This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer File: fNFi3seCCbwDrdCBUn1Usn6E0m4.cer (raw, json) Hash identifier: LJX7o9KZtHxKsp4TvK+covK9AkJh54s6yTMstbDCjJI= Subject key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A91307D977B8417DD85B7CE29859D012D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 09:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 43073 IP: 45.128.108.0/22 IP: 2001:67c:159c::/48 IP: 2a0e:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:30:7d:97:7b:84:17:dd:85:b7:ce:29:85:9d:01:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 09:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cd162dec78209bc03add081527d54b27e84d26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:b6:2d:93:90:83:eb:08:50:27:e0:54:5f: 82:e3:c3:2a:aa:31:25:b9:0c:c1:6f:b1:1a:c0:05: f4:f8:b0:48:d5:37:59:31:ea:e8:2d:ee:40:09:b5: 9c:0a:47:58:3c:fd:b0:70:41:5d:ea:12:2c:4e:59: 76:74:17:79:ce:ff:1d:fc:50:14:62:37:92:89:3d: a2:e4:46:a4:87:42:5d:47:30:d0:98:ec:a8:37:67: 99:2d:c7:b7:c6:47:a4:71:7c:3a:90:fa:1a:c1:82: d3:e0:14:f9:09:e4:85:f5:1b:e1:60:b0:10:1e:f1: cb:29:b6:fe:7c:8f:03:5c:52:ab:f8:35:86:20:01: c1:d5:3f:dd:04:89:28:f1:4e:f6:d4:ba:9c:2e:9a: 61:2b:a4:ad:22:08:ba:7b:bc:f6:74:57:a4:65:56: 27:95:8b:32:e3:96:8a:e4:f2:1f:27:d4:48:48:ce: 24:de:05:12:f1:6e:86:05:3c:3a:ac:64:37:27:08: b6:c0:98:24:6f:27:3f:88:38:04:ef:f3:5d:2a:04: 1a:1c:53:29:f1:ea:23:12:39:96:13:89:7f:11:8c: d8:ce:0e:16:8b:95:78:7d:eb:91:c7:ba:5c:ac:de: 21:69:56:12:9f:84:35:c5:14:9e:a3:d1:6c:3d:62: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.108.0/22 IPv6: 2001:67c:159c::/48 2a0e:3e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43073 Signature Algorithm: sha256WithRSAEncryption 16:19:e2:9a:3a:90:d6:d5:4b:29:14:c5:2c:60:50:d8:ca:d8: 35:b1:57:ed:d1:0e:7f:db:6b:60:da:76:91:47:05:a3:3a:96: 2c:97:77:07:37:62:31:42:e0:11:53:0d:33:12:d6:04:08:6a: f3:75:eb:a8:5b:71:c5:df:31:7a:e7:95:2b:ae:10:89:91:1b: 2c:1d:9b:62:cf:19:b9:64:ad:19:43:23:46:d5:a9:db:31:14: df:53:ad:c2:3d:f4:a3:04:b7:be:c5:62:97:76:f1:7e:3a:9c: ef:ac:ba:4b:6d:9d:4c:2e:20:40:f6:a3:23:9f:c2:00:c4:0e: 2a:ab:13:55:f1:59:d6:7b:bb:25:23:1d:e0:9d:91:12:ad:f1: 18:74:ab:ad:e6:fb:99:f1:47:ca:ca:b1:97:98:ea:65:7d:8b: 35:89:51:00:c3:69:81:06:42:79:42:78:15:7e:63:ad:6c:3d: e8:ba:a3:04:f7:92:74:e4:92:7a:9c:5b:88:f4:57:28:46:da: d6:d8:79:05:01:cb:63:a3:e0:9e:a0:1f:19:56:de:46:fb:09: 6b:60:ad:30:db:44:2a:22:30:14:38:ff:88:af:8b:07:8c:c8: 30:8d:04:64:7f:ce:0e:87:79:0d:fc:fc:fa:13:8d:f3:ec:cd: c0:e5:63:bb -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZqRMH2Xe4QX3YW3zimFnQEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MDk0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2QxNjJkZWM3ODIwOWJjMDNhZGQwODE1MjdkNTRiMjdlODRkMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwO2LZOQg+sIUCfgVF+C48MqqjEl uQzBb7EawAX0+LBI1TdZMeroLe5ACbWcCkdYPP2wcEFd6hIsTll2dBd5zv8d/FAU YjeSiT2i5Eakh0JdRzDQmOyoN2eZLce3xkekcXw6kPoawYLT4BT5CeSF9RvhYLAQ HvHLKbb+fI8DXFKr+DWGIAHB1T/dBIko8U721LqcLpphK6StIgi6e7z2dFekZVYn lYsy45aK5PIfJ9RISM4k3gUS8W6GBTw6rGQ3Jwi2wJgkbyc/iDgE7/NdKgQaHFMp 8eojEjmWE4l/EYzYzg4Wi5V4feuRx7pcrN4haVYSn4Q1xRSeo9FsPWIaQQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFHzRYt7Hggm8A63QgVJ9VLJ+hNJuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzAzMTEw MC00NThhLTQ3NGUtOTI3Yy1kZjAyNzkxNmNlNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMDMxMTAw LTQ1OGEtNDc0ZS05MjdjLWRmMDI3OTE2Y2U1MC8xL2ZORmkzc2VDQ2J3RHJkQ0JV bjFVc242RTBtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQCLYBsMBYEAgACMBADBwAgAQZ8FZwDBQMqDj5A MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoQTANBgkqhkiG9w0BAQsFAAOCAQEA FhnimjqQ1tVLKRTFLGBQ2MrYNbFX7dEOf9trYNp2kUcFozqWLJd3BzdiMULgEVMN MxLWBAhq83XrqFtxxd8xeueVK64QiZEbLB2bYs8ZuWStGUMjRtWp2zEU31Otwj30 owS3vsVil3bxfjqc76y6S22dTC4gQPajI5/CAMQOKqsTVfFZ1nu7JSMd4J2REq3x GHSrreb7mfFHysqxl5jqZX2LNYlRAMNpgQZCeUJ4FX5jrWw96LqjBPeSdOSSepxb iPRXKEba1th5BQHLY6PgnqAfGVbeRvsJa2CtMNtEKiIwFDj/iK+LB4zIMI0EZH/O Dod5Dfz8+hON8+zNwOVjuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:19 2025 by rpki-client