This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer File: 0Jp_f91UoXzl4SpBgutlJHn511g.cer (raw, json) Hash identifier: 2PMwc4C0PVGRj7qCzBaEIy+YaM7DGFfIB7pBhW5xo7A= Subject key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0E2470FA3D22AA35CAA5F76A79A3756B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 16:00:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.69.248.0/22 IP: 2a05:2640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:70:fa:3d:22:aa:35:ca:a5:f7:6a:79:a3:75:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 16:00:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:5a:f2:80:ef:a3:de:2e:a3:ec:ed:1b:0e: 30:43:24:35:f6:d7:9d:8e:ec:bd:04:eb:4f:f4:4c: 98:77:ba:e6:06:51:8b:2d:be:67:65:3f:e1:0a:ce: 6c:b9:6a:de:0b:21:dd:9c:a2:45:bd:8e:f9:04:04: 71:0f:bf:8a:97:23:71:6b:f7:4b:5d:d1:58:6f:e7: 32:6e:79:bc:70:fb:4e:2a:96:f2:88:13:32:99:b0: d1:37:28:9c:82:22:51:e6:94:f5:2c:ca:60:38:b7: 07:75:ae:b7:31:45:52:aa:e1:f8:e6:5a:65:c9:25: 86:0e:f5:a2:6e:2f:20:75:1c:f2:99:05:b3:08:20: bc:11:10:29:48:9b:55:36:37:75:d2:81:97:d2:4a: 8f:36:3e:22:28:35:fc:e6:c3:bd:5e:b9:5b:93:f8: d5:17:80:12:89:56:d5:78:ee:f2:00:f4:01:4d:86: 98:b2:67:5c:e6:ac:b0:f9:4a:7f:c5:b4:00:bc:59: a9:ae:82:ad:ea:83:c6:27:ba:78:24:07:de:ad:fa: 7a:fd:fd:83:2c:76:2e:cc:ef:e0:da:c2:ab:16:b6: 42:fb:0a:d9:d0:4c:5f:2b:62:57:60:ed:35:cc:4d: 9b:9b:78:b6:83:c9:92:36:de:d6:95:10:51:94:0c: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.248.0/22 IPv6: 2a05:2640::/29 Signature Algorithm: sha256WithRSAEncryption 63:59:89:7d:d8:0d:40:78:96:09:f7:34:1d:3b:51:62:18:a6: 53:18:d5:2b:bc:ed:49:19:48:41:2b:55:cd:a1:51:93:a8:d3: 5b:a7:96:16:31:89:7c:bd:1b:35:40:bd:8f:a0:0c:1b:78:a1: 6a:7b:c5:09:af:29:3a:a6:f8:41:4e:c9:e7:3e:31:80:e0:35: 51:9f:62:2d:fe:57:32:1a:03:f4:3b:bd:ed:68:e7:75:22:32: cb:9e:22:c5:e1:ad:19:48:d1:7c:96:cb:e2:e9:26:44:c5:d6: db:eb:be:e9:5a:61:f8:51:5a:80:5e:d6:e3:1e:d8:54:fe:32: 69:bd:74:1c:86:a5:d0:e1:e1:56:88:9d:d2:eb:d8:df:31:c3: 2b:c6:a0:dc:a2:f6:c5:3e:f0:8b:74:8a:1f:6c:d3:04:b1:35: 07:a3:57:77:d2:98:b3:9d:ef:9b:8b:f1:35:fb:f7:b2:29:4b: e2:9c:cb:3d:50:c6:1e:75:e7:0b:21:4c:7e:45:6e:2e:a8:22: 59:25:3e:db:c2:72:4d:59:58:c2:6e:90:04:f6:8c:65:d3:fb: fd:29:47:11:c7:cb:9d:23:52:eb:96:8e:0a:1b:63:e1:ee:7f: 5f:cd:b2:22:33:24:d1:67:0e:3c:07:ea:e3:d6:d0:55:02:4b: cb:1f:43:ae -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZsOJHD6PSKqNcql92p5o3VrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMTYwMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDlhN2Y3ZmRkNTRhMTdjZTVlMTJhNDE4MmViNjUyNDc5ZjlkNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBFa8oDvo94uo+ztGw4wQyQ19ted juy9BOtP9EyYd7rmBlGLLb5nZT/hCs5suWreCyHdnKJFvY75BARxD7+KlyNxa/dL XdFYb+cybnm8cPtOKpbyiBMymbDRNyicgiJR5pT1LMpgOLcHda63MUVSquH45lpl ySWGDvWibi8gdRzymQWzCCC8ERApSJtVNjd10oGX0kqPNj4iKDX85sO9Xrlbk/jV F4ASiVbVeO7yAPQBTYaYsmdc5qyw+Up/xbQAvFmproKt6oPGJ7p4JAferfp6/f2D LHYuzO/g2sKrFrZC+wrZ0ExfK2JXYO01zE2bm3i2g8mSNt7WlRBRlAy3fQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNCaf3/dVKF85eEqQYLrZSR5+ddYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2IzZDk3 ZS01Y2MyLTQ2NjktYjM3OC01ODc1YTQ0ODlkYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYjNkOTdl LTVjYzItNDY2OS1iMzc4LTU4NzVhNDQ4OWRiYS8xLzBKcF9mOTFVb1h6bDRTcEJn dXRsSkhuNTExZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUX4MA0EAgACMAcDBQMqBSZAMA0GCSqGSIb3 DQEBCwUAA4IBAQBjWYl92A1AeJYJ9zQdO1FiGKZTGNUrvO1JGUhBK1XNoVGTqNNb p5YWMYl8vRs1QL2PoAwbeKFqe8UJryk6pvhBTsnnPjGA4DVRn2It/lcyGgP0O73t aOd1IjLLniLF4a0ZSNF8lsvi6SZExdbb677pWmH4UVqAXtbjHthU/jJpvXQchqXQ 4eFWiJ3S69jfMcMrxqDcovbFPvCLdIofbNMEsTUHo1d30pizne+bi/E1+/eyKUvi nMs9UMYedecLIUx+RW4uqCJZJT7bwnJNWVjCbpAE9oxl0/v9KUcRx8udI1Lrlo4K G2Ph7n9fzbIiMyTRZw48B+rj1tBVAkvLH0Ou -----END CERTIFICATE-----Generated at Sun Dec 14 13:54:44 2025 by rpki-client