This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer (raw, json) Hash identifier: qLMowfycofSa6x8BNzazZ5F4v33l42JjAEYXFPHlScg= Subject key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A6C8CE94ED76C5599E410A8BF7E42255A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 10 Nov 2025 06:56:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208198 IP: 45.10.148.0/22 IP: 45.133.36.0/22 IP: 45.143.96.0/22 IP: 185.148.240.0/22 IP: 185.169.180.0/22 IP: 185.174.20.0/22 IP: 2a07:6300::/29 IP: 2a0b:7d00::/29 IP: 2a0d:d800::/29 IP: 2a0e:3b00::/29 IP: 2a0e:79c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:8c:e9:4e:d7:6c:55:99:e4:10:a8:bf:7e:42:25:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 10 06:56:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:5f:52:13:d2:5d:7f:2f:b1:78:f6:20:41: 95:dd:ff:2c:6b:2c:01:d0:12:5e:ad:55:9a:fa:f2: 8e:40:21:c0:31:7e:ed:6f:eb:31:71:7f:28:f8:d4: 41:ac:26:19:54:77:28:8c:03:37:6f:70:8a:1e:c0: 8e:13:6c:df:d2:4f:66:82:c2:69:5b:f6:2e:ab:1d: e6:2e:e0:fc:d9:97:29:ce:09:29:2f:4e:3b:bc:43: 09:62:3f:9a:98:b3:db:b3:8c:81:fb:a1:27:01:91: c4:ca:65:38:ee:a1:db:ad:8a:a0:1b:04:ff:74:14: ea:3f:5d:23:0d:b5:83:47:0e:b7:4b:55:65:a2:b8: e1:fb:2a:f8:f1:06:cc:62:6b:93:b8:c5:2a:5e:7e: 06:a8:8e:23:02:9d:7f:1c:57:78:18:c6:3e:a2:c2: c4:a7:4b:7f:0e:a7:e6:73:8a:44:0f:35:5f:8f:e6: 68:80:09:ce:0f:ec:0b:28:d0:fe:73:af:14:e4:1b: 09:4c:9d:7c:3d:d0:77:5e:3d:21:a7:5d:cd:f2:dd: 03:5e:9f:4e:53:e0:4b:d6:69:b4:49:cf:5c:11:03: fc:14:4f:dd:c0:82:c1:f2:da:0b:7d:5a:b9:cc:e4: fc:0f:77:30:1e:d0:39:58:04:4f:6e:49:6c:d7:19: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.148.0/22 45.133.36.0/22 45.143.96.0/22 185.148.240.0/22 185.169.180.0/22 185.174.20.0/22 IPv6: 2a07:6300::/29 2a0b:7d00::/29 2a0d:d800::/29 2a0e:3b00::/29 2a0e:79c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208198 Signature Algorithm: sha256WithRSAEncryption 39:fb:61:ea:26:87:09:7d:60:4c:e7:a1:8d:5e:11:ad:1e:ed: ad:31:3a:05:84:11:14:3d:af:7c:a9:f2:9d:f4:a8:70:a7:c2: 22:4a:13:34:3b:52:5a:5d:e8:a3:de:eb:10:65:a6:c9:f4:47: b2:ad:01:d9:bc:cf:a1:8c:70:66:aa:9c:9c:36:62:ff:5f:63: 40:73:66:45:85:96:5c:c8:06:9d:50:8e:29:a5:6f:6f:cf:26: 4d:1c:5d:dd:dc:65:49:b1:e3:28:e5:c6:a6:5c:a6:e7:eb:5a: 76:9e:c5:f2:8c:ca:cd:24:9d:70:60:df:2e:20:5f:d5:d6:b0: d6:f0:08:d8:c4:bd:7a:69:1b:c2:f2:c5:3b:18:86:cf:20:52: 8b:64:8f:ca:ce:d6:b5:36:8f:d5:9a:5b:f2:2d:13:9d:91:d0: f4:0b:dc:f4:8e:72:7b:17:d9:74:5d:30:bd:85:38:dd:d2:d9: 25:7b:12:ac:36:20:43:2a:79:68:39:a4:74:c7:69:43:6c:f9: 37:2a:d9:0e:50:93:9e:ae:c3:c7:d1:eb:55:58:c2:38:3c:52: 4f:4e:fc:9d:5c:a5:f6:c5:68:14:55:10:18:bf:fa:71:95:b7: a0:dd:b1:37:67:f8:e7:5e:0e:ee:6f:8f:47:50:16:45:39:28: 9e:0f:a0:e3 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgISAZpsjOlO12xVmeQQqL9+QiVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEwMDY1NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDBkYTQzYjRhNWQzZGI3OGJhM2Y3NzRlNWIzMWI3NzAzNzIwMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINfUhPSXX8vsXj2IEGV3f8saywB 0BJerVWa+vKOQCHAMX7tb+sxcX8o+NRBrCYZVHcojAM3b3CKHsCOE2zf0k9mgsJp W/Yuqx3mLuD82ZcpzgkpL047vEMJYj+amLPbs4yB+6EnAZHEymU47qHbrYqgGwT/ dBTqP10jDbWDRw63S1Vlorjh+yr48QbMYmuTuMUqXn4GqI4jAp1/HFd4GMY+osLE p0t/Dqfmc4pEDzVfj+ZogAnOD+wLKND+c68U5BsJTJ18PdB3Xj0hp13N8t0DXp9O U+BL1mm0Sc9cEQP8FE/dwILB8toLfVq5zOT8D3cwHtA5WARPbkls1xm37QIDAQAB o4IC6TCCAuUwHQYDVR0OBBYEFK0NpDtKXT23i6P3dOWzG3cDcgLVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2RkODA5 Ni0xNGNjLTQ4OGQtOTI1Ny1jNTE1ZjM1NGNjNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZGQ4MDk2 LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8xL3JRMmtPMHBkUGJlTG9fZDA1 Yk1iZHdOeUF0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGCCsGAQUF BwEHAQH/BFkwVzAqBAIAATAkAwQCLQqUAwQCLYUkAwQCLY9gAwQCuZTwAwQCuam0 AwQCua4UMCkEAgACMCMDBQMqB2MAAwUDKgt9AAMFAyoN2AADBQMqDjsAAwUDKg55 wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLUYwDQYJKoZIhvcNAQELBQADggEB ADn7Yeomhwl9YEznoY1eEa0e7a0xOgWEERQ9r3yp8p30qHCnwiJKEzQ7Ulpd6KPe 6xBlpsn0R7KtAdm8z6GMcGaqnJw2Yv9fY0BzZkWFllzIBp1Qjimlb2/PJk0cXd3c ZUmx4yjlxqZcpufrWnaexfKMys0knXBg3y4gX9XWsNbwCNjEvXppG8LyxTsYhs8g Uotkj8rO1rU2j9WaW/ItE52R0PQL3PSOcnsX2XRdML2FON3S2SV7Eqw2IEMqeWg5 pHTHaUNs+Tcq2Q5Qk56uw8fR61VYwjg8Uk9O/J1cpfbFaBRVEBi/+nGVt6DdsTdn +OdeDu5vj0dQFkU5KJ4PoOM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:52 2025 by rpki-client