This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer (raw, json) Hash identifier: ZJuwxYw4Qpq//+o6AD8ZWsD5WmIZH7LdfTrAJMdHwzk= Subject key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B175E3D38C9E671E45374018693A5E6FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 13 Dec 2025 11:00:10 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202831 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5e:3d:38:c9:e6:71:e4:53:74:01:86:93:a5:e6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 13 11:00:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1721b760b60f722951b92527a82ffd3a5ea38459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:2a:5e:66:31:25:f0:4a:3c:cf:96:6f:40: 32:83:53:7d:a8:e6:b7:2b:bd:da:36:4e:e8:51:b1: 3e:7b:33:97:66:35:cd:2f:08:74:ed:04:00:3e:44: b8:7c:a9:ab:88:2c:08:ab:29:c5:93:17:28:9c:7a: 6c:43:98:29:8e:57:41:a3:17:f7:70:fe:91:37:f5: 82:77:1e:41:bb:43:dd:42:04:7e:76:00:39:1f:65: e2:67:c9:43:ef:2f:21:27:fa:b9:57:80:6c:c3:2d: b0:38:e3:98:74:85:15:5c:40:fb:be:89:95:da:82: f8:1b:08:b9:e2:61:0b:35:c1:3b:2a:f0:5b:c3:3a: ea:14:a9:6c:8c:d0:80:4e:4e:b3:77:69:d9:67:be: df:f2:b9:0d:bd:ed:ce:c8:0f:89:5b:66:5e:ad:3b: ba:e1:24:ba:03:28:b8:b1:d9:8c:9b:20:cd:55:b9: 12:fa:65:0a:02:9d:fa:81:4e:dc:d4:07:49:a8:64: 1e:27:f7:ab:4e:7e:38:98:59:16:af:7e:2f:69:ed: 10:dd:75:50:a1:1d:fb:59:ba:1a:5f:75:9f:67:ad: 3c:4c:56:bf:99:bc:5a:9e:ee:e3:4b:a5:55:62:c6: bb:99:31:7f:94:db:c8:90:39:cd:dd:e8:3e:92:bd: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202831 Signature Algorithm: sha256WithRSAEncryption 86:36:4d:1d:59:ca:67:15:f6:33:68:1d:f6:f4:bd:79:ad:e2: bf:72:1d:12:f2:34:be:93:3e:07:00:3a:13:f5:15:f4:b3:c3: c7:f0:fe:ee:53:7f:fd:76:6a:ae:c4:e1:bd:a2:78:e5:a2:2d: bc:86:81:6d:d5:7c:0e:e5:9b:04:24:12:e4:0d:74:a0:c3:c2: 8c:3a:11:03:d5:7d:38:57:5b:02:31:06:82:99:ba:e2:2c:66: 7c:13:98:04:2f:3f:41:4f:4d:2d:ec:c2:02:60:63:9a:a2:bc: f3:96:9d:db:c5:07:dc:91:88:e5:7c:4c:e6:8f:8c:77:4b:92: ca:e1:b5:04:99:ff:0c:fb:af:1a:7d:b0:f3:9e:58:a6:4d:82: 12:38:30:cf:6a:c0:38:20:20:22:69:94:c3:fd:89:4d:c7:c2: e1:b8:7f:5c:2e:d7:04:2d:5c:c6:e0:b9:86:fe:bf:ac:0f:b2: d4:0e:a0:10:56:ee:bd:b5:b9:3a:b8:ff:63:3d:e0:48:52:08: 2c:8f:6f:6b:c2:63:9c:41:fc:cc:e6:be:5d:40:26:81:d7:8f: 7e:c3:d1:31:d6:c9:58:2b:53:b9:25:62:9f:ea:6c:1d:b3:91: 70:9a:f2:77:cc:55:af:3a:f8:47:06:70:36:64:e7:28:e1:ce: 67:92:99:cb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZsXXj04yeZx5FN0AYaTpeb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEzMTEwMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzIxYjc2MGI2MGY3MjI5NTFiOTI1MjdhODJmZmQzYTVlYTM4NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEEqXmYxJfBKPM+Wb0Ayg1N9qOa3 K73aNk7oUbE+ezOXZjXNLwh07QQAPkS4fKmriCwIqynFkxconHpsQ5gpjldBoxf3 cP6RN/WCdx5Bu0PdQgR+dgA5H2XiZ8lD7y8hJ/q5V4Bswy2wOOOYdIUVXED7vomV 2oL4Gwi54mELNcE7KvBbwzrqFKlsjNCATk6zd2nZZ77f8rkNve3OyA+JW2ZerTu6 4SS6Ayi4sdmMmyDNVbkS+mUKAp36gU7c1AdJqGQeJ/erTn44mFkWr34vae0Q3XVQ oR37WboaX3WfZ608TFa/mbxanu7jS6VVYsa7mTF/lNvIkDnN3eg+kr1NDwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBcht2C2D3IpUbklJ6gv/Tpeo4RZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzQ0ZjRi Ni05OWE1LTRhYWQtOTcxNS1hNjVhNjcyMDdhNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNDRmNGI2 LTk5YTUtNGFhZC05NzE1LWE2NWE2NzIwN2E1NC8xL0Z5RzNZTFlQY2lsUnVTVW5x Q185T2w2amhGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYTzANBgkqhkiG9w0BAQsFAAOCAQEAhjZNHVnKZxX2 M2gd9vS9ea3iv3IdEvI0vpM+BwA6E/UV9LPDx/D+7lN//XZqrsThvaJ45aItvIaB bdV8DuWbBCQS5A10oMPCjDoRA9V9OFdbAjEGgpm64ixmfBOYBC8/QU9NLezCAmBj mqK885ad28UH3JGI5XxM5o+Md0uSyuG1BJn/DPuvGn2w855Ypk2CEjgwz2rAOCAg ImmUw/2JTcfC4bh/XC7XBC1cxuC5hv6/rA+y1A6gEFbuvbW5Orj/Yz3gSFIILI9v a8JjnEH8zOa+XUAmgdePfsPRMdbJWCtTuSVin+psHbORcJryd8xVrzr4RwZwNmTn KOHOZ5KZyw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:26 2025 by rpki-client