This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer File: FVCvriuu-2uI-XUbsyGOs5uUtXY.cer (raw, json) Hash identifier: QaE2sw5l3rC7JaAy7Q4JrcJzu5TwIM05ELQLg449ClI= Subject key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3A735632C878B05CB31533BA15D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61221 IP: 5.252.144.0/22 IP: 185.14.244.0/22 IP: 2a03:b840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:73:56:32:c8:78:b0:5c:b3:15:33:ba:15:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1550afae2baefb6b88f9751bb3218eb39b94b576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:c0:14:f7:7f:f1:a4:ed:8f:4f:0f:2b:21: a4:ea:c1:ed:ce:19:60:57:a2:59:4e:00:09:9f:c0: 66:11:88:38:b2:08:c1:11:ac:ca:c0:41:b7:2a:88: 09:30:76:f2:8f:4e:d3:60:5c:f4:38:d1:75:ba:d5: 52:48:5b:19:e2:90:45:f5:15:96:86:12:f8:c0:3a: 64:60:54:f3:cd:35:8a:97:c0:75:b6:f7:9c:14:7b: 0e:6c:70:40:bd:56:be:b3:76:7e:33:24:61:4a:31: 46:a9:44:3f:59:85:55:e7:8b:a4:57:2e:e4:45:5d: 7d:98:34:8f:fa:aa:3c:d5:b9:88:4b:2b:b6:2c:bd: f8:3a:a5:6c:62:5e:c1:61:1c:d5:ef:0f:4b:d0:c0: 75:8e:d6:94:c1:00:0e:76:c2:46:dc:f9:ea:ca:56: 75:18:28:75:94:32:a6:fb:b3:01:02:44:5b:e4:f5: 59:3e:4f:52:f9:8d:05:d3:7b:3c:77:0a:c9:65:64: bf:d2:ef:69:37:12:17:fa:8e:f5:44:51:3c:27:7a: 12:22:87:80:0e:54:9e:2f:64:a0:18:af:17:62:8f: c8:ec:8a:e0:be:1e:57:d3:e7:ba:57:fe:92:c6:7c: 9e:cf:d6:9c:6a:fa:e0:29:72:ef:91:39:c9:ea:16: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.144.0/22 185.14.244.0/22 IPv6: 2a03:b840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61221 Signature Algorithm: sha256WithRSAEncryption 2e:f0:21:54:be:f2:7b:51:ab:98:89:25:4a:ab:7c:3a:3e:18: 40:10:09:fa:ff:6f:7b:4d:62:fa:e7:21:21:26:c5:c0:6f:35: 6e:fa:5c:f5:d3:f2:d3:d6:91:65:09:63:93:fd:0c:83:5f:0f: 71:37:fc:54:0c:5f:5d:14:5f:85:bf:26:b4:7a:26:fa:3b:15: a0:ab:35:66:0d:33:dc:b2:dd:02:15:65:96:97:ae:fa:73:a8: 97:d9:ea:25:45:c2:83:d6:b4:04:96:dd:55:94:a7:28:8e:7e: e6:ea:43:5a:3f:58:fb:91:a1:22:26:75:66:8a:e4:53:dd:99: e9:b8:e9:af:0e:76:e6:53:5c:9b:69:09:e0:de:24:79:e3:c7: bc:b5:d1:13:ec:10:dd:c5:3c:02:e3:fb:6f:08:49:5d:8a:b1: 4d:91:01:f6:2a:e2:a6:f9:2f:a4:4e:a4:25:90:c8:d2:eb:17: 20:e3:1c:b3:3c:14:62:8d:7d:a8:77:4e:bb:6f:f4:ec:ee:26: e1:9c:fc:f5:40:23:fc:b1:08:93:9d:28:67:fd:b5:f5:a7:51: e0:dc:72:67:94:b9:63:92:0d:46:a3:58:32:e8:69:a3:70:85: 99:c8:1e:93:8b:fd:96:95:25:dc:49:97:97:bf:b3:7c:8f:da: 9c:fa:a3:db -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57TpzVjLIeLBcsxUzuhXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTUwYWZhZTJiYWVmYjZiODhmOTc1MWJiMzIxOGViMzliOTRiNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswTAFPd/8aTtj08PKyGk6sHtzhlg V6JZTgAJn8BmEYg4sgjBEazKwEG3KogJMHbyj07TYFz0ONF1utVSSFsZ4pBF9RWW hhL4wDpkYFTzzTWKl8B1tvecFHsObHBAvVa+s3Z+MyRhSjFGqUQ/WYVV54ukVy7k RV19mDSP+qo81bmISyu2LL34OqVsYl7BYRzV7w9L0MB1jtaUwQAOdsJG3PnqylZ1 GCh1lDKm+7MBAkRb5PVZPk9S+Y0F03s8dwrJZWS/0u9pNxIX+o71RFE8J3oSIoeA DlSeL2SgGK8XYo/I7Irgvh5X0+e6V/6Sxnyez9acavrgKXLvkTnJ6hYrTwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBVQr64rrvtriPl1G7MhjrOblLV2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzYyNzhj Ni1jMjAxLTQ3NDAtYTVmMS02NmQ2NzFmODQyYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNjI3OGM2 LWMyMDEtNDc0MC1hNWYxLTY2ZDY3MWY4NDJiMy8xL0ZWQ3ZyaXV1LTJ1SS1YVWJz eUdPczV1VXRYWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBfyQAwQCuQ70MA0EAgACMAcDBQAqA7hAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDvJTANBgkqhkiG9w0BAQsFAAOCAQEALvAh VL7ye1GrmIklSqt8Oj4YQBAJ+v9ve01i+uchISbFwG81bvpc9dPy09aRZQljk/0M g18PcTf8VAxfXRRfhb8mtHom+jsVoKs1Zg0z3LLdAhVllpeu+nOol9nqJUXCg9a0 BJbdVZSnKI5+5upDWj9Y+5GhIiZ1ZorkU92Z6bjprw525lNcm2kJ4N4keePHvLXR E+wQ3cU8AuP7bwhJXYqxTZEB9iripvkvpE6kJZDI0usXIOMcszwUYo19qHdOu2/0 7O4m4Zz89UAj/LEIk50oZ/219adR4NxyZ5S5Y5INRqNYMuhpo3CFmcgek4v9lpUl 3EmXl7+zfI/anPqj2w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:12 2026 by rpki-client