This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer File: FgRPZYu8kicHhfe7ByrJNolfSTM.cer (raw, json) Hash identifier: C2CNRJ/iqflTEzTj8rBgvNffW0AMytg5FFK6RurC/z8= Subject key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0A9191F1C07C34B1F3679816020D1482 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 23:21:10 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 211588 IP: 2a0f:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:91:91:f1:c0:7c:34:b1:f3:67:98:16:02:0d:14:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 23:21:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16044f658bbc92270785f7bb072ac936895f4933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:52:40:a3:e8:b8:73:a9:56:b4:48:4e:da: e2:0f:fc:f9:9b:7d:c3:89:78:ff:e5:5a:86:84:d2: 77:b1:3c:9d:e9:66:39:51:99:a8:a9:2c:8c:67:37: 6e:10:48:d4:78:64:81:52:4b:ca:18:8d:ec:61:0b: 79:4b:08:11:e4:8f:b9:02:b8:f5:e4:a2:8e:33:67: de:fc:c2:8e:ab:26:b4:51:39:5a:cc:d9:7f:9d:22: 05:a5:4f:d9:d9:a8:27:4d:d0:19:08:5e:df:bc:3e: 5b:ad:84:65:dc:d1:44:fc:36:d6:dc:40:c1:c4:c8: c2:44:85:05:81:44:41:b4:e0:63:ea:a4:b7:a0:b3: b8:59:f6:d6:e3:25:cf:c8:53:74:da:fb:19:87:78: 4d:30:83:da:02:0a:2e:1e:29:2b:a2:79:79:0a:c1: 4d:20:f0:5a:4d:72:af:3a:47:48:39:62:99:36:db: c1:01:d8:9e:33:25:6a:41:fa:75:4f:92:9e:e1:77: 20:4c:c3:d7:e9:e8:03:02:ed:c6:06:6a:96:20:13: fc:ec:2a:a1:22:a8:92:15:52:6d:a4:d4:53:e2:1f: 5e:26:6a:13:4b:27:5c:96:ab:cb:05:f2:6a:6e:11: c7:76:e0:e7:8c:22:ac:d9:33:d2:23:61:4e:02:2f: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ff40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211588 Signature Algorithm: sha256WithRSAEncryption 13:d0:ee:83:3a:e3:c1:83:6a:5e:e2:31:b9:41:63:58:b4:f4: 18:02:7f:73:16:09:b5:3e:38:59:43:a0:7b:1f:fd:10:73:ea: 95:40:4f:ae:91:e6:0d:bc:79:05:48:a4:37:21:01:98:f3:df: 17:9c:34:7c:f4:0a:b6:b4:2e:cd:24:37:be:4b:33:08:75:64: ab:ab:50:4b:3a:65:72:ba:2e:87:76:51:85:3a:25:53:5d:9c: 0c:2e:ed:a8:10:e2:f6:d7:7c:38:f2:fa:eb:ae:43:5f:e4:2e: 28:cc:b4:d6:f8:f5:b5:ae:c1:46:df:e9:4b:62:82:57:42:27: d3:a5:d7:22:ec:12:28:80:d7:57:ca:af:2d:ac:2a:7d:94:bb: d1:10:23:4e:2b:b4:72:35:76:06:d9:f5:2c:38:fe:e6:4b:d2: a6:e4:c8:16:07:67:7f:f5:ec:b8:ac:ba:b7:40:fb:1a:ec:4a: 5a:95:39:1d:81:14:f5:9c:fe:d3:81:a4:82:f8:40:8f:e6:f4: 63:9d:03:f0:1f:58:9c:da:cc:41:68:6b:85:0c:74:06:07:4b: 7e:24:1f:7e:38:e3:38:a5:90:b7:fc:3a:c4:69:01:07:27:7f: ce:87:38:9a:75:9a:01:07:f1:be:70:87:dc:f9:29:2d:67:2f: a6:f4:b2:0d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZsKkZHxwHw0sfNnmBYCDRSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMjMyMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjA0NGY2NThiYmM5MjI3MDc4NWY3YmIwNzJhYzkzNjg5NWY0OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rJSQKPouHOpVrRITtriD/z5m33D iXj/5VqGhNJ3sTyd6WY5UZmoqSyMZzduEEjUeGSBUkvKGI3sYQt5SwgR5I+5Arj1 5KKOM2fe/MKOqya0UTlazNl/nSIFpU/Z2agnTdAZCF7fvD5brYRl3NFE/DbW3EDB xMjCRIUFgURBtOBj6qS3oLO4WfbW4yXPyFN02vsZh3hNMIPaAgouHikronl5CsFN IPBaTXKvOkdIOWKZNtvBAdieMyVqQfp1T5Ke4XcgTMPX6egDAu3GBmqWIBP87Cqh IqiSFVJtpNRT4h9eJmoTSydclqvLBfJqbhHHduDnjCKs2TPSI2FOAi8keQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBYET2WLvJInB4X3uwcqyTaJX0kzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2RiNTAz Yy1kNjU0LTRiNDYtOWI4Yi04MjJiMjU1NTM4ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGI1MDNj LWQ2NTQtNGI0Ni05YjhiLTgyMmIyNTU1MzhmZS8xL0ZnUlBaWXU4a2ljSGhmZTdC eXJKTm9sZlNUTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg//QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDOoQwDQYJKoZIhvcNAQELBQADggEBABPQ7oM648GDal7iMblBY1i09BgCf3MW CbU+OFlDoHsf/RBz6pVAT66R5g28eQVIpDchAZjz3xecNHz0Cra0Ls0kN75LMwh1 ZKurUEs6ZXK6Lod2UYU6JVNdnAwu7agQ4vbXfDjy+uuuQ1/kLijMtNb49bWuwUbf 6UtigldCJ9Ol1yLsEiiA11fKry2sKn2Uu9EQI04rtHI1dgbZ9Sw4/uZL0qbkyBYH Z3/17LisurdA+xrsSlqVOR2BFPWc/tOBpIL4QI/m9GOdA/AfWJzazEFoa4UMdAYH S34kH3444zilkLf8OsRpAQcnf86HOJp1mgEH8b5wh9z5KS1nL6b0sg0= -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:29 2025 by rpki-client