This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer File: flHKwc4q_hlYsftqYjdxewtdSBA.cer (raw, json) Hash identifier: NE+do/aATU8tBAgIuyeYB6vWsERAj24H0PLdlvi+ypk= Subject key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B35F23B7E0ECBCC605002C3BB5F26BF8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 09:30:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.66.60.0/22 IP: 141.98.40.0/22 IP: 2a06:e940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:f2:3b:7e:0e:cb:cc:60:50:02:c3:bb:5f:26:bf:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 09:30:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:7a:ec:f6:a2:a2:96:1b:45:54:da:82:95: af:bb:fd:f7:62:22:8d:56:b9:af:4b:b6:a1:09:19: f4:4f:27:ff:b4:91:7c:93:94:7a:54:cd:65:3e:5a: 12:82:52:14:fb:db:cb:16:ff:0f:34:92:e8:4c:8c: da:a3:93:61:f9:bd:d5:61:6a:1c:21:b1:1c:0b:d7: 43:38:ef:91:39:c0:e1:47:8f:88:d0:fc:f2:9c:3f: 18:a0:28:aa:64:8e:79:49:52:5a:ab:e0:6c:55:b0: 16:9d:6f:72:32:57:04:14:8a:ef:4a:f8:b0:7c:3c: cc:aa:b1:a8:57:60:d7:fb:33:8c:b8:48:3e:f5:b4: c5:06:78:39:82:2a:8e:0e:c1:67:d7:35:e4:d7:33: f7:d5:a3:e6:6c:51:9c:b5:f8:77:56:40:46:a5:87: 2c:bb:ff:59:e6:96:6a:95:81:f2:90:a8:e1:20:bc: 39:73:cd:d0:9b:5f:43:7d:33:5f:a3:5a:45:26:73: 0d:0f:ba:68:b7:90:b2:1d:25:cc:1a:b8:fa:49:c7: b9:ba:6b:c2:9d:05:e8:e7:25:e3:40:78:0a:2b:45: 0e:d6:99:d7:4b:f7:8a:b2:e1:90:ab:cb:45:a4:b2: 48:57:22:ac:7a:d9:09:bc:7b:3b:3e:2d:ce:4c:0d: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.60.0/22 141.98.40.0/22 IPv6: 2a06:e940::/29 Signature Algorithm: sha256WithRSAEncryption 58:28:55:2f:f8:ab:af:db:4d:80:31:0f:64:64:c1:91:08:88: e7:7f:8b:47:5a:95:f5:40:31:a8:9b:fe:82:54:20:13:62:67: 84:c6:d2:a2:ba:63:d0:b3:a3:8d:3a:f4:8f:11:dc:e9:76:f1: db:e6:21:8d:fe:78:fd:26:c1:35:6b:0a:a1:d3:88:4c:6e:d1: 13:fc:64:a5:93:d4:3f:ed:05:29:3a:2c:e8:31:fe:9a:35:db: ec:3b:53:5e:93:ba:02:49:a6:b9:03:7a:9e:2e:5c:36:6a:f3: 6e:65:99:61:84:b1:06:d5:78:52:b3:9a:1b:1a:be:21:31:3a: 88:46:ff:a8:1e:3e:f8:bb:b9:9f:bb:6d:32:20:01:c0:29:b9: 16:f6:e8:2c:e5:53:c9:21:47:71:f0:0c:d0:ea:97:ed:cc:ee: ba:9a:88:8f:2c:a3:c8:3c:2d:1b:8b:02:36:29:c0:76:73:9e: 41:bd:4f:1e:3d:83:12:b6:0c:28:47:bf:7d:d5:f3:fb:c8:67: f0:6f:87:45:cf:74:a7:80:a3:2b:44:76:95:7b:f5:69:e7:d2: 0c:e9:dd:c2:91:cf:7c:be:cd:d4:8f:e0:56:3d:92:9d:95:f2: d6:c8:f4:78:a9:4f:d5:d7:43:9f:48:cd:a2:34:d8:58:98:a6: 7b:e4:94:bd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZs18jt+DsvMYFACw7tfJr+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MDkzMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTUxY2FjMWNlMmFmZTE5NThiMWZiNmE2MjM3NzE3YjBiNWQ0ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FF67PaiopYbRVTagpWvu/33YiKN VrmvS7ahCRn0Tyf/tJF8k5R6VM1lPloSglIU+9vLFv8PNJLoTIzao5Nh+b3VYWoc IbEcC9dDOO+ROcDhR4+I0PzynD8YoCiqZI55SVJaq+BsVbAWnW9yMlcEFIrvSviw fDzMqrGoV2DX+zOMuEg+9bTFBng5giqODsFn1zXk1zP31aPmbFGctfh3VkBGpYcs u/9Z5pZqlYHykKjhILw5c83Qm19DfTNfo1pFJnMND7pot5CyHSXMGrj6Sce5umvC nQXo5yXjQHgKK0UO1pnXS/eKsuGQq8tFpLJIVyKsetkJvHs7Pi3OTA3s6QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH5RysHOKv4ZWLH7amI3cXsLXUgQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg4MWI3 ZjA4LWRkOTQtNGNkMC1hYTM4LTg1MTJmMTUyYmQzMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgx YjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvN0U1MUNBQzFDRTJB RkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME Ai1CPAMEAo1iKDANBAIAAjAHAwUDKgbpQDANBgkqhkiG9w0BAQsFAAOCAQEAWChV L/irr9tNgDEPZGTBkQiI53+LR1qV9UAxqJv+glQgE2JnhMbSorpj0LOjjTr0jxHc 6Xbx2+Yhjf54/SbBNWsKodOITG7RE/xkpZPUP+0FKTos6DH+mjXb7DtTXpO6Akmm uQN6ni5cNmrzbmWZYYSxBtV4UrOaGxq+ITE6iEb/qB4++Lu5n7ttMiABwCm5Fvbo LOVTySFHcfAM0OqX7czuupqIjyyjyDwtG4sCNinAdnOeQb1PHj2DErYMKEe/fdXz +8hn8G+HRc90p4CjK0R2lXv1aefSDOndwpHPfL7N1I/gVj2SnZXy1sj0eKlP1ddD n0jNojTYWJime+SUvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:11:09 2025 by rpki-client