This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer File: fUFb7iIlhfLRqvv_unlQMaRRKcc.cer (raw, json) Hash identifier: 2u72MjY4TYh7hDTWw/3SLKtFpYd+7FZVrCze3J4KyjM= Subject key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A9B98B2A952CAA786760AA6BFFAF44E83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 19 Nov 2025 10:11:07 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204653 IP: 194.102.215.0/24 IP: 2001:678:110c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:98:b2:a9:52:ca:a7:86:76:0a:a6:bf:fa:f4:4e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 19 10:11:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d415bee222585f2d1aafbffba795031a45129c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d4:c0:be:cb:80:e4:33:c7:38:0b:f2:bb:5f: 2f:dc:db:2b:ca:3a:41:79:ba:ce:ac:f0:04:4d:88: de:a9:86:57:00:2a:95:5c:6c:eb:38:58:77:c6:cb: 1c:9c:dc:79:4d:f2:6b:b6:73:0e:c8:7c:49:d2:38: 9d:4b:8b:2f:a7:37:37:b9:04:16:14:20:1a:25:3b: 41:e3:36:1e:45:e5:03:a3:55:0d:35:3d:7f:9a:be: 66:ae:7a:b2:64:23:a4:71:60:67:27:cb:b9:05:7b: 21:89:8f:07:00:a0:a0:7c:11:cf:aa:c7:dd:9e:08: 8a:a0:a3:d4:5c:52:c4:46:70:2f:53:00:6d:d9:82: 07:be:c0:9d:67:37:3a:72:06:1f:c3:6d:85:8d:6e: 2b:ab:82:0f:da:2b:26:6a:9a:8a:9b:21:87:5a:5b: b6:16:bd:cc:5d:4a:ce:3b:cb:a3:38:2c:d1:01:82: 66:c3:b0:f7:7b:59:27:f4:44:ac:a7:4b:86:9c:42: 5d:fa:0e:5e:af:82:ce:bd:05:03:6c:a7:b3:49:e3: 32:be:cc:8f:92:f2:30:79:98:5c:38:f7:3f:cb:53: 37:69:15:e5:0b:7e:1f:de:44:56:8b:81:f1:f6:aa: e6:cb:1c:8e:c7:57:38:21:39:cb:a1:23:96:ab:bb: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.215.0/24 IPv6: 2001:678:110c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204653 Signature Algorithm: sha256WithRSAEncryption 1d:d9:65:86:9c:49:c5:23:87:cf:b5:32:59:a4:54:cb:6f:67: b9:3e:8e:84:af:be:80:b5:2d:30:77:1d:9f:34:e1:f4:82:48: 83:58:72:b3:4f:96:19:28:09:66:57:b1:0a:b2:be:6d:c7:06: b3:0b:2a:b3:34:bf:6e:31:cf:f8:ea:32:03:78:93:b7:cc:ef: 8f:7c:6a:cf:4a:40:cc:b5:df:07:40:8c:5b:49:ac:db:23:ea: 1b:7c:b7:d6:63:db:9d:0f:b8:4e:5f:41:89:e6:d5:92:99:27: 20:c7:ab:40:6d:04:8b:5b:07:81:c3:64:c3:9c:20:e7:d9:5e: 47:91:99:48:ba:96:ef:8c:58:a1:f6:ab:15:4a:90:9e:51:8b: 93:5d:76:0b:e3:b4:1f:c1:3d:5b:1e:fb:4d:5f:0c:87:49:cb: f7:4f:bb:5a:6e:75:31:06:f7:f2:f9:fc:16:98:95:e7:63:75: ec:ae:b6:66:6a:d7:60:da:f9:06:b0:8a:26:6e:f1:49:15:67: 9d:07:b3:b5:68:dd:dd:d9:10:ae:5e:09:e6:b4:9b:b4:e3:dd: fb:a5:fc:7f:a9:29:43:c2:71:58:c2:b0:ec:35:23:35:18:b8: d3:3a:5d:b1:ae:d5:e0:5f:7a:b9:6c:62:c4:9b:43:96:02:de: 0c:a8:68:a0 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZqbmLKpUsqnhnYKpr/69E6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE5MTAxMTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQxNWJlZTIyMjU4NWYyZDFhYWZiZmZiYTc5NTAzMWE0NTEyOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tTAvsuA5DPHOAvyu18v3NsryjpB ebrOrPAETYjeqYZXACqVXGzrOFh3xsscnNx5TfJrtnMOyHxJ0jidS4svpzc3uQQW FCAaJTtB4zYeReUDo1UNNT1/mr5mrnqyZCOkcWBnJ8u5BXshiY8HAKCgfBHPqsfd ngiKoKPUXFLERnAvUwBt2YIHvsCdZzc6cgYfw22FjW4rq4IP2ismapqKmyGHWlu2 Fr3MXUrOO8ujOCzRAYJmw7D3e1kn9ESsp0uGnEJd+g5er4LOvQUDbKezSeMyvsyP kvIweZhcOPc/y1M3aRXlC34f3kRWi4Hx9qrmyxyOx1c4ITnLoSOWq7vKpwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFH1BW+4iJYXy0ar7/7p5UDGkUSnHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzJkNDQx OS0yZWI2LTRhNzMtOTlmNC0yY2Q0YmYyN2I2N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvMmQ0NDE5 LTJlYjYtNGE3My05OWY0LTJjZDRiZjI3YjY3ZC8xL2ZVRmI3aUlsaGZMUnF2dl91 bmxRTWFSUktjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwmbXMA8EAgACMAkDBwAgAQZ4EQwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAx9tMA0GCSqGSIb3DQEBCwUAA4IBAQAd2WWGnEnF I4fPtTJZpFTLb2e5Po6Er76AtS0wdx2fNOH0gkiDWHKzT5YZKAlmV7EKsr5txwaz CyqzNL9uMc/46jIDeJO3zO+PfGrPSkDMtd8HQIxbSazbI+obfLfWY9udD7hOX0GJ 5tWSmScgx6tAbQSLWweBw2TDnCDn2V5HkZlIupbvjFih9qsVSpCeUYuTXXYL47Qf wT1bHvtNXwyHScv3T7tabnUxBvfy+fwWmJXnY3XsrrZmatdg2vkGsIombvFJFWed B7O1aN3d2RCuXgnmtJu04937pfx/qSlDwnFYwrDsNSM1GLjTOl2xrtXgX3q5bGLE m0OWAt4MqGig -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:11 2025 by rpki-client