This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer File: 25Kd7FwPI63Zuu7qe7OayHpykIM.cer (raw, json) Hash identifier: bdnPZBKbFVHUrKEbYIQJnWG8CO70Xq2W3nTMTkO0jMM= Subject key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77597117157CF38CAD82F5B8EB8A6497 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47988 IP: 195.114.13.0/24 IP: 2001:678:ac8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:17:15:7c:f3:8c:ad:82:f5:b8:eb:8a:64:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db929dec5c0f23add9baeeea7bb39ac87a729083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:75:67:7a:8f:68:2e:ce:5d:f8:e2:b5:24:20: 95:44:75:04:07:d3:fb:c1:82:75:7b:87:c7:6a:45: 21:4a:72:f1:85:d2:84:e0:7e:58:70:10:70:4a:df: 75:67:1e:bf:c1:49:65:1d:71:4e:dc:bc:f1:43:71: 62:1b:6a:ab:21:af:25:75:f1:ad:26:c8:bd:59:c1: 59:c0:6f:5d:8f:e8:28:68:44:31:6b:b3:58:f6:28: 91:a7:bf:43:a0:80:1b:17:a3:b6:32:a7:a1:9c:79: b8:34:81:c3:c8:29:bb:ba:ea:aa:dd:e3:ce:f5:09: b9:d0:13:a6:dc:c2:c3:bd:85:8c:a0:5a:35:01:f8: 5d:b8:40:8e:1c:58:91:4e:9e:b9:c9:59:0e:16:33: a8:7e:3e:1d:30:1c:a0:5a:50:7a:ba:74:79:c9:e1: 4e:1c:9e:6a:d6:dc:d1:7b:3b:e4:b8:d6:14:13:6e: 94:da:45:64:73:d9:3b:a5:50:24:db:ac:be:e5:c9: 4c:45:eb:f7:e3:f3:83:55:ae:f0:05:49:e4:ea:15: 2f:9f:bc:1b:15:53:72:76:77:68:96:72:32:4b:4f: 8f:c0:b6:c1:6a:4b:87:3d:36:ca:7c:b4:76:f8:6c: 90:41:94:2a:fd:ff:6a:19:01:5f:aa:cf:f2:eb:07: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.13.0/24 IPv6: 2001:678:ac8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47988 Signature Algorithm: sha256WithRSAEncryption 31:af:a2:00:b6:5f:ec:94:b8:12:92:6d:44:08:3d:f6:96:83: 80:ef:aa:a7:7e:8b:fa:1f:97:13:9b:f1:8b:94:a0:c9:6e:7f: 57:2b:15:48:61:8f:b3:d2:41:df:95:83:a9:a7:2b:da:ee:7a: 7b:93:0d:b7:98:14:6a:03:da:25:3d:54:d6:45:09:c9:85:69: 2a:fc:2b:8f:e4:b9:91:57:49:0a:58:d1:1a:c3:1c:f6:b7:09: 20:46:49:3d:5d:b2:39:89:ed:31:48:24:10:e9:b3:82:02:68: 37:3b:02:a3:36:5e:3d:65:5a:db:d3:d4:10:99:e7:9e:66:e2: 0b:52:54:4e:3b:65:8a:25:03:35:f8:c8:76:93:df:f7:24:0e: 40:d1:c3:37:2d:e4:8c:0f:da:61:67:17:db:7e:30:d3:64:f2: e9:7f:96:c5:32:27:25:85:83:97:36:ce:cd:44:f6:0c:34:b9: c0:af:34:82:7c:a2:89:ba:1f:13:47:28:52:56:d2:af:d5:0b: 8d:1d:52:0c:07:43:e3:50:9d:71:04:7b:c2:3b:7a:57:73:3c: ff:a4:f1:11:1e:00:3a:4d:c5:5d:ac:97:f6:a7:e9:b6:d1:11: 80:d0:29:8b:d4:59:4b:79:81:5b:a5:87:a7:50:17:24:2c:b0: 00:9a:f8:4b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3WXEXFXzzjK2C9bjrimSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjkyOWRlYzVjMGYyM2FkZDliYWVlZWE3YmIzOWFjODdhNzI5MDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nVneo9oLs5d+OK1JCCVRHUEB9P7 wYJ1e4fHakUhSnLxhdKE4H5YcBBwSt91Zx6/wUllHXFO3LzxQ3FiG2qrIa8ldfGt Jsi9WcFZwG9dj+goaEQxa7NY9iiRp79DoIAbF6O2MqehnHm4NIHDyCm7uuqq3ePO 9Qm50BOm3MLDvYWMoFo1AfhduECOHFiRTp65yVkOFjOofj4dMBygWlB6unR5yeFO HJ5q1tzRezvkuNYUE26U2kVkc9k7pVAk26y+5clMRev34/ODVa7wBUnk6hUvn7wb FVNydndolnIyS0+PwLbBakuHPTbKfLR2+GyQQZQq/f9qGQFfqs/y6wepIwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFNuSnexcDyOt2bru6nuzmsh6cpCDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2JlNWZm Zi1jOTExLTQ1N2MtOTVmYy1kMzBiN2UyNWFlMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvYmU1ZmZm LWM5MTEtNDU3Yy05NWZjLWQzMGI3ZTI1YWUwYi8xLzI1S2Q3RndQSTYzWnV1N3Fl N09heUhweWtJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAw3INMA8EAgACMAkDBwAgAQZ4CsgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDALt0MA0GCSqGSIb3DQEBCwUAA4IBAQAxr6IAtl/s lLgSkm1ECD32loOA76qnfov6H5cTm/GLlKDJbn9XKxVIYY+z0kHflYOppyva7np7 kw23mBRqA9olPVTWRQnJhWkq/CuP5LmRV0kKWNEawxz2twkgRkk9XbI5ie0xSCQQ 6bOCAmg3OwKjNl49ZVrb09QQmeeeZuILUlROO2WKJQM1+Mh2k9/3JA5A0cM3LeSM D9phZxfbfjDTZPLpf5bFMiclhYOXNs7NRPYMNLnArzSCfKKJuh8TRyhSVtKv1QuN HVIMB0PjUJ1xBHvCO3pXczz/pPERHgA6TcVdrJf2p+m20RGA0CmL1FlLeYFbpYen UBckLLAAmvhL -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:36 2026 by rpki-client