This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FHsskQBeSqJN18CUWCNNC96FBV8.cer File: FHsskQBeSqJN18CUWCNNC96FBV8.cer (raw, json) Hash identifier: kB4ClTPNLMqgD1fTzfTMvFBXuuyvkYIAHkLLKrqHyG4= Subject key identifier: 14:7B:2C:91:00:5E:4A:A2:4D:D7:C0:94:58:23:4D:0B:DE:85:05:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B370AFD5FE67BB7542C05C07869625D30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 14:37:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202782 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:0a:fd:5f:e6:7b:b7:54:2c:05:c0:78:69:62:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 14:37:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=147b2c91005e4aa24dd7c09458234d0bde85055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:f2:94:49:5e:f3:0d:f2:44:46:00:d3:51: 8d:a9:ed:d9:e1:52:1d:52:7e:39:d6:75:8c:8c:a2: a1:28:9d:31:d3:34:e2:47:c4:0a:c7:ea:69:79:4a: 92:ea:e5:3f:d1:0b:97:1c:c5:32:03:89:37:c0:d9: 06:c8:56:fc:d3:78:b3:77:e1:e5:a8:11:1c:27:23: c6:e3:54:d1:2e:b6:b1:94:d4:1b:1a:89:13:d6:8f: 42:19:f9:85:49:42:f2:6a:b2:70:00:33:7f:af:68: 7d:73:05:13:65:f1:c9:da:40:a2:b3:48:1a:e2:5d: 8d:ec:8d:bd:9c:e5:b7:be:97:54:31:5d:1e:32:ff: a2:7d:80:04:25:7e:70:87:9b:2f:82:68:f7:54:21: 0b:79:97:4e:c2:13:68:fa:80:cb:52:f7:de:6b:7b: a9:6e:5a:fe:2d:9e:f3:f2:b6:fc:8e:7f:17:24:b1: cf:ba:88:8a:da:94:dc:81:23:ae:6f:14:19:17:d8: 39:a4:25:c8:de:5f:92:01:c2:ea:d5:2b:5f:9a:9b: dc:0e:b9:34:34:02:01:f9:1c:94:8e:fb:a6:46:de: 54:82:89:9e:e6:89:3f:d7:0d:46:35:8b:b2:32:4b: c0:6e:3b:76:ab:b1:4a:4e:dc:0f:d8:eb:fc:b1:7d: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7B:2C:91:00:5E:4A:A2:4D:D7:C0:94:58:23:4D:0B:DE:85:05:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202782 Signature Algorithm: sha256WithRSAEncryption b0:78:bb:a9:f3:12:8e:c9:8d:a8:ab:9d:a7:61:8e:f6:4f:be: 65:4c:35:ee:40:36:a5:85:df:1d:20:d5:7a:21:9a:36:cc:78: 50:1b:ff:32:e1:a6:a2:ff:a0:00:eb:50:38:99:68:b9:c9:51: a3:35:39:5f:2c:70:54:20:53:60:1f:61:5a:36:e6:b0:6d:6e: 9e:33:4b:c2:72:2c:cc:f7:12:b7:8b:91:f9:e9:cd:f4:3b:fd: 15:bb:2e:65:e7:a8:ce:05:d2:f2:ff:ff:10:7c:3c:65:44:61: 1c:da:08:8b:52:79:14:a6:4f:74:6f:c5:50:57:19:e7:9b:5c: 6e:31:d9:08:db:4c:44:16:05:d7:5b:1e:95:a4:24:b0:3b:b9: 33:46:35:98:c9:31:21:0f:de:7f:ca:f2:b6:ca:dc:a8:40:3a: b4:05:e3:4d:99:7e:28:c3:ed:2f:13:7e:37:3f:d0:95:7d:ba: 43:fb:5e:11:59:6f:1c:b8:08:c2:af:30:a4:0f:59:36:c1:51: e0:26:4d:59:6a:4f:09:eb:bd:f2:dc:35:17:f5:22:ce:18:d0: 4d:aa:86:e5:fb:0a:45:4c:c9:8a:1d:74:fd:19:71:79:45:7a: 9d:a6:fe:29:e7:d3:38:49:ce:1f:86:38:a8:45:1b:da:27:e4: f0:71:57:98 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZs3Cv1f5nu3VCwFwHhpYl0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTQzNzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDdiMmM5MTAwNWU0YWEyNGRkN2MwOTQ1ODIzNGQwYmRlODUwNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA3ylEle8w3yREYA01GNqe3Z4VId Un451nWMjKKhKJ0x0zTiR8QKx+ppeUqS6uU/0QuXHMUyA4k3wNkGyFb803izd+Hl qBEcJyPG41TRLraxlNQbGokT1o9CGfmFSULyarJwADN/r2h9cwUTZfHJ2kCis0ga 4l2N7I29nOW3vpdUMV0eMv+ifYAEJX5wh5svgmj3VCELeZdOwhNo+oDLUvfea3up blr+LZ7z8rb8jn8XJLHPuoiK2pTcgSOubxQZF9g5pCXI3l+SAcLq1StfmpvcDrk0 NAIB+RyUjvumRt5Ugome5ok/1w1GNYuyMkvAbjt2q7FKTtwP2Ov8sX1kiwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBR7LJEAXkqiTdfAlFgjTQvehQVfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAxNTc2 NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDE1 NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzMvMTQ3QjJDOTEwMDVF NEFBMjRERDdDMDk0NTgyMzREMEJERTg1MDU1Ri5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGB4w DQYJKoZIhvcNAQELBQADggEBALB4u6nzEo7JjairnadhjvZPvmVMNe5ANqWF3x0g 1XohmjbMeFAb/zLhpqL/oADrUDiZaLnJUaM1OV8scFQgU2AfYVo25rBtbp4zS8Jy LMz3EreLkfnpzfQ7/RW7LmXnqM4F0vL//xB8PGVEYRzaCItSeRSmT3RvxVBXGeeb XG4x2QjbTEQWBddbHpWkJLA7uTNGNZjJMSEP3n/K8rbK3KhAOrQF402ZfijD7S8T fjc/0JV9ukP7XhFZbxy4CMKvMKQPWTbBUeAmTVlqTwnrvfLcNRf1Is4Y0E2qhuX7 CkVMyYoddP0ZcXlFep2m/inn0zhJzh+GOKhFG9on5PBxV5g= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:32 2025 by rpki-client