This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer File: F__uJQUsCqv2yzcePy4Hb0T8HDw.cer (raw, json) Hash identifier: puRxy19zFwh0eUhfCM25wwFODRTgIApYbyyViaRfwjk= Subject key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A6E6D9181B40EB3AC0B146399EA7B71F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 10 Nov 2025 15:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199513 IP: 194.102.62.0/23 IP: 2001:678:1138::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:6d:91:81:b4:0e:b3:ac:0b:14:63:99:ea:7b:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 10 15:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:45:05:5d:f6:89:9d:82:df:01:2c:84:50: 8f:8b:c3:20:35:75:8b:7b:76:92:29:39:aa:65:b4: 23:9e:a1:2f:ee:e4:5d:2a:70:6a:95:1d:ac:c4:e7: ea:1c:5e:a9:77:d7:d5:f8:55:ed:4b:c6:79:fb:24: f2:41:c1:ca:27:19:fd:80:f5:c9:9e:8e:1b:de:21: ef:7e:de:75:09:7d:16:75:88:d1:f5:3a:cb:d3:29: 9a:3c:df:19:52:d6:af:af:5f:d1:11:d0:1a:a8:c3: b1:00:35:66:d4:37:ba:41:41:d2:58:70:ec:fd:a3: f5:01:da:a5:8c:22:b4:cc:fa:08:ad:c1:66:55:ae: 33:14:7a:d3:40:6b:36:dd:c4:22:15:e8:66:31:6b: d0:80:25:c8:70:60:0b:74:7c:c0:84:bd:1a:3c:fc: 47:24:01:f9:5c:9a:90:f7:6b:76:49:4b:40:a9:2b: 89:97:bf:eb:61:b7:45:db:a5:6f:18:fd:fb:a4:3a: 38:35:21:87:d7:b1:1d:04:d6:d9:de:81:8c:e6:28: 06:22:6d:cf:b5:60:6e:56:07:a5:2c:a1:f9:bf:49: d5:68:29:ff:52:92:80:5d:4f:0a:b9:c2:ff:2d:70: 6b:82:6e:84:22:46:9b:49:77:b4:e8:fd:d7:47:7f: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.62.0/23 IPv6: 2001:678:1138::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199513 Signature Algorithm: sha256WithRSAEncryption 4d:b1:42:30:9b:23:cb:99:f9:51:c2:e3:15:7a:90:1e:5b:a4: eb:e9:da:6a:fe:72:a4:66:b9:0b:d5:39:9f:4d:89:91:4d:ab: 58:84:13:23:ff:ed:78:2f:6d:41:c6:a0:8b:1a:2a:4b:31:c5: cd:55:49:1c:4b:f8:f9:74:7d:b8:c2:db:dc:9c:71:e8:95:74: b3:07:d2:9c:db:b0:ac:ac:a8:ee:ad:a3:04:c3:f3:81:1b:40: ac:b5:e4:40:a7:be:a5:70:a4:ef:3e:81:c3:85:b9:26:c6:18: a6:41:24:31:b2:c3:6d:13:32:a4:6f:4c:c6:6c:5a:7f:25:c0: 59:91:27:7b:5f:42:1e:0a:9a:d9:0d:17:83:a0:5b:b1:94:c0: 63:a3:f3:6c:7d:2f:d6:3a:9d:70:01:2f:0b:30:93:8e:6e:fe: 2b:a5:d9:fd:02:3d:30:af:78:e6:d6:03:a2:96:45:8a:d5:16: 5c:8d:7a:3f:d0:33:88:67:d9:a8:90:cc:94:a0:42:61:d9:6c: 7c:45:c6:5c:48:80:ec:4a:f9:4e:3b:67:7f:5a:7e:71:9c:0c: c7:ea:d8:e8:0b:2b:6b:80:fc:30:73:0c:08:3f:4f:ab:e5:be: 6f:d9:b6:42:b9:4f:b2:b9:58:4f:67:48:9f:03:ea:5e:2a:82: 93:ef:c7:e5 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZpubZGBtA6zrAsUY5nqe3H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEwMTU0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2ZmZWUyNTA1MmMwYWFiZjZjYjM3MWUzZjJlMDc2ZjQ0ZmMxYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroxFBV32iZ2C3wEshFCPi8MgNXWL e3aSKTmqZbQjnqEv7uRdKnBqlR2sxOfqHF6pd9fV+FXtS8Z5+yTyQcHKJxn9gPXJ no4b3iHvft51CX0WdYjR9TrL0ymaPN8ZUtavr1/REdAaqMOxADVm1De6QUHSWHDs /aP1AdqljCK0zPoIrcFmVa4zFHrTQGs23cQiFehmMWvQgCXIcGALdHzAhL0aPPxH JAH5XJqQ92t2SUtAqSuJl7/rYbdF26VvGP37pDo4NSGH17EdBNbZ3oGM5igGIm3P tWBuVgelLKH5v0nVaCn/UpKAXU8KucL/LXBrgm6EIkabSXe06P3XR3/JkQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzA0NTIy Mi01YWNlLTRlN2UtOTViMi1hMmU4ODBmZDU4NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMDQ1MjIy LTVhY2UtNGU3ZS05NWIyLWEyZTg4MGZkNTg1MC8xL0ZfX3VKUVVzQ3F2Mnl6Y2VQ eTRIYjBUOEhEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwmY+MA8EAgACMAkDBwAgAQZ4ETgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwtZMA0GCSqGSIb3DQEBCwUAA4IBAQBNsUIwmyPL mflRwuMVepAeW6Tr6dpq/nKkZrkL1TmfTYmRTatYhBMj/+14L21BxqCLGipLMcXN VUkcS/j5dH24wtvcnHHolXSzB9Kc27CsrKjuraMEw/OBG0CsteRAp76lcKTvPoHD hbkmxhimQSQxssNtEzKkb0zGbFp/JcBZkSd7X0IeCprZDReDoFuxlMBjo/NsfS/W Op1wAS8LMJOObv4rpdn9Aj0wr3jm1gOilkWK1RZcjXo/0DOIZ9mokMyUoEJh2Wx8 RcZcSIDsSvlOO2d/Wn5xnAzH6tjoCytrgPwwcwwIP0+r5b5v2bZCuU+yuVhPZ0if A+peKoKT78fl -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:42 2025 by rpki-client