This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer (raw, json) Hash identifier: 5ZN72xqSRVPGGgCTWY+WdZIPsqDBR6/7KqLOxZ2ccmc= Subject key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2791D7FB4F02F6F382DBAF84B2916413 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 14:30:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210419 AS: 213398 IP: 62.164.144.0/24 IP: 89.23.124.0/24 IP: 89.40.30.0/24 IP: 91.234.235.0/24 IP: 194.164.224.0/24 IP: 204.77.7.0/24 IP: 2a10:25c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:91:d7:fb:4f:02:f6:f3:82:db:af:84:b2:91:64:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 14:30:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:64:d0:73:4f:74:67:44:36:5d:7e:d2:27: fa:02:c5:75:b8:40:1f:07:8f:73:81:ff:13:2a:90: ea:f2:09:24:10:c4:d1:de:68:d0:61:49:8d:74:e6: ff:06:1e:ac:ae:29:7a:72:07:2e:c2:32:8a:3a:a3: 4b:e4:b5:6f:2c:41:31:fd:77:07:32:c9:e8:63:a5: 17:f7:dd:46:bc:49:f3:b2:38:d8:9c:bd:10:3f:d8: 1e:83:06:b1:2c:14:86:86:46:57:5a:2f:65:c1:3b: 3f:cd:4e:00:54:b8:e5:16:74:1a:e1:46:bd:ca:33: 3e:da:ef:d4:93:b1:5f:64:6e:d2:47:4a:24:72:a7: 48:ff:f2:4e:5d:e1:e9:2c:05:0c:9c:b4:9b:ef:d9: 40:e8:01:29:64:2d:1d:01:f6:06:9f:0e:b0:78:99: b3:9f:56:94:61:d6:ef:af:c4:c7:c9:18:4b:d6:6e: 92:07:a3:54:bb:2c:3a:51:83:35:30:5c:26:b1:46: 56:3b:13:36:46:21:df:50:a5:f9:5a:7e:98:ab:39: a0:0c:34:78:c0:cc:79:80:f9:c6:83:65:0b:11:04: 82:29:43:63:59:e0:f3:5b:02:e9:ba:6c:72:2a:9a: 98:fe:36:45:36:d5:89:8e:8f:f7:9a:a3:33:cc:f1: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.144.0/24 89.23.124.0/24 89.40.30.0/24 91.234.235.0/24 194.164.224.0/24 204.77.7.0/24 IPv6: 2a10:25c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210419 213398 Signature Algorithm: sha256WithRSAEncryption b0:4f:f0:56:d2:2c:bb:c0:9e:9c:bc:0e:5c:0b:87:0a:0a:88: 09:0c:a9:bf:2d:56:ca:19:03:a0:64:e7:14:4c:ff:6b:6c:c0: 6b:eb:48:f4:80:e9:65:2a:4f:84:ab:68:23:91:9c:99:68:4e: e9:11:f3:f7:fa:ba:ce:07:f5:f1:d4:2a:42:d8:97:87:11:4b: 19:2f:4f:b3:8a:09:19:e7:6b:a1:12:a1:f1:b9:db:a9:32:13: 16:64:d5:87:41:c2:59:c5:66:a6:a3:37:58:73:35:45:08:36: ce:e9:dc:ef:18:41:f6:d0:a0:8b:2a:06:f2:eb:9e:cf:38:bb: bc:0b:6f:db:cf:f4:9a:9b:1d:6b:7a:13:db:4c:0e:4b:fd:3d: d7:aa:b2:ca:c5:d8:ff:2b:76:9f:16:2f:22:4e:5b:91:f9:a5: 67:5e:4f:46:de:93:e3:10:be:e9:36:1c:62:e6:c5:9b:97:5a: 18:34:4d:14:b5:ba:77:af:ed:73:c7:5d:0d:41:10:55:d9:d6: cb:57:25:7e:f7:b8:c7:01:5c:dc:f7:9a:7e:6f:00:f3:4a:f4: 84:a7:ae:1b:bf:f3:14:4f:38:25:30:f5:09:0a:3e:b4:c0:4c: 47:4b:ef:7a:6d:3b:af:32:ca:68:18:a6:eb:d3:07:2c:30:d5: 0a:ab:64:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZsnkdf7TwL284Lbr4SykWQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTQzMDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTdkMjE0NGRkMWI3MTRlOWUzY2EwOTAxZmU2NzUwNGJmNDU3ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r9k0HNPdGdENl1+0if6AsV1uEAf B49zgf8TKpDq8gkkEMTR3mjQYUmNdOb/Bh6sril6cgcuwjKKOqNL5LVvLEEx/XcH MsnoY6UX991GvEnzsjjYnL0QP9gegwaxLBSGhkZXWi9lwTs/zU4AVLjlFnQa4Ua9 yjM+2u/Uk7FfZG7SR0okcqdI//JOXeHpLAUMnLSb79lA6AEpZC0dAfYGnw6weJmz n1aUYdbvr8THyRhL1m6SB6NUuyw6UYM1MFwmsUZWOxM2RiHfUKX5Wn6YqzmgDDR4 wMx5gPnGg2ULEQSCKUNjWeDzWwLpumxyKpqY/jZFNtWJjo/3mqMzzPF6hQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFFV9IUTdG3FOnjygkB/mdQS/RX7rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzFmMDgz MS1mYzZiLTQ4NjUtYThhOC1lZGY0MmQ1YzQ4MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMWYwODMx LWZjNmItNDg2NS1hOGE4LWVkZjQyZDVjNDgxZi8xL1ZYMGhSTjBiY1U2ZVBLQ1FI LVoxQkw5RmZ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAPqSQAwQAWRd8AwQAWSgeAwQAW+rrAwQAwqTg AwQAzE0HMA0EAgACMAcDBQMqECXAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM1 8wIDA0GWMA0GCSqGSIb3DQEBCwUAA4IBAQCwT/BW0iy7wJ6cvA5cC4cKCogJDKm/ LVbKGQOgZOcUTP9rbMBr60j0gOllKk+Eq2gjkZyZaE7pEfP3+rrOB/Xx1CpC2JeH EUsZL0+zigkZ52uhEqHxudupMhMWZNWHQcJZxWamozdYczVFCDbO6dzvGEH20KCL Kgby657POLu8C2/bz/Samx1rehPbTA5L/T3XqrLKxdj/K3afFi8iTluR+aVnXk9G 3pPjEL7pNhxi5sWbl1oYNE0Utbp3r+1zx10NQRBV2dbLVyV+97jHAVzc95p+bwDz SvSEp64bv/MUTzglMPUJCj60wExHS+96bTuvMspoGKbr0wcsMNUKq2SI -----END CERTIFICATE-----Generated at Fri Dec 19 22:40:18 2025 by rpki-client