This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer File: zVdth24X5nqjsfHBDas52yk14is.cer (raw, json) Hash identifier: Cjds0aAuOHlNcNfqpRLs+CWYG/emyntFh2xhrvj7tcc= Subject key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B279F86A4DA0CC376AB50EDB071C77800 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 14:45:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199218 AS: 208172 IP: 62.169.136.0/23 IP: 72.251.208.0/20 IP: 74.118.124.0/22 IP: 81.27.86.0/24 IP: 109.224.244.0/22 IP: 143.223.96.0/22 IP: 159.26.96.0/19 IP: 185.98.168.0/22 IP: 193.32.144.0/22 IP: 194.126.177.0/24 IP: 205.147.16.0/20 IP: 212.104.214.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:9f:86:a4:da:0c:c3:76:ab:50:ed:b0:71:c7:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 14:45:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:1b:18:9c:ae:67:16:83:a2:37:89:40:ab: 27:61:d0:07:12:33:9c:9d:e6:ef:d7:a5:34:5c:e0: 4f:56:af:3e:45:66:18:c4:b7:d4:88:c9:51:e5:54: 01:57:e9:4b:5a:ca:d0:39:04:68:00:4b:40:46:ae: a4:64:aa:dc:8c:c4:30:c1:b5:38:b2:1b:65:2a:e7: 64:d2:02:37:3c:33:75:7c:b5:66:03:dd:e9:09:e9: e7:1d:eb:e9:e7:d1:49:3b:16:bc:ae:3f:92:e9:2b: 8a:70:ac:46:42:f8:d7:ea:0f:ca:d4:bf:5c:34:b3: 57:af:19:00:77:aa:4c:3c:ac:7f:b7:6c:aa:d4:a6: f8:bb:4e:ee:20:6f:c6:8d:ac:39:bd:3a:27:90:5e: 39:86:a7:b4:c2:99:32:48:18:d2:ea:48:2b:a7:19: 9c:a3:2a:9f:ca:43:dd:26:09:74:a2:46:18:97:7a: 2d:f2:c6:c9:2e:6a:f7:5d:7f:f0:7b:c9:df:63:8a: 4e:2b:9e:48:d2:af:d6:e1:0c:d0:9d:07:22:3f:77: c3:c6:12:74:a1:1d:01:0f:48:a7:76:cc:51:c0:fe: d6:0d:54:4d:25:92:f6:be:8d:08:e9:01:53:54:0a: 8e:a0:d2:8a:15:a6:18:00:02:69:d1:ab:c3:0e:79: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.136.0/23 72.251.208.0/20 74.118.124.0/22 81.27.86.0/24 109.224.244.0/22 143.223.96.0/22 159.26.96.0/19 185.98.168.0/22 193.32.144.0/22 194.126.177.0/24 205.147.16.0/20 212.104.214.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199218 208172 Signature Algorithm: sha256WithRSAEncryption 95:6d:04:32:77:96:98:21:87:ae:5f:ab:e5:1e:b1:fe:2a:f9: b5:00:ef:8b:a3:fb:a4:67:69:d5:97:5b:d4:8b:09:03:2b:d1: 4f:8a:e4:48:b8:0c:d0:bc:3e:a9:5a:1f:bf:17:28:d7:3c:7a: 7d:cd:7a:29:79:d9:ae:48:a9:d3:c8:6f:c3:78:25:2b:a2:af: 32:47:4a:88:7e:83:be:8c:51:c8:35:4e:63:20:cd:18:60:10: a7:27:1f:9e:48:a0:8c:f9:a0:e2:b3:94:d9:1a:d5:31:cb:a8: b1:4f:50:ab:e0:17:6d:eb:81:d5:55:e9:81:03:47:e5:de:69: 2a:8a:fb:28:50:06:4f:51:17:51:b3:d3:e0:d4:27:03:cb:1a: 01:86:4c:8e:1c:e2:80:e8:3f:67:a2:ba:fa:34:ce:62:05:dc: 98:d3:1b:9a:51:57:cb:af:cc:4f:84:27:95:96:bb:dd:17:34: 3a:a4:4d:9e:19:54:79:89:bd:d0:7f:5b:4c:03:11:2e:c8:c1: a5:81:92:ba:0d:69:dd:1e:56:89:21:45:d7:2b:e3:b5:fd:4a: 58:e0:cb:f7:5e:31:3d:cc:04:7a:00:3c:07:78:e6:7b:d5:0c: 2d:fa:ec:91:32:0e:b1:52:e3:20:34:5b:99:c6:84:f4:f7:6a: 3b:97:4c:7a -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZsnn4ak2gzDdqtQ7bBxx3gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTQ0NTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDU3NmQ4NzZlMTdlNjdhYTNiMWYxYzEwZGFiMzlkYjI5MzVlMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEkbGJyuZxaDojeJQKsnYdAHEjOc nebv16U0XOBPVq8+RWYYxLfUiMlR5VQBV+lLWsrQOQRoAEtARq6kZKrcjMQwwbU4 shtlKudk0gI3PDN1fLVmA93pCennHevp59FJOxa8rj+S6SuKcKxGQvjX6g/K1L9c NLNXrxkAd6pMPKx/t2yq1Kb4u07uIG/Gjaw5vTonkF45hqe0wpkySBjS6kgrpxmc oyqfykPdJgl0okYYl3ot8sbJLmr3XX/we8nfY4pOK55I0q/W4QzQnQciP3fDxhJ0 oR0BD0indsxRwP7WDVRNJZL2vo0I6QFTVAqOoNKKFaYYAAJp0avDDnmDAQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFM1XbYduF+Z6o7HxwQ2rOdspNeIrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzQyZjAx NC1jZDkyLTQyMDUtYWE1My0xYTgwYTJmN2Q3ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNDJmMDE0 LWNkOTItNDIwNS1hYTUzLTFhODBhMmY3ZDdlYS8xL3pWZHRoMjRYNW5xanNmSEJE YXM1MnlrMTRpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDBOBAIAATBIAwQBPqmIAwQESPvQAwQCSnZ8AwQAURtWAwQCbeD0 AwQCj99gAwQFnxpgAwQCuWKoAwQCwSCQAwQAwn6xAwQEzZMQAwQB1GjWMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwMKMgIDAy0sMA0GCSqGSIb3DQEBCwUAA4IBAQCV bQQyd5aYIYeuX6vlHrH+Kvm1AO+Lo/ukZ2nVl1vUiwkDK9FPiuRIuAzQvD6pWh+/ FyjXPHp9zXopedmuSKnTyG/DeCUroq8yR0qIfoO+jFHINU5jIM0YYBCnJx+eSKCM +aDis5TZGtUxy6ixT1Cr4Bdt64HVVemBA0fl3mkqivsoUAZPURdRs9Pg1CcDyxoB hkyOHOKA6D9norr6NM5iBdyY0xuaUVfLr8xPhCeVlrvdFzQ6pE2eGVR5ib3Qf1tM AxEuyMGlgZK6DWndHlaJIUXXK+O1/UpY4Mv3XjE9zAR6ADwHeOZ71Qwt+uyRMg6x UuMgNFuZxoT092o7l0x6 -----END CERTIFICATE-----Generated at Tue Dec 16 20:04:33 2025 by rpki-client