This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer File: b58jpjrWJaftMNptos3J6LW7gD4.cer (raw, json) Hash identifier: eU/56dBtQbNLIQWYjdvZHy4BHaafGln+4e0rMAoxbL0= Subject key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A794BA556160F2EE2CBE11601A1998B2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 18:19:51 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.159.80.0/22 IP: 2a0f:6880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:4b:a5:56:16:0f:2e:e2:cb:e1:16:01:a1:99:8b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 18:19:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:70:ac:90:92:6b:11:c7:8f:4a:2b:09:89: 80:3b:39:20:f9:e7:5d:b3:ff:c4:4a:7b:3b:30:00: 0c:3b:32:38:91:66:21:f8:7d:22:0c:d2:35:f9:64: 53:1b:11:b0:fd:33:43:88:bf:e1:50:0b:dd:93:7e: 37:4e:bc:8a:5b:64:46:57:af:5c:59:3b:33:77:a2: 98:cf:aa:6f:d9:48:91:d1:32:8f:ca:98:ad:ef:25: ac:27:78:d7:ad:1b:a0:e4:ac:6a:51:bb:91:bd:b9: 86:72:93:88:32:23:8f:7c:10:07:e3:44:17:8c:76: 6b:42:26:a9:d7:d8:44:18:e8:25:dc:73:94:1a:b3: 76:be:7e:70:4c:84:93:2c:c8:b3:b8:ed:39:54:4d: bc:58:4f:cd:24:19:ba:ee:27:fc:59:94:8b:6a:0b: 80:b3:61:37:bd:e2:86:af:93:1d:c7:b5:38:79:11: 88:fc:63:50:2a:bb:88:6b:ad:89:b9:16:38:79:cd: 94:02:54:94:85:16:d8:74:b6:84:36:7f:d4:87:28: 08:44:4b:fd:98:6b:ac:18:84:16:37:72:9f:e1:be: c0:c1:e5:e3:39:7c:10:9d:d1:e4:8f:f6:23:f7:9e: 49:ac:65:41:29:dc:64:5a:41:02:3d:79:f7:a2:3c: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.80.0/22 IPv6: 2a0f:6880::/29 Signature Algorithm: sha256WithRSAEncryption a7:d4:87:31:53:89:61:2f:50:5f:bf:3d:83:f7:4c:1c:0c:a1: b5:c2:cd:0c:78:92:cb:88:b9:93:64:a7:0f:71:e2:9f:93:da: ab:e6:a6:fd:49:a0:52:d6:37:d4:33:9e:7d:21:a4:f1:8e:e6: 37:c8:f2:df:11:b4:27:b0:63:f3:1c:af:c0:f8:e4:d0:38:4d: fc:92:f9:63:ef:4e:8d:10:78:3e:56:46:d8:67:88:15:0b:7e: 66:83:fd:75:a6:98:a1:93:8e:5d:ff:5e:e6:a7:3b:34:26:2f: 25:94:a4:41:26:ac:f0:af:62:28:76:17:42:64:0e:1f:26:bc: fb:59:e1:f6:b2:e0:4c:55:23:da:8c:88:83:ac:47:5e:20:b9: 15:cc:24:8d:c3:90:1d:47:89:c0:13:de:e2:29:c6:b0:aa:7d: 16:34:f0:05:dc:3b:75:29:56:9c:ca:02:2b:ab:a8:3e:d1:29: 7f:42:2b:45:72:aa:d4:73:45:51:dd:66:f3:29:fc:06:40:a1: 6c:c8:ff:09:d0:9b:70:e1:02:07:af:e4:f4:5c:1b:fc:91:c1: 45:53:01:73:d4:e7:12:5c:fd:84:51:34:77:0d:ba:18:cd:59: c8:f4:ab:30:59:d4:a7:0e:fc:ba:72:65:f3:72:f8:0c:96:0f: b1:52:3c:14 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZp5S6VWFg8u4svhFgGhmYsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTgxOTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjlmMjNhNjNhZDYyNWE3ZWQzMGRhNmRhMmNkYzllOGI1YmI4MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LFwrJCSaxHHj0orCYmAOzkg+edd s//ESns7MAAMOzI4kWYh+H0iDNI1+WRTGxGw/TNDiL/hUAvdk343TryKW2RGV69c WTszd6KYz6pv2UiR0TKPypit7yWsJ3jXrRug5KxqUbuRvbmGcpOIMiOPfBAH40QX jHZrQiap19hEGOgl3HOUGrN2vn5wTISTLMizuO05VE28WE/NJBm67if8WZSLaguA s2E3veKGr5Mdx7U4eRGI/GNQKruIa62JuRY4ec2UAlSUhRbYdLaENn/UhygIREv9 mGusGIQWN3Kf4b7AweXjOXwQndHkj/Yj955JrGVBKdxkWkECPXn3ojzazQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFG+fI6Y61iWn7TDabaLNyei1u4A+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I3MmRl NC02MzY2LTQ3ZmEtYjZmNi1kNDJiZDY4MjYzOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjcyZGU0 LTYzNjYtNDdmYS1iNmY2LWQ0MmJkNjgyNjM4ZC8xL2I1OGpwanJXSmFmdE1OcHRv czNKNkxXN2dENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ9QMA0EAgACMAcDBQMqD2iAMA0GCSqGSIb3 DQEBCwUAA4IBAQCn1IcxU4lhL1Bfvz2D90wcDKG1ws0MeJLLiLmTZKcPceKfk9qr 5qb9SaBS1jfUM559IaTxjuY3yPLfEbQnsGPzHK/A+OTQOE38kvlj706NEHg+VkbY Z4gVC35mg/11ppihk45d/17mpzs0Ji8llKRBJqzwr2IodhdCZA4fJrz7WeH2suBM VSPajIiDrEdeILkVzCSNw5AdR4nAE97iKcawqn0WNPAF3Dt1KVacygIrq6g+0Sl/ QitFcqrUc0VR3WbzKfwGQKFsyP8J0Jtw4QIHr+T0XBv8kcFFUwFz1OcSXP2EUTR3 DboYzVnI9KswWdSnDvy6cmXzcvgMlg+xUjwU -----END CERTIFICATE-----Generated at Wed Dec 3 12:38:37 2025 by rpki-client