This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer File: F3XdxSn1elmets19uiuSstN190o.cer (raw, json) Hash identifier: mDqi05tBOVQhV9c5qZu5IYCa2DaF/r/aqEhqH7IevFo= Subject key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910AB03911B357507DCA6810F6F2621 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198219 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ab:03:91:1b:35:75:07:dc:a6:81:0f:6f:26:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:e8:db:be:fe:15:0e:6b:06:94:65:37:a6: 4d:ff:02:b1:28:8b:22:b1:1f:89:96:8c:97:b5:60: a9:61:33:ed:36:94:1c:18:e8:1b:fd:af:97:7c:1d: a8:7f:df:95:d4:ce:03:d5:d5:6a:4b:c4:b8:70:d4: 20:2a:8a:f9:8b:40:49:9e:5b:71:3f:39:7d:2b:fb: c9:b0:d0:91:57:18:f9:e1:46:71:ce:56:42:d2:6e: 42:85:55:2e:f6:2e:72:60:8a:48:81:3c:16:cf:91: e2:59:e3:6e:6b:dd:22:71:79:cd:ff:a8:f8:93:ad: ca:37:49:1a:d7:e4:85:85:f7:df:c6:8f:ad:e6:0a: da:34:9d:3e:92:7f:b5:b9:8a:48:d2:14:6b:80:78: e2:e9:42:5c:df:f2:07:01:8f:6c:38:87:e6:d3:c1: f4:5e:29:e3:6c:99:eb:80:0e:18:61:09:d5:84:93: 6c:6a:18:39:c9:e9:92:21:4d:36:9f:6a:1e:f6:42: c8:1c:7a:3c:22:14:a9:f2:e1:55:71:d5:cc:35:b2: fb:83:39:62:5d:80:c1:84:58:0a:ab:07:80:5f:ff: 9c:f3:d9:e5:e8:f1:36:38:64:df:cf:43:df:ff:9e: 1e:ec:25:c0:cc:52:c7:4c:c8:45:66:c5:91:ce:94: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198219 Signature Algorithm: sha256WithRSAEncryption 14:15:78:a1:3e:b0:a2:ba:8e:73:c2:32:94:d5:e5:db:18:5c: 5f:24:53:17:4b:0c:f5:99:53:54:64:24:e5:86:b7:2f:83:f4: 57:f8:a4:19:47:ef:a3:13:56:84:b5:63:71:83:e2:31:1c:4a: fd:54:e8:44:5b:ab:9e:5b:93:74:0b:3d:e1:1b:50:ef:17:6a: a3:aa:5b:32:50:45:11:24:fd:09:bf:80:07:47:6d:97:ca:e2: 80:ff:b8:dc:3a:60:dd:cd:4f:29:6c:45:d7:2a:8f:a3:af:97: 45:b7:39:49:40:87:28:13:75:bd:87:36:31:d5:d7:7e:47:47: 68:0e:f9:70:4f:15:61:5a:84:78:19:6c:da:89:bb:37:cb:bf: c6:30:5e:ec:e3:df:47:41:b8:0d:3b:0b:68:05:28:76:35:c6: 48:38:e4:6d:28:18:bb:87:ee:41:18:8c:32:12:b1:d3:65:b3: 9c:d5:7b:5a:03:df:23:07:a1:4c:a1:ff:d1:f0:c2:d2:b1:9c: da:de:e3:1d:a3:f3:c4:9f:d6:15:c0:01:ae:f3:d1:fc:17:10: db:a3:e6:55:93:68:ae:04:bc:dd:51:1c:69:54:3b:6a:da:9b: de:65:d8:0e:62:10:6e:bf:41:fd:fc:42:6d:a4:a1:f4:63:28: 96:13:b0:58 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EKsDkRs1dQfcpoEPbyYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzc1ZGRjNTI5ZjU3YTU5OWViNmNkN2RiYTJiOTJiMmQzNzVmNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+bo277+FQ5rBpRlN6ZN/wKxKIsi sR+JloyXtWCpYTPtNpQcGOgb/a+XfB2of9+V1M4D1dVqS8S4cNQgKor5i0BJnltx Pzl9K/vJsNCRVxj54UZxzlZC0m5ChVUu9i5yYIpIgTwWz5HiWeNua90icXnN/6j4 k63KN0ka1+SFhfffxo+t5graNJ0+kn+1uYpI0hRrgHji6UJc3/IHAY9sOIfm08H0 XinjbJnrgA4YYQnVhJNsahg5yemSIU02n2oe9kLIHHo8IhSp8uFVcdXMNbL7gzli XYDBhFgKqweAX/+c89nl6PE2OGTfz0Pf/54e7CXAzFLHTMhFZsWRzpR5YQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBd13cUp9XpZnrbNfborkrLTdfdKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2U3OTRi My04YTJlLTRiNzYtOGYwZC0yOWEzMzkwMmE3NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZTc5NGIz LThhMmUtNGI3Ni04ZjBkLTI5YTMzOTAyYTc2Zi8xL0YzWGR4U24xZWxtZXRzMTl1 aXVTc3ROMTkwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMGSzANBgkqhkiG9w0BAQsFAAOCAQEAFBV4oT6worqO c8IylNXl2xhcXyRTF0sM9ZlTVGQk5Ya3L4P0V/ikGUfvoxNWhLVjcYPiMRxK/VTo RFurnluTdAs94RtQ7xdqo6pbMlBFEST9Cb+AB0dtl8rigP+43Dpg3c1PKWxF1yqP o6+XRbc5SUCHKBN1vYc2MdXXfkdHaA75cE8VYVqEeBls2om7N8u/xjBe7OPfR0G4 DTsLaAUodjXGSDjkbSgYu4fuQRiMMhKx02WznNV7WgPfIwehTKH/0fDC0rGc2t7j HaPzxJ/WFcABrvPR/BcQ26PmVZNorgS83VEcaVQ7atqb3mXYDmIQbr9B/fxCbaSh 9GMolhOwWA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:16 2026 by rpki-client