This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer File: f-aLEiNL1wNDAbyWsTiq4neGCj4.cer (raw, json) Hash identifier: WDCXbp8eoaJiMG96pPN6xJr/Fkx81HUi3rSpMKQXuEk= Subject key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A77D0D31DFEC89774FC0EBDB0B10FF36F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 11:26:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214867 IP: 185.253.131.0/24 IP: 194.56.152.0/23 IP: 2a14:5040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:d0:d3:1d:fe:c8:97:74:fc:0e:bd:b0:b1:0f:f3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 11:26:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7fe68b12234bd7034301bc96b138aae277860a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:8e:2a:7c:ff:58:20:5a:65:9a:51:9f:67: 14:74:69:a3:3a:2e:d8:d9:cd:0c:3d:88:d3:85:46: 3b:54:a4:ae:c8:76:73:4e:7e:3a:59:38:7e:25:33: 20:4d:af:b1:1a:82:9d:6b:1e:1d:8f:a0:5a:dd:7c: ae:f4:4b:41:b9:a5:23:3c:c4:89:0b:b8:0d:07:01: ac:52:8b:4e:33:e5:aa:74:07:f7:4a:02:85:d5:82: c2:9b:e9:bf:d6:1d:d3:4a:bb:e4:9d:72:32:a2:ab: bd:1d:ea:22:2b:11:dc:38:cf:4b:22:4b:41:35:f3: 84:c8:81:ea:0f:65:58:96:36:25:40:69:2b:4d:cf: 37:61:9d:6a:3e:b8:56:32:61:a4:54:e6:b6:d7:3b: 7c:a4:60:b8:d1:38:15:7f:2e:fa:f5:f4:18:26:25: 78:a9:9f:47:c2:0f:0f:7a:d8:dc:56:db:87:c8:fe: b9:17:3a:0b:1d:ad:7a:c4:0a:33:96:12:db:3c:3b: f4:44:36:3e:c9:73:b7:5e:ad:e6:a0:92:20:97:e8: 0f:05:b0:87:73:7b:39:87:97:b0:a3:ce:73:88:5f: 08:ca:09:0f:9b:b8:60:7e:ad:4e:e6:90:f1:aa:c6: f3:49:c4:dd:75:77:53:27:c0:60:f7:45:8c:19:20: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.131.0/24 194.56.152.0/23 IPv6: 2a14:5040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214867 Signature Algorithm: sha256WithRSAEncryption 1d:ab:e6:01:f3:cd:25:81:69:31:cb:2f:5b:f0:fd:d4:33:f4: 5a:23:a5:67:51:5d:ce:06:6b:80:a7:82:d8:06:b3:34:40:da: 25:af:18:bd:59:fc:ba:2e:7d:7c:c9:10:0c:c1:1a:27:05:28: af:ec:e9:bb:4f:a5:c9:94:89:5e:d5:86:33:84:30:4b:a0:09: ff:bd:3f:b4:b3:dc:c0:6a:1d:af:fa:19:54:37:74:4d:33:2f: af:1f:83:fa:61:ef:50:79:0e:85:be:f6:5d:2c:41:7a:07:fe: ee:5c:96:0d:21:d8:23:ba:43:6f:13:51:73:9b:3a:82:a3:64: 04:75:76:9a:c8:49:92:55:12:cf:a0:a1:7a:9c:2a:44:40:60: 6b:79:b5:73:9c:fe:dd:36:1d:96:46:2c:88:47:1a:bc:6b:d4: 27:0b:20:3b:2a:d1:39:28:ca:c6:b5:40:41:3c:1b:cd:f1:f2: 10:6c:b5:c8:ae:b6:30:12:63:e5:2f:aa:15:6c:c9:e5:97:d7: 2e:22:91:78:01:37:a7:cc:75:3b:07:07:a7:0d:92:3f:03:7c: 81:b0:e0:e1:0c:29:61:31:ad:e5:b6:30:3b:5a:47:f0:04:48: 82:e6:e6:61:9e:c9:0d:3a:df:d7:6d:bb:ac:6f:00:22:5a:c3: e7:ef:1e:ad -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZp30NMd/siXdPwOvbCxD/NvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTEyNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmU2OGIxMjIzNGJkNzAzNDMwMWJjOTZiMTM4YWFlMjc3ODYwYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUSOKnz/WCBaZZpRn2cUdGmjOi7Y 2c0MPYjThUY7VKSuyHZzTn46WTh+JTMgTa+xGoKdax4dj6Ba3Xyu9EtBuaUjPMSJ C7gNBwGsUotOM+WqdAf3SgKF1YLCm+m/1h3TSrvknXIyoqu9HeoiKxHcOM9LIktB NfOEyIHqD2VYljYlQGkrTc83YZ1qPrhWMmGkVOa21zt8pGC40TgVfy769fQYJiV4 qZ9Hwg8PetjcVtuHyP65FzoLHa16xAozlhLbPDv0RDY+yXO3Xq3moJIgl+gPBbCH c3s5h5ewo85ziF8IygkPm7hgfq1O5pDxqsbzScTddXdTJ8Bg90WMGSD8FwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH/mixIjS9cDQwG8lrE4quJ3hgo+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzRhMTEx MS04ZjNjLTRlZGYtYjc3Yy0yZmEyNjMxYmMzMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNGExMTEx LThmM2MtNGVkZi1iNzdjLTJmYTI2MzFiYzMxYy8xL2YtYUxFaU5MMXdOREFieVdz VGlxNG5lR0NqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuf2DAwQBwjiYMA0EAgACMAcDBQMqFFBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHUzANBgkqhkiG9w0BAQsFAAOCAQEAHavm AfPNJYFpMcsvW/D91DP0WiOlZ1FdzgZrgKeC2AazNEDaJa8YvVn8ui59fMkQDMEa JwUor+zpu0+lyZSJXtWGM4QwS6AJ/70/tLPcwGodr/oZVDd0TTMvrx+D+mHvUHkO hb72XSxBegf+7lyWDSHYI7pDbxNRc5s6gqNkBHV2mshJklUSz6ChepwqREBga3m1 c5z+3TYdlkYsiEcavGvUJwsgOyrROSjKxrVAQTwbzfHyEGy1yK62MBJj5S+qFWzJ 5ZfXLiKReAE3p8x1OwcHpw2SPwN8gbDg4QwpYTGt5bYwO1pH8ARIgubmYZ7JDTrf 1227rG8AIlrD5+8erQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:05 2025 by rpki-client