This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer File: FXHxV8OlvVz_XRpH1BlkiifjWps.cer (raw, json) Hash identifier: vaYK0Ic8ukvQt+9c1pUq/aVArDJFtDlaIJKnfZcYi5Y= Subject key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36576D608906306F7AF547DBCE3543 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51576 IP: 195.95.190.0/24 IP: 2a06:de80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:57:6d:60:89:06:30:6f:7a:f5:47:db:ce:35:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:cd:a2:dd:b5:25:29:71:33:32:53:20:37: e6:bd:35:99:22:d4:f8:0b:4a:95:fc:71:08:71:97: 1e:11:f9:d3:93:c7:88:d1:e7:0b:97:bf:a6:52:7b: 92:bd:4d:0c:50:ea:aa:9e:78:d5:f9:fb:35:ec:f3: 7b:76:be:67:e9:ec:68:8d:69:6e:e2:25:2a:f2:3a: b8:f7:e0:8e:d0:1a:4b:0a:b8:c3:1f:5b:2f:73:83: 4d:ae:43:b3:a1:40:26:d2:bb:63:9c:b4:f0:d3:95: 5e:1b:d3:c7:59:61:c6:5e:1f:30:bb:66:f4:e5:b4: 10:64:ff:d7:71:0b:fa:f5:08:ea:e8:82:be:d7:d2: 06:ca:87:64:f8:8c:86:ec:e8:83:8f:2a:23:e7:bd: 44:31:dd:ad:2c:86:85:9b:d0:05:e2:f3:2d:4e:4e: 01:75:05:f2:7f:4d:30:b5:62:ad:2b:a6:84:bb:3a: 0a:42:04:b7:17:95:ef:39:e4:3b:df:ce:cc:c0:90: 4c:5e:78:b3:09:d3:46:6a:cf:fd:e1:77:5d:b8:95: d4:5d:ac:f1:93:1e:58:9b:2f:8b:67:43:61:93:0f: 68:37:a9:20:5f:d7:6f:e2:6c:1d:af:9b:9e:ba:33: a9:57:68:e5:db:41:24:a1:2c:eb:7c:29:35:1d:e9: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.190.0/24 IPv6: 2a06:de80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51576 Signature Algorithm: sha256WithRSAEncryption 3f:56:6f:b5:e0:3b:9d:c4:cf:72:ce:53:a1:bc:32:cf:66:1b: 35:0b:fc:0b:c0:e7:ba:02:1a:37:40:36:6d:c1:81:a2:4d:32: e9:08:5e:19:45:8e:d9:fa:d1:6d:eb:79:b4:16:ff:b0:ea:6c: 65:98:57:c6:fa:1f:ca:1d:46:fe:2b:a9:4c:0e:d0:57:fc:f0: 82:44:49:d6:88:f1:5b:49:a3:78:ea:8a:00:5d:cd:4d:58:6d: b5:25:64:ee:ac:df:c5:98:f8:80:64:74:b4:e1:e6:65:33:b9: d3:c0:8f:53:e4:41:66:69:a3:c5:f0:84:7e:08:81:a3:e0:87: 4c:4c:39:39:58:cc:85:43:cd:76:d1:ab:57:ea:c5:64:5b:28: 90:e5:52:f4:fb:04:3a:e5:f5:02:af:7e:3e:93:3a:ea:3f:02: 1a:de:f1:47:d5:f9:d9:e0:45:76:c6:2f:ed:ae:14:4a:d1:bc: 4f:76:37:32:0b:2d:a7:de:36:e8:93:d5:5a:8d:67:db:70:1f: e6:e7:27:4f:9d:13:df:a2:b2:17:56:de:c7:f5:64:c2:ab:48: 0e:50:1e:c9:92:3e:f9:15:94:d3:f5:62:0f:a5:76:d3:38:37: 19:8b:aa:c8:d9:66:26:53:53:64:d9:29:c4:9c:40:ec:17:d0: 07:fc:7d:8d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NldtYIkGMG969UfbzjVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTcxZjE1N2MzYTViZDVjZmY1ZDFhNDdkNDE5NjQ4YTI3ZTM1YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DTNot21JSlxMzJTIDfmvTWZItT4 C0qV/HEIcZceEfnTk8eI0ecLl7+mUnuSvU0MUOqqnnjV+fs17PN7dr5n6exojWlu 4iUq8jq49+CO0BpLCrjDH1svc4NNrkOzoUAm0rtjnLTw05VeG9PHWWHGXh8wu2b0 5bQQZP/XcQv69Qjq6IK+19IGyodk+IyG7OiDjyoj571EMd2tLIaFm9AF4vMtTk4B dQXyf00wtWKtK6aEuzoKQgS3F5XvOeQ7387MwJBMXnizCdNGas/94XdduJXUXazx kx5Ymy+LZ0Nhkw9oN6kgX9dv4mwdr5ueujOpV2jl20EkoSzrfCk1HemThwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBVx8VfDpb1c/10aR9QZZIon41qbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzQ2MjRk Mi00ODRiLTRiYjItYWFkMi0wMmRkY2Q2YmRhOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNDYyNGQy LTQ4NGItNGJiMi1hYWQyLTAyZGRjZDZiZGE5Mi8xL0ZYSHhWOE9sdlZ6X1hScEgx QmxraWlmaldwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw1++MA0EAgACMAcDBQMqBt6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJeDANBgkqhkiG9w0BAQsFAAOCAQEAP1ZvteA7ncTP cs5Tobwyz2YbNQv8C8DnugIaN0A2bcGBok0y6QheGUWO2frRbet5tBb/sOpsZZhX xvofyh1G/iupTA7QV/zwgkRJ1ojxW0mjeOqKAF3NTVhttSVk7qzfxZj4gGR0tOHm ZTO508CPU+RBZmmjxfCEfgiBo+CHTEw5OVjMhUPNdtGrV+rFZFsokOVS9PsEOuX1 Aq9+PpM66j8CGt7xR9X52eBFdsYv7a4UStG8T3Y3Mgstp9426JPVWo1n23Af5ucn T50T36KyF1bex/VkwqtIDlAeyZI++RWU0/ViD6V20zg3GYuqyNlmJlNTZNkpxJxA 7BfQB/x9jQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:29 2026 by rpki-client