This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer File: fxCetjA1fr3GKYEaYuYrGFenEyo.cer (raw, json) Hash identifier: ckb0ic6Et/EBmDaKAsFjtfKsiEEGuREEsm6MjoVzL1Y= Subject key identifier: 7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0760FEBF6E2F188831FB3B7192F97481 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 08:29:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15364 IP: 192.166.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:60:fe:bf:6e:2f:18:88:31:fb:3b:71:92:f9:74:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 08:29:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f109eb630357ebdc629811a62e62b1857a7132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:bf:2b:7f:6d:ce:d9:cd:6c:eb:69:9a:d7: 37:e5:b9:bd:3e:7e:ca:ec:eb:f8:1f:07:e5:d9:79: 7d:a0:71:47:85:be:e7:46:b0:cd:1a:25:7f:70:cf: 72:02:7f:d0:9e:0f:49:b2:b9:f9:20:42:b2:e0:46: b2:94:d4:bb:bd:70:99:99:12:8a:69:00:c1:5e:b3: c3:f6:91:78:cb:87:c7:c4:e7:f7:e9:34:31:c9:b0: 95:5e:81:b4:1a:c1:7f:c1:4d:0a:0b:f7:5d:e8:77: 7f:e5:03:c0:da:8d:85:5a:54:a8:f0:c9:79:38:12: 4d:3d:40:41:43:b6:6a:9c:ff:f3:6c:b2:d2:89:d9: f0:0e:4a:82:84:b1:59:52:d1:fa:58:9e:23:c3:f3: 02:45:35:b2:26:ab:bd:b8:3a:07:71:ea:32:e0:65: 9c:10:7f:03:fb:54:37:50:1b:e2:77:1f:ef:70:1a: 98:15:65:7a:b0:9c:c8:f8:29:53:a6:67:40:f5:ba: 6a:81:83:59:ef:56:a5:34:75:eb:5f:af:18:a0:4f: 96:85:a7:c4:91:50:fc:65:65:84:aa:cb:04:34:31: 23:ce:75:b6:bc:84:39:e4:d5:e8:e5:2d:e3:21:77: bd:2d:dc:49:1c:03:d3:ed:81:a1:3a:75:50:60:51: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15364 Signature Algorithm: sha256WithRSAEncryption 31:2d:78:3a:d1:ce:cd:34:b0:38:e7:aa:94:8d:89:d9:a1:58: 01:98:ce:53:c2:20:5a:78:67:ea:57:57:d7:3b:29:ed:8a:25: 12:a4:0e:59:81:56:b4:5c:35:7c:6b:db:bb:b5:9e:15:fd:2b: 93:bc:54:60:08:2f:4d:7d:c3:3e:48:cc:ed:8b:1c:cb:c7:11: c8:f7:47:3b:4b:22:65:14:ee:a7:30:bf:12:4f:24:11:62:8a: ec:62:93:4f:bc:7d:01:9b:a7:72:87:27:8c:5b:37:d6:ab:17: 38:36:dd:49:16:3b:54:b9:f0:9d:8f:e0:44:d4:08:91:4e:43: c2:f7:22:ab:b5:6f:73:3f:ea:b4:19:8a:b8:b8:28:9a:43:d1: 84:9b:30:5f:ef:3e:50:03:27:bf:cc:b2:fc:73:a6:9f:63:a4: 69:67:6a:6b:79:6a:64:cf:ca:9c:a1:00:4f:4e:86:93:0f:6c: 94:ea:0f:cf:53:60:32:5e:57:36:e5:9b:9b:31:f1:75:00:29: 8f:ce:65:6f:39:9d:e1:3f:3f:a4:10:6c:9a:77:2f:ee:d3:b5: e0:4a:2a:d7:3f:26:65:75:b9:f7:b8:3e:10:5c:af:28:fe:e2: e4:c7:46:d9:cd:48:fe:e5:e1:79:0a:64:21:72:2c:a2:cc:18: 43:fc:80:4b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZsHYP6/bi8YiDH7O3GS+XSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMDgyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjEwOWViNjMwMzU3ZWJkYzYyOTgxMWE2MmU2MmIxODU3YTcxMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO2/K39tztnNbOtpmtc35bm9Pn7K 7Ov4Hwfl2Xl9oHFHhb7nRrDNGiV/cM9yAn/Qng9Jsrn5IEKy4EaylNS7vXCZmRKK aQDBXrPD9pF4y4fHxOf36TQxybCVXoG0GsF/wU0KC/dd6Hd/5QPA2o2FWlSo8Ml5 OBJNPUBBQ7ZqnP/zbLLSidnwDkqChLFZUtH6WJ4jw/MCRTWyJqu9uDoHceoy4GWc EH8D+1Q3UBvidx/vcBqYFWV6sJzI+ClTpmdA9bpqgYNZ71alNHXrX68YoE+WhafE kVD8ZWWEqssENDEjznW2vIQ55NXo5S3jIXe9LdxJHAPT7YGhOnVQYFF20QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFH8QnrYwNX69ximBGmLmKxhXpxMqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzk1MDMw ZS1jNWNiLTQ1YmYtYTNkOS1mOGI2M2RlZGU1NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTUwMzBl LWM1Y2ItNDViZi1hM2Q5LWY4YjYzZGVkZTU2Yy8xL2Z4Q2V0akExZnIzR0tZRWFZ dVlyR0ZlbkV5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwKaUMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjwEMA0GCSqGSIb3DQEBCwUAA4IBAQAxLXg60c7NNLA456qUjYnZoVgBmM5TwiBa eGfqV1fXOyntiiUSpA5ZgVa0XDV8a9u7tZ4V/SuTvFRgCC9NfcM+SMztixzLxxHI 90c7SyJlFO6nML8STyQRYorsYpNPvH0Bm6dyhyeMWzfWqxc4Nt1JFjtUufCdj+BE 1AiRTkPC9yKrtW9zP+q0GYq4uCiaQ9GEmzBf7z5QAye/zLL8c6afY6RpZ2preWpk z8qcoQBPToaTD2yU6g/PU2AyXlc25ZubMfF1ACmPzmVvOZ3hPz+kEGyady/u07Xg SirXPyZldbn3uD4QXK8o/uLkx0bZzUj+5eF5CmQhciyizBhD/IBL -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:27 2025 by rpki-client