This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer File: F19uHruDGTXIQiyXK8qy5W0dnjY.cer (raw, json) Hash identifier: oFubJy/THfZV/paSxuKzIcb9gcECjGxpJXoVLrfXaVQ= Subject key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6BCBF053A9DC15308AC4BF2DFDF06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50031 IP: 109.69.112.0/21 IP: 2a01:7300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bc:bf:05:3a:9d:c1:53:08:ac:4b:f2:df:df:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:70:28:b0:af:71:83:5b:96:4e:9e:7b:2e: 91:c1:23:a7:5f:44:93:b0:d9:e2:cd:46:c4:41:85: 98:55:b9:fb:da:61:37:56:09:60:24:0c:8f:0e:7f: 78:5f:eb:0f:6b:73:3e:77:56:36:fa:69:38:f0:46: c7:45:97:c4:17:a6:75:64:0e:ba:fc:a2:8b:a3:0a: 2d:f9:85:c2:50:30:bb:22:2e:2c:30:86:ca:39:ad: 6d:3d:c2:e0:8b:9d:bd:61:2d:e4:8b:7f:ec:f7:e0: 44:7c:ae:af:1b:a1:ef:59:48:7c:55:58:bd:d9:8f: fd:8c:67:29:4c:58:b7:7e:9d:05:66:12:ff:3a:a3: b8:9f:85:2b:f4:76:d9:c2:6c:7d:dc:dd:70:80:13: db:5e:e5:fb:42:b5:c7:5c:de:1d:a8:bf:ca:84:d5: 2e:7a:ae:af:03:5f:6e:f1:8f:83:f1:28:09:31:bc: cc:59:8b:16:68:44:e8:9e:d5:b0:38:79:24:cd:d0: ea:c9:f8:71:e9:6c:be:2f:c1:69:a1:c0:6d:6f:e7: 90:8e:45:84:f1:e3:6d:e7:91:c8:dc:77:8d:12:a2: 67:fe:bc:e4:ef:0e:9f:28:e0:53:ba:6f:06:d7:d5: 8e:e8:cb:0e:50:21:39:c4:f4:be:55:2c:36:c2:ed: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.112.0/21 IPv6: 2a01:7300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50031 Signature Algorithm: sha256WithRSAEncryption a8:b5:fc:f4:7c:27:a7:c3:fd:48:69:1b:2a:98:42:15:a7:68: ff:9f:1b:d1:9d:cd:d4:d3:53:36:ff:0f:de:be:ae:55:88:22: 64:99:37:a7:30:10:5c:0b:31:09:d0:c0:c5:d8:67:af:51:9a: ff:68:9f:26:a3:33:11:ed:30:39:86:9c:14:65:8a:01:02:98: 82:8c:3f:6e:7b:ba:8a:d4:b4:38:f0:62:0b:37:64:a3:e0:df: e5:b4:43:47:56:6b:2a:98:a2:28:09:33:96:52:f7:7c:51:a3: 4e:45:53:19:27:9d:ff:2c:11:09:d5:33:40:d6:2a:79:cd:46: ff:37:88:74:73:4d:05:24:da:85:f0:98:47:07:1a:e0:b4:d6: 51:c3:7d:d3:f8:78:50:91:06:7c:17:41:c5:f4:c9:4b:c1:ab: dc:95:91:fa:27:bd:0a:7c:91:52:1e:6d:a2:5a:7b:8b:54:e0: 94:51:35:90:cc:af:fb:d6:29:34:40:74:69:17:f9:aa:f6:d3: ed:0e:0f:1b:9b:c9:a4:92:76:d6:42:7f:be:aa:51:94:9c:2a: 11:8d:67:64:6f:62:02:b8:80:22:a7:0c:d0:22:c0:ae:45:23: 9c:ff:01:7f:75:35:20:35:6c:64:8f:27:e1:91:72:9f:69:95: d6:b1:f0:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pry/BTqdwVMIrEvy398GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzVmNmUxZWJiODMxOTM1Yzg0MjJjOTcyYmNhYjJlNTZkMWQ5ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlpwKLCvcYNblk6eey6RwSOnX0ST sNnizUbEQYWYVbn72mE3VglgJAyPDn94X+sPa3M+d1Y2+mk48EbHRZfEF6Z1ZA66 /KKLowot+YXCUDC7Ii4sMIbKOa1tPcLgi529YS3ki3/s9+BEfK6vG6HvWUh8VVi9 2Y/9jGcpTFi3fp0FZhL/OqO4n4Ur9HbZwmx93N1wgBPbXuX7QrXHXN4dqL/KhNUu eq6vA19u8Y+D8SgJMbzMWYsWaETontWwOHkkzdDqyfhx6Wy+L8FpocBtb+eQjkWE 8eNt55HI3HeNEqJn/rzk7w6fKOBTum8G19WO6MsOUCE5xPS+VSw2wu0htwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBdfbh67gxk1yEIslyvKsuVtHZ42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzA5ZGI4 Ni02NzZkLTRmOWUtYTJiNC0wMjg1YzE1ZmM1MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMDlkYjg2 LTY3NmQtNGY5ZS1hMmI0LTAyODVjMTVmYzUxZS8xL0YxOXVIcnVER1RYSVFpeVhL OHF5NVcwZG5qWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDbUVwMA0EAgACMAcDBQAqAXMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDDbzANBgkqhkiG9w0BAQsFAAOCAQEAqLX89Hwnp8P9 SGkbKphCFado/58b0Z3N1NNTNv8P3r6uVYgiZJk3pzAQXAsxCdDAxdhnr1Ga/2if JqMzEe0wOYacFGWKAQKYgow/bnu6itS0OPBiCzdko+Df5bRDR1ZrKpiiKAkzllL3 fFGjTkVTGSed/ywRCdUzQNYqec1G/zeIdHNNBSTahfCYRwca4LTWUcN90/h4UJEG fBdBxfTJS8Gr3JWR+ie9CnyRUh5tolp7i1TglFE1kMyv+9YpNEB0aRf5qvbT7Q4P G5vJpJJ21kJ/vqpRlJwqEY1nZG9iAriAIqcM0CLArkUjnP8Bf3U1IDVsZI8n4ZFy n2mV1rHwRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:57 2026 by rpki-client