/20 IP: 80.211.0.0/16 IP: 82.192.128.0/19 IP: 85.235.128.0/19 IP: 86.105.48.0/21 IP: 89.36.208.0/20 IP: 89.38.144.0/21 IP: 89.40.112.0/20 IP: 89.46.64.0/20 IP: 89.46.104.0/21 IP: 89.46.192.0/21 IP: 93.186.240.0/20 IP: 94.177.160.0 -- 94.177.255.255 IP: 95.110.128.0/17 IP: 109.70.240.0/21 IP: 176.107.128.0/19 IP: 185.8.48.0/22 IP: 185.12.176.0/22 IP: 185.35.64.0/22 IP: 185.43.208.0/22 IP: 185.56.8.0/22 IP: 185.58.116.0 -- 185.58.123.255 IP: 185.58.192.0/22 IP: 185.58.224.0/22 IP: 188.213.160.0/20 IP: 193.254.240.0/23 IP: 194.182.64.0/19 IP: 194.182.104.0/22 IP: 194.182.110.0/23 IP: 195.128.234.0/23 IP: 195.225.168.0/22 IP: 195.231.0.0/17 IP: 195.234.171.0/24 IP: 195.250.34.0/24 IP: 209.227.192.0/18 IP: 212.237.0.0/18 IP: 217.61.0.0/18 IP: 217.61.96.0/19 IP: 217.73.224.0/20 IP: 217.198.128.0/20 IP: 2a00:6d40::/29 IP: 2a01:6e60::/32 IP: 2a03:2c40::/32 IP: 2a03:a140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:a0:db:ba:cc:3f:61:37:e7:13:4e:ea:8a:14:c5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 15:00:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:8f:95:77:4f:02:f9:75:6d:4d:97:56:ef: 68:ce:50:bd:e3:fa:d3:e3:db:70:be:03:97:f7:5b: 0f:e7:73:6d:0a:80:c2:9e:2f:63:dd:07:76:b9:2d: ee:50:7c:12:21:24:77:ce:30:8b:dd:e8:6f:5f:af: ad:58:37:2b:44:ff:ea:9f:74:07:18:40:15:66:61: 63:f7:a7:23:ae:4e:a4:e0:ef:83:e5:9d:8f:b3:4a: 83:0e:0b:26:5a:7e:f9:32:ef:7e:65:6a:f8:70:a0: e0:76:52:32:0f:89:4e:46:71:e5:4d:b2:a7:43:f6: b2:42:bf:5e:62:5a:a9:fa:95:fc:a0:b3:bf:89:bd: 77:4f:0e:19:87:b7:49:f4:5c:68:87:0a:a5:38:b2: 67:49:a8:f2:6e:74:73:43:13:b4:a5:6f:65:04:81: 35:d6:1b:29:e9:4c:37:9b:ad:60:17:a1:46:8e:ad: be:ad:e1:a3:47:ad:f6:dc:de:79:4b:89:f0:c1:c0: 6e:49:f3:be:ff:4c:c2:77:87:3b:db:63:0d:4f:37: d3:8a:70:5a:35:2f:a7:b5:b4:35:10:50:03:3f:79: db:e1:f0:1c:7f:91:06:a6:55:24:fe:86:1c:28:91: 3f:be:bd:2b:05:ee:da:d6:69:dd:1f:b4:45:87:3c: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.128.0/19 31.11.32.0/21 31.14.128.0/20 46.37.0.0/19 62.149.128.0/17 66.71.128.0/18 77.81.224.0/20 80.73.224.0/20 80.88.80.0/20 80.211.0.0/16 82.192.128.0/19 85.235.128.0/19 86.105.48.0/21 89.36.208.0/20 89.38.144.0/21 89.40.112.0/20 89.46.64.0/20 89.46.104.0/21 89.46.192.0/21 93.186.240.0/20 94.177.160.0-94.177.255.255 95.110.128.0/17 109.70.240.0/21 176.107.128.0/19 185.8.48.0/22 185.12.176.0/22 185.35.64.0/22 185.43.208.0/22 185.56.8.0/22 185.58.116.0-185.58.123.255 185.58.192.0/22 185.58.224.0/22 188.213.160.0/20 193.254.240.0/23 194.182.64.0/19 194.182.104.0/22 194.182.110.0/23 195.128.234.0/23 195.225.168.0/22 195.231.0.0/17 195.234.171.0/24 195.250.34.0/24 209.227.192.0/18 212.237.0.0/18 217.61.0.0/18 217.61.96.0/19 217.73.224.0/20 217.198.128.0/20 IPv6: 2a00:6d40::/29 2a01:6e60::/32 2a03:2c40::/32 2a03:a140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31034 199653 199883 200185 202242 202613 205727 213224 Signature Algorithm: sha256WithRSAEncryption 7d:61:4c:9b:a6:30:4f:16:a1:97:7b:d1:3b:8f:e4:8b:ea:10: a1:b5:c7:1f:97:d9:9e:9b:47:c8:2e:af:5a:a1:02:5f:53:9e: 22:1c:31:bd:34:35:2c:cf:09:a1:99:33:d8:93:9c:7b:27:e7: ee:3c:87:0e:e9:ae:55:7b:ec:68:05:56:29:75:14:45:a8:e6: 5d:d6:3e:c2:00:02:42:79:70:90:ed:f4:9b:6c:20:05:61:6c: 7f:4f:e4:dd:2f:9e:a4:43:aa:e7:81:f9:8f:19:f3:c7:dc:1c: 01:34:a9:e9:28:b3:92:b9:ac:a9:49:3c:99:b2:f6:23:3a:0d: 6e:a8:c6:4f:ea:07:95:48:e4:78:51:2d:c0:2e:53:61:34:89: 0d:be:62:5a:37:69:f4:c7:b0:1f:b7:6a:64:bb:22:c3:f7:1c: 0e:63:b2:92:2b:8b:86:16:4c:c2:7d:30:b1:81:a1:29:03:0f: 93:ec:4a:d4:35:51:c1:e5:63:67:04:fb:d8:7a:53:25:90:c0: 2f:87:d4:46:a7:06:9a:87:d9:d3:67:74:6d:c0:48:1f:e9:fe: 20:f5:74:90:fa:63:b2:9b:34:3d:3d:cd:db:32:1e:72:5e:35: f8:90:07:7d:07:e1:b4:1c:1f:29:ce:3d:e0:1a:73:00:04:01: b7:71:39:8d -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgISAZsDoNu6zD9hN+cTTuqKFMU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MTUwMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NiNWNlY2MyMTNiOWY4NmRiYmE1MTg1MjFlODU0NmVjOTM4NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/6PlXdPAvl1bU2XVu9ozlC94/rT 49twvgOX91sP53NtCoDCni9j3Qd2uS3uUHwSISR3zjCL3ehvX6+tWDcrRP/qn3QH GEAVZmFj96cjrk6k4O+D5Z2Ps0qDDgsmWn75Mu9+ZWr4cKDgdlIyD4lORnHlTbKn Q/ayQr9eYlqp+pX8oLO/ib13Tw4Zh7dJ9FxohwqlOLJnSajybnRzQxO0pW9lBIE1 1hsp6Uw3m61gF6FGjq2+reGjR6323N55S4nwwcBuSfO+/0zCd4c722MNTzfTinBa NS+ntbQ1EFADP3nb4fAcf5EGplUk/oYcKJE/vr0rBe7a1mndH7RFhzxlSQIDAQAB o4IEGDCCBBQwHQYDVR0OBBYEFNPLXOzCE7n4bbulGFIehUbsk4YcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2UxMTdm ZS1jOWU3LTRkNDEtOTRkZi04NDI2OTQxMmQ1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZTExN2Zl LWM5ZTctNGQ0MS05NGRmLTg0MjY5NDEyZDU2MS8xLzA4dGM3TUlUdWZodHU2VVlV aDZGUnV5VGhody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBcwYIKwYB BQUHAQcBAf8EggFiMIIBXjCCATYEAgABMIIBLgMEBQX5gAMEAx8LIAMEBB8OgAME BS4lAAMEBz6VgAMEBkJHgAMEBE1R4AMEBFBJ4AMEBFBYUAMDAFDTAwQFUsCAAwQF VeuAAwQDVmkwAwQEWSTQAwQDWSaQAwQEWShwAwQEWS5AAwQDWS5oAwQDWS7AAwQE XbrwMAsDBAVesaADAwFesAMEB19ugAMEA21G8AMEBbBrgAMEArkIMAMEArkMsAME ArkjQAMEArkr0AMEArk4CDAMAwQCuTp0AwQCuTp4AwQCuTrAAwQCuTrgAwQEvNWg AwQBwf7wAwQFwrZAAwQCwrZoAwQBwrZuAwQBw4DqAwQCw+GoAwQHw+cAAwQAw+qr AwQAw/oiAwQG0ePAAwQG1O0AAwQG2T0AAwQF2T1gAwQE2UngAwQE2caAMCIEAgAC MBwDBQMqAG1AAwUAKgFuYAMFACoDLEADBQAqA6FAMDwGCCsGAQUFBwEIAQH/BC0w K6ApMCcCAnk6AgMDC+UCAwMMywIDAw35AgMDFgICAwMXdQIDAyOfAgMDQOgwDQYJ KoZIhvcNAQELBQADggEBAH1hTJumME8WoZd70TuP5IvqEKG1xx+X2Z6bR8gur1qh Al9TniIcMb00NSzPCaGZM9iTnHsn5+48hw7prlV77GgFVil1FEWo5l3WPsIAAkJ5 cJDt9JtsIAVhbH9P5N0vnqRDqueB+Y8Z88fcHAE0qekos5K5rKlJPJmy9iM6DW6o xk/qB5VI5HhRLcAuU2E0iQ2+Ylo3afTHsB+3amS7IsP3HA5jspIri4YWTMJ9MLGB oSkDD5PsStQ1UcHlY2cE+9h6UyWQwC+H1EanBpqH2dNndG3ASB/p/iD1dJD6Y7Kb ND09zdsyHnJeNfiQB30H4bQcHynOPeAacwAEAbdxOY0= -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:01 2025 by rpki-client