This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer File: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer (raw, json) Hash identifier: RykpoL+7ubItFYVrK/ds0wP8U+nJZGHG43s+gqLGe9A= Subject key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7C88BF83E6F7499246F35E8F697CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205943 IP: 84.252.107.0/24 IP: 185.201.68.0/22 IP: 2a0a:bf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c8:8b:f8:3e:6f:74:99:24:6f:35:e8:f6:97:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:40:ff:a3:96:99:1e:28:c0:c4:ba:39:88: 2f:06:1c:be:6a:0c:df:b9:ea:51:2e:c2:8b:97:17: 60:56:06:eb:98:7d:7a:a8:72:17:b4:4b:bd:07:74: 08:bd:76:d2:79:aa:6f:ae:d9:5c:50:48:aa:6d:a6: af:f7:3d:cb:c9:dd:ee:68:fe:b7:0c:23:60:ba:d3: df:9d:5e:4f:8d:d6:64:25:e9:89:24:aa:56:3f:7e: 03:e9:38:2d:f1:c6:01:a3:04:e0:65:eb:23:ca:5b: ac:d9:e6:9e:da:ff:b8:0c:39:ff:14:9a:3c:fa:03: 81:f7:fd:f3:0f:90:80:8d:0a:8c:2f:55:64:f6:e3: c3:73:ff:cd:18:9a:1e:35:56:9c:51:d6:b5:9a:b5: 8e:20:a8:82:85:d4:4d:d8:91:d4:95:83:55:c1:fc: c7:7b:47:d6:cd:43:da:56:1a:5c:97:19:9d:79:81: 7a:72:4c:a6:d3:1a:c5:81:a6:af:44:a9:56:2c:41: 53:3c:eb:ea:70:73:5a:29:37:32:8d:f4:b6:59:fb: cf:38:32:7c:00:9b:b2:1b:64:50:09:34:e7:59:98: a0:0e:52:2a:78:f4:27:49:c4:ff:19:5e:2d:08:3a: cf:2d:35:52:23:65:26:a6:2a:58:a9:4a:ef:71:1c: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.107.0/24 185.201.68.0/22 IPv6: 2a0a:bf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205943 Signature Algorithm: sha256WithRSAEncryption 07:fc:2a:34:b0:09:ef:c1:1c:69:3c:c5:bb:b6:8b:16:27:b0: d1:cb:be:d0:23:d2:c0:83:f1:f2:8c:69:20:b8:31:4c:af:4e: 7e:3a:49:66:3b:1d:11:31:bc:9d:eb:cf:5a:0a:42:a1:ef:a0: ac:b9:88:fa:8f:75:ba:48:0a:a0:ab:c4:ae:b4:aa:a7:6d:9f: 20:2d:48:2e:03:35:5b:00:a4:aa:5f:c2:61:90:ac:2a:fd:e8: f6:7b:cd:e5:39:47:37:00:b2:ea:0e:49:a7:53:e7:85:cf:73: 28:61:83:72:20:62:00:c6:cc:44:2f:b2:21:18:9e:26:a1:7c: 3a:f2:e2:d5:83:0b:63:f3:27:1f:ce:45:29:f0:01:63:96:3c: ca:0d:db:5b:ec:cf:01:ca:ba:1a:e6:4d:65:0a:37:78:d3:1e: e5:73:39:11:fa:fa:62:9d:ce:dc:72:8c:30:61:60:80:6f:24: 07:8c:61:b9:5e:fe:17:79:0b:1e:ba:ff:24:fb:38:85:1d:b6: 7c:17:37:23:a1:17:15:bf:35:e4:24:d8:2b:46:5f:37:ce:e8: ab:53:c0:3c:5d:3d:18:2c:a6:e0:49:84:53:b3:0f:79:aa:5a: d7:eb:09:da:2a:5b:3c:4b:67:52:35:ad:14:41:f1:b1:90:c2: 1a:68:d0:cf -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6x8iL+D5vdJkkbzXo9pfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Y3ZTdjZjgxNzZlMzAyNzY0ZDQ4Mjk5ZmMyMmE5YmRjNmJhNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zVA/6OWmR4owMS6OYgvBhy+agzf uepRLsKLlxdgVgbrmH16qHIXtEu9B3QIvXbSeapvrtlcUEiqbaav9z3Lyd3uaP63 DCNgutPfnV5PjdZkJemJJKpWP34D6Tgt8cYBowTgZesjylus2eae2v+4DDn/FJo8 +gOB9/3zD5CAjQqML1Vk9uPDc//NGJoeNVacUda1mrWOIKiChdRN2JHUlYNVwfzH e0fWzUPaVhpclxmdeYF6ckym0xrFgaavRKlWLEFTPOvqcHNaKTcyjfS2WfvPODJ8 AJuyG2RQCTTnWZigDlIqePQnScT/GV4tCDrPLTVSI2UmpipYqUrvcRxcRQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAP358+BduMCdk1IKZ/CKpvca6aDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2FlNDU0 Ny0yY2EyLTRjYmQtYTFiNS0zY2YzYjQ2M2E4NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWU0NTQ3 LTJjYTItNGNiZC1hMWI1LTNjZjNiNDYzYTg2YS8xL0FfZm56NEYyNHdKMlRVZ3Bu OElxbTl4cnBvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVPxrAwQCuclEMA0EAgACMAcDBQMqCr9AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdzANBgkqhkiG9w0BAQsFAAOCAQEAB/wq NLAJ78EcaTzFu7aLFiew0cu+0CPSwIPx8oxpILgxTK9OfjpJZjsdETG8nevPWgpC oe+grLmI+o91ukgKoKvErrSqp22fIC1ILgM1WwCkql/CYZCsKv3o9nvN5TlHNwCy 6g5Jp1Pnhc9zKGGDciBiAMbMRC+yIRieJqF8OvLi1YMLY/MnH85FKfABY5Y8yg3b W+zPAcq6GuZNZQo3eNMe5XM5Efr6Yp3O3HKMMGFggG8kB4xhuV7+F3kLHrr/JPs4 hR22fBc3I6EXFb815CTYK0ZfN87oq1PAPF09GCym4EmEU7MPeapa1+sJ2ipbPEtn UjWtFEHxsZDCGmjQzw== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:48 2026 by rpki-client