This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer File: fYtUoMG_jx-cTJVpuXXKRuuobOc.cer (raw, json) Hash identifier: 6c/50MWMZe5lJ0t4tQKTEyUuvqref3jEQCmlzGRNNlk= Subject key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B20FDD0C1A0C4B9C748A807BBF91B72B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 07:51:03 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 198310 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:fd:d0:c1:a0:c4:b9:c7:48:a8:07:bb:f9:1b:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 07:51:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:93:87:b1:c9:44:a7:9a:2e:54:a4:70:eb: 27:36:27:63:43:23:8c:61:f2:e7:1e:53:87:a4:73: 0e:81:f5:a9:00:5f:55:27:98:45:f4:62:ce:e8:99: 60:32:6c:ec:01:8b:c9:e5:c0:b4:34:05:e9:cd:ab: 4a:77:73:d2:6f:92:32:0f:d4:7c:f3:2d:4e:6c:4f: 22:e9:41:96:fb:d2:74:f2:5f:5e:9f:ca:43:91:94: d2:30:ca:6e:1d:d8:a4:f3:49:72:b0:f1:66:f3:dd: f5:cf:42:ef:ed:f5:ec:0a:10:43:15:6a:0d:f7:3a: 1a:dd:21:a4:32:78:07:c6:e8:7a:e2:57:5c:72:b8: a2:ef:4b:40:03:e2:6e:6c:bf:4f:35:8f:52:bb:aa: c4:08:67:56:02:2f:c5:9d:30:19:41:60:f5:4b:e2: 41:72:00:0c:a9:c3:c4:e3:36:61:6b:b4:02:c7:4e: 49:70:b0:78:6f:b3:30:c9:6c:1f:d9:53:87:28:b0: a9:18:e4:9b:16:be:05:0f:5d:2c:2b:86:77:b7:f7: 93:04:eb:7a:09:cb:80:90:ac:2c:ed:c3:46:e3:57: 1e:64:18:41:29:20:04:4e:ad:44:0e:c5:05:c1:66: f7:30:f0:18:c1:5b:3b:60:22:74:f8:05:34:6b:68: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198310 Signature Algorithm: sha256WithRSAEncryption a8:7f:19:5a:cf:1d:a8:ec:a9:06:4c:28:3d:d1:a1:ab:59:43: c1:92:8f:df:bd:f6:12:a5:ad:7f:e2:44:9a:79:e9:e1:88:90: 9e:fa:25:b1:d6:33:12:38:29:33:ec:8a:ab:00:92:c6:e7:9d: f7:ed:7c:a7:6d:b3:28:32:81:f3:89:32:b6:ef:be:63:35:db: 9c:e2:7f:b1:1d:92:57:60:92:b2:10:c8:04:29:eb:6c:9d:a9: 58:44:d1:ad:73:16:52:82:50:38:d5:08:c6:c5:97:d8:ef:55: 18:fe:d6:6a:c9:91:10:da:5e:dc:6d:b6:d8:2b:de:d8:50:97: ef:2f:b2:0b:a1:3c:f5:de:3c:8d:52:0e:dd:5e:51:a4:da:a1: d9:9d:a3:3d:b5:35:62:ee:d4:c5:5a:7c:2e:4a:94:e6:c4:2f: 42:03:01:aa:b7:96:3b:28:31:ff:48:ba:13:2e:71:39:96:45: 80:88:47:40:a2:58:b2:7b:23:14:2f:6e:c5:d4:e2:8c:32:c1: c7:d0:4b:a7:24:c7:a6:2a:25:d4:ad:70:65:4c:7e:5d:1f:91: 48:2d:be:dd:6b:7f:99:61:70:88:75:69:e1:96:a7:54:fb:39: 7a:a6:4b:62:20:12:53:d3:6f:cc:46:e1:56:f6:ba:06:bc:bd: bc:6f:2f:b2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZsg/dDBoMS5x0ioB7v5G3KwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MDc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDhiNTRhMGMxYmY4ZjFmOWM0Yzk1NjliOTc1Y2E0NmViYTg2Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt6Th7HJRKeaLlSkcOsnNidjQyOM YfLnHlOHpHMOgfWpAF9VJ5hF9GLO6JlgMmzsAYvJ5cC0NAXpzatKd3PSb5IyD9R8 8y1ObE8i6UGW+9J08l9en8pDkZTSMMpuHdik80lysPFm8931z0Lv7fXsChBDFWoN 9zoa3SGkMngHxuh64ldccrii70tAA+JubL9PNY9Su6rECGdWAi/FnTAZQWD1S+JB cgAMqcPE4zZha7QCx05JcLB4b7MwyWwf2VOHKLCpGOSbFr4FD10sK4Z3t/eTBOt6 CcuAkKws7cNG41ceZBhBKSAETq1EDsUFwWb3MPAYwVs7YCJ0+AU0a2j+TQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH2LVKDBv48fnEyVabl1ykbrqGznMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzY1MWZh ZS1iMjBhLTRhOGUtOWEzYy1mNTIyNzZiZTllMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvNjUxZmFl LWIyMGEtNGE4ZS05YTNjLWY1MjI3NmJlOWUxZS8xL2ZZdFVvTUdfangtY1RKVnB1 WFhLUnV1b2JPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMGpjANBgkqhkiG9w0BAQsFAAOCAQEAqH8ZWs8dqOyp BkwoPdGhq1lDwZKP3732EqWtf+JEmnnp4YiQnvolsdYzEjgpM+yKqwCSxued9+18 p22zKDKB84kytu++YzXbnOJ/sR2SV2CSshDIBCnrbJ2pWETRrXMWUoJQONUIxsWX 2O9VGP7WasmRENpe3G222Cve2FCX7y+yC6E89d48jVIO3V5RpNqh2Z2jPbU1Yu7U xVp8LkqU5sQvQgMBqreWOygx/0i6Ey5xOZZFgIhHQKJYsnsjFC9uxdTijDLBx9BL pyTHpiol1K1wZUx+XR+RSC2+3Wt/mWFwiHVp4ZanVPs5eqZLYiASU9NvzEbhVva6 Bry9vG8vsg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:29 2025 by rpki-client