This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer File: mfa_Doxu_Er_r3JiiEacr_QX3mY.cer (raw, json) Hash identifier: 16kDe0QeHvWkOABOej99hZ1E/jr/Xyx8oT2cHVNBWJ8= Subject key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACF059B91115716A9DFE6F488D39BFDCB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 29 Nov 2025 09:50:42 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203662 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:05:9b:91:11:57:16:a9:df:e6:f4:88:d3:9b:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 29 09:50:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99f6bf0e8c6efc4affaf726288469caff417de66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:63:53:8a:41:9f:00:f3:82:04:b7:fa:db: 63:24:db:1f:a4:ba:cb:5a:a4:17:a6:67:13:50:a9: 6a:fe:f9:35:d8:b9:e0:58:cc:9c:9b:ea:f7:c0:c6: fc:7f:63:39:57:57:96:1e:8c:55:1d:31:66:d9:12: 70:42:27:fc:44:17:97:39:b9:e7:9d:cc:aa:e2:e8: fa:48:fc:94:6b:a8:a0:0d:cc:17:2b:e5:a7:fe:ce: f7:ed:a9:d3:ea:24:4c:36:af:88:39:85:98:37:e2: 78:d4:9e:73:62:a5:52:f4:9a:62:0b:c3:e4:81:1b: 5e:db:6a:03:fd:bf:f7:00:1f:ef:dd:bd:b1:0a:14: c5:cf:10:cd:d6:c5:95:e9:6a:ee:08:a1:c8:f8:34: 2e:67:a1:3b:41:b9:76:6d:c3:db:92:54:5c:d5:0f: cf:cf:d0:b8:9d:aa:c0:2f:ed:36:e2:15:dd:cc:d7: 26:d2:27:1e:6d:1e:b0:79:4e:b2:90:9c:b0:36:c9: 4f:5a:e8:ae:14:26:25:7a:57:d3:19:a5:e5:a0:13: bd:2f:9a:cf:51:33:28:6f:8f:c5:12:40:83:25:dd: 6c:0d:3d:9b:5f:53:21:ec:46:18:bc:df:6f:0c:60: fe:88:40:28:cb:ae:2a:fb:1b:2e:a6:7f:c4:1b:5b: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203662 Signature Algorithm: sha256WithRSAEncryption 25:7c:a7:42:bf:a0:7f:e6:8f:d6:63:07:2b:74:98:1b:85:23: 7b:43:d5:a6:f4:a9:fb:bf:d0:16:7f:ad:4c:3d:e6:eb:a4:b3: 69:53:e4:ed:f8:3d:8c:4f:2e:47:fa:c6:bb:8b:0e:e3:37:17: 4e:9d:43:74:21:f4:e0:55:6a:83:77:11:95:32:19:2a:3c:8d: bb:2c:b7:3a:70:fb:b5:fe:68:be:80:91:33:79:b3:2f:1b:47: 77:72:4b:f3:bd:cf:82:4b:ec:4f:56:17:5f:24:b6:3d:a0:13: 18:5e:16:8b:13:55:90:5e:1d:59:42:51:9d:a5:42:4f:a7:56: a8:4a:d3:55:12:2a:cc:62:49:d2:0f:a5:da:52:3c:3c:ad:b4: 30:13:41:64:48:4d:a0:f9:32:20:e2:45:a6:ca:01:99:3e:89: fe:dc:6b:c4:96:a9:4a:96:d2:0f:13:b2:2e:e2:40:0f:6f:38: 72:3b:18:eb:b3:9a:7e:ef:c6:4b:50:ce:6b:c9:68:10:0b:fa: b1:7f:2b:fc:5d:fb:80:8e:cf:7c:fa:72:9e:4e:72:7a:37:b2: fe:9b:67:49:9a:94:00:63:eb:6b:ca:f6:e0:be:c4:a3:13:31: df:f3:0d:c8:90:64:25:66:4e:80:e6:db:7b:e0:d4:ef:3b:a7: 85:2a:f3:a7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZrPBZuREVcWqd/m9IjTm/3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI5MDk1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWY2YmYwZThjNmVmYzRhZmZhZjcyNjI4ODQ2OWNhZmY0MTdkZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wRjU4pBnwDzggS3+ttjJNsfpLrL WqQXpmcTUKlq/vk12LngWMycm+r3wMb8f2M5V1eWHoxVHTFm2RJwQif8RBeXObnn ncyq4uj6SPyUa6igDcwXK+Wn/s737anT6iRMNq+IOYWYN+J41J5zYqVS9JpiC8Pk gRte22oD/b/3AB/v3b2xChTFzxDN1sWV6WruCKHI+DQuZ6E7Qbl2bcPbklRc1Q/P z9C4narAL+024hXdzNcm0icebR6weU6ykJywNslPWuiuFCYlelfTGaXloBO9L5rP UTMob4/FEkCDJd1sDT2bX1Mh7EYYvN9vDGD+iEAoy64q+xsupn/EG1uuOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJn2vw6MbvxK/69yYohGnK/0F95mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2MzMjUx NC0zOWMzLTRiNmMtYTBlMS1lODg2OTU5NTQ3MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYzMyNTE0 LTM5YzMtNGI2Yy1hMGUxLWU4ODY5NTk1NDcwZC8xL21mYV9Eb3h1X0VyX3IzSmlp RWFjcl9RWDNtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbjjANBgkqhkiG9w0BAQsFAAOCAQEAJXynQr+gf+aP 1mMHK3SYG4Uje0PVpvSp+7/QFn+tTD3m66SzaVPk7fg9jE8uR/rGu4sO4zcXTp1D dCH04FVqg3cRlTIZKjyNuyy3OnD7tf5ovoCRM3mzLxtHd3JL873PgkvsT1YXXyS2 PaATGF4WixNVkF4dWUJRnaVCT6dWqErTVRIqzGJJ0g+l2lI8PK20MBNBZEhNoPky IOJFpsoBmT6J/txrxJapSpbSDxOyLuJAD284cjsY67Oafu/GS1DOa8loEAv6sX8r /F37gI7PfPpynk5yejey/ptnSZqUAGPra8r24L7EoxMx3/MNyJBkJWZOgObbe+DU 7zunhSrzpw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:20 2025 by rpki-client