This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer File: VKDwgR-cJWN0RIqgFdd2knGCG_M.cer (raw, json) Hash identifier: sPxtF41mVFmrDiMxGD0jD+8mo7+p9EKbbi9q2iuoyvo= Subject key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC9CEC3EBB0D27C6D09CC5DDFB5C2E31B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 09:32:42 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 207964 IP: 5.23.32.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:ce:c3:eb:b0:d2:7c:6d:09:cc:5d:df:b5:c2:e3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 09:32:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54a0f0811f9c256374448aa015d7769271821bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:4a:dc:7d:87:3d:40:7d:a2:c1:16:a7:01: 6c:b5:9f:ef:f3:3f:b3:63:eb:3b:82:cb:f8:64:b3: ea:ac:06:05:48:ac:76:c0:8d:69:6a:56:e4:df:00: 7c:4b:88:f9:92:89:30:65:b7:c1:3c:2e:0c:2c:13: ea:da:a8:0b:d3:b4:11:af:da:8d:59:2d:e3:5f:0a: d1:50:f0:cd:57:6d:a8:73:70:97:df:e2:b2:16:21: 24:ed:53:99:8c:72:ca:8d:24:ab:5b:5e:ce:f3:d5: bd:39:bb:ef:d8:4f:a9:d7:5c:c9:3d:df:03:d9:e6: 0c:3f:79:d4:5b:55:dd:79:00:0e:f9:b6:39:fc:67: b0:8d:11:99:aa:56:04:f4:66:0b:81:36:a5:39:9e: ad:b3:10:b0:ea:29:aa:62:54:87:81:a3:99:5d:c4: 15:86:c1:42:2b:dc:2c:62:c4:64:5b:0d:71:f5:c3: 5e:b7:50:e2:fa:87:2b:1b:e6:93:72:ff:a8:38:66: 83:4c:61:1f:ef:78:ec:f2:2c:dc:6f:5c:a7:4a:40: bb:77:7b:2d:61:4f:36:66:24:b5:29:bd:71:4f:cd: f5:6f:b7:5e:9c:cb:e9:d2:ae:5a:da:df:82:bf:2f: 92:56:ea:00:86:5b:c4:22:b0:c6:39:c4:b8:3c:12: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.32.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207964 Signature Algorithm: sha256WithRSAEncryption 84:ea:43:1e:3b:aa:25:84:be:4f:6d:17:14:70:9e:6b:67:d2: f4:55:db:23:73:68:05:0c:76:be:c9:22:ef:a2:bb:e9:ec:5c: 03:e9:ba:03:b8:3e:32:87:36:01:0e:07:3b:ae:3a:16:b9:a0: c1:47:fd:18:e6:7f:b8:78:b8:88:76:22:8a:db:4a:65:b5:61: 28:49:22:cb:81:a4:02:fc:ef:1c:1e:b0:dd:1b:90:f9:9d:18: e7:ea:20:b9:f4:70:d7:1b:33:f0:1d:c8:06:10:e9:20:24:1a: e2:2b:ef:3c:3b:0e:c9:01:b4:74:49:2e:db:2b:78:b8:ef:46: d3:c3:81:4a:d6:9a:5a:af:1d:4d:7c:e9:9f:9a:69:a7:9d:99: 3c:0c:ed:2b:5c:05:64:a4:d4:bf:a7:37:6b:da:c7:04:0e:47: db:0e:7a:c4:0f:81:38:1c:33:fb:1a:d3:db:10:17:f7:e3:0d: 0a:a5:bb:68:0e:4d:cf:7d:85:57:b2:e1:71:6b:59:ad:24:88: b1:ce:0d:8e:21:2a:04:5f:3b:82:e2:8a:8c:c6:b1:32:13:0f: c4:8a:4f:39:32:33:6d:44:c8:b4:4f:ba:b2:e8:67:08:62:21: 1f:94:fa:de:5d:84:09:55:7a:0f:90:65:4f:bf:44:47:eb:33: 33:78:93:53 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrJzsPrsNJ8bQnMXd+1wuMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MDkzMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGEwZjA4MTFmOWMyNTYzNzQ0NDhhYTAxNWQ3NzY5MjcxODIxYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCJK3H2HPUB9osEWpwFstZ/v8z+z Y+s7gsv4ZLPqrAYFSKx2wI1palbk3wB8S4j5kokwZbfBPC4MLBPq2qgL07QRr9qN WS3jXwrRUPDNV22oc3CX3+KyFiEk7VOZjHLKjSSrW17O89W9Obvv2E+p11zJPd8D 2eYMP3nUW1XdeQAO+bY5/GewjRGZqlYE9GYLgTalOZ6tsxCw6imqYlSHgaOZXcQV hsFCK9wsYsRkWw1x9cNet1Di+ocrG+aTcv+oOGaDTGEf73js8izcb1ynSkC7d3st YU82ZiS1Kb1xT831b7denMvp0q5a2t+Cvy+SVuoAhlvEIrDGOcS4PBLoIQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFSg8IEfnCVjdESKoBXXdpJxghvzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2NhZThh Ny0wMGRhLTQ4NzMtYmYyYi0wMjk2NGM1MGQyMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvY2FlOGE3 LTAwZGEtNDg3My1iZjJiLTAyOTY0YzUwZDIxMi8xL1ZLRHdnUi1jSldOMFJJcWdG ZGQya25HQ0dfTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDBRcgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMsXDANBgkqhkiG9w0BAQsFAAOCAQEAhOpDHjuqJYS+T20XFHCea2fS9FXbI3No BQx2vski76K76excA+m6A7g+Moc2AQ4HO646FrmgwUf9GOZ/uHi4iHYiittKZbVh KEkiy4GkAvzvHB6w3RuQ+Z0Y5+ogufRw1xsz8B3IBhDpICQa4ivvPDsOyQG0dEku 2yt4uO9G08OBStaaWq8dTXzpn5ppp52ZPAztK1wFZKTUv6c3a9rHBA5H2w56xA+B OBwz+xrT2xAX9+MNCqW7aA5Nz32FV7LhcWtZrSSIsc4NjiEqBF87guKKjMaxMhMP xIpPOTIzbUTItE+6suhnCGIhH5T63l2ECVV6D5BlT79ER+szM3iTUw== -----END CERTIFICATE-----Generated at Thu Dec 4 11:18:00 2025 by rpki-client