This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer File: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer (raw, json) Hash identifier: mVWL+2aXlSWvxW3fiz+bn6ic2nGQtudYqoSA9SGuHu0= Subject key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE57D0F3E2CF3F2B0F6F1BBEEC1AB55CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 11:35:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214233 IP: 185.163.130.0/24 IP: 194.164.98.0/23 IP: 2a01:f080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:7d:0f:3e:2c:f3:f2:b0:f6:f1:bb:ee:c1:ab:55:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 11:35:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:1b:bb:88:c5:38:6c:be:1f:0e:03:12:9b: 2a:b9:bb:24:48:37:5c:93:05:63:2e:79:d8:55:18: 99:57:ec:94:4c:a7:dc:78:f8:36:22:22:e5:fe:55: 85:83:e0:4d:7e:28:f9:3a:9a:4a:a2:a8:d3:00:7f: 91:af:7f:d0:8c:a7:8b:29:df:a3:2f:9c:ca:85:bb: ae:0e:89:b4:93:25:d6:98:73:b5:4b:ba:84:84:99: 02:92:1d:59:b4:f8:7f:92:4b:56:ec:f6:63:03:42: 4f:cb:91:29:b5:2e:7b:32:46:a2:4f:0d:a6:84:4f: 21:58:ff:ea:a0:f5:4f:c5:81:ee:78:b6:04:53:af: 51:31:fb:c0:aa:2c:98:aa:71:ee:52:cf:2f:13:03: db:e2:94:2c:e2:60:84:83:32:4a:0f:fa:23:99:fd: 37:eb:76:e0:bc:3f:65:90:8a:7b:ec:0a:c0:fc:bf: 9f:9a:b3:56:f1:9c:b5:ac:1c:65:e3:1d:4c:70:e3: 15:e1:fb:49:cd:69:de:1b:59:1b:ba:da:9f:ee:99: 36:2f:b6:39:4e:30:8f:38:a4:f3:b2:59:d2:3f:ab: 04:7f:54:69:a9:e6:ac:b3:c3:e7:ff:ba:dd:0a:ff: 11:a4:82:f1:f3:b9:ee:63:ac:d4:50:f4:24:47:38: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.130.0/24 194.164.98.0/23 IPv6: 2a01:f080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214233 Signature Algorithm: sha256WithRSAEncryption 5c:8e:4a:01:b7:93:cc:f0:49:20:a0:c3:c4:1c:1f:8b:19:26: 14:5a:cb:a7:af:3d:c9:cc:5d:fb:e2:ff:0b:a1:4e:16:38:7f: 69:c9:0a:ff:70:57:03:d1:d8:08:29:af:45:25:d3:d1:d2:82: 89:bf:72:52:72:a7:c0:17:39:77:b9:03:2c:c1:2d:1e:4a:60: f8:0a:f7:5b:60:09:df:88:92:b9:10:fe:4d:33:2b:11:7f:c7: ac:f5:af:ac:4b:77:bb:7c:c5:e6:2b:fb:1e:2f:a8:64:ed:05: ff:78:39:4c:87:86:1f:19:e4:67:42:ce:60:b0:84:5f:f9:cb: 89:8c:e9:41:49:67:4d:be:77:67:1f:88:d3:39:1e:72:6a:14: 6a:ad:ef:49:a5:4e:b9:e6:9d:10:73:64:8f:04:7c:c5:d4:ff: 9b:6b:55:4b:56:29:54:03:6e:d8:7b:89:25:dd:59:1c:6b:fe: e9:4f:cd:0c:e5:be:98:d7:75:c5:72:5e:aa:e4:5f:d1:32:60: bd:ea:bb:8f:7c:fe:7a:17:1d:77:b1:17:2a:1d:b8:89:44:5a: f4:77:98:4f:55:32:0b:f6:67:b2:9e:f4:4a:e8:68:a0:f4:2d: 2f:95:59:26:4b:f2:6f:74:ca:90:8c:06:3d:83:c8:5a:36:d4: c4:f3:d1:aa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvlfQ8+LPPysPbxu+7Bq1XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTEzNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWNmY2ZjZWY4MmY3ZDFjNTkwOGEyZTVhMDA5ZmQxYjM0Mzk4MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNUbu4jFOGy+Hw4DEpsqubskSDdc kwVjLnnYVRiZV+yUTKfcePg2IiLl/lWFg+BNfij5OppKoqjTAH+Rr3/QjKeLKd+j L5zKhbuuDom0kyXWmHO1S7qEhJkCkh1ZtPh/kktW7PZjA0JPy5EptS57MkaiTw2m hE8hWP/qoPVPxYHueLYEU69RMfvAqiyYqnHuUs8vEwPb4pQs4mCEgzJKD/ojmf03 63bgvD9lkIp77ArA/L+fmrNW8Zy1rBxl4x1McOMV4ftJzWneG1kbutqf7pk2L7Y5 TjCPOKTzslnSP6sEf1Rpqeass8Pn/7rdCv8RpILx87nuY6zUUPQkRzjVbwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBXPz874L30cWQii5aAJ/Rs0OYF8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2QzNzkw ZC05NzIzLTRiNTMtYWQxMy02MTFlYTQ0MmQyZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDM3OTBk LTk3MjMtNGI1My1hZDEzLTYxMWVhNDQyZDJmMy8xL0ZjX1B6dmd2ZlJ4WkNLTGxv QW45R3pRNWdYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuaOCAwQBwqRiMA0EAgACMAcDBQMqAfCAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNE2TANBgkqhkiG9w0BAQsFAAOCAQEAXI5K AbeTzPBJIKDDxBwfixkmFFrLp689ycxd++L/C6FOFjh/ackK/3BXA9HYCCmvRSXT 0dKCib9yUnKnwBc5d7kDLMEtHkpg+Ar3W2AJ34iSuRD+TTMrEX/HrPWvrEt3u3zF 5iv7Hi+oZO0F/3g5TIeGHxnkZ0LOYLCEX/nLiYzpQUlnTb53Zx+I0zkecmoUaq3v SaVOueadEHNkjwR8xdT/m2tVS1YpVANu2HuJJd1ZHGv+6U/NDOW+mNd1xXJequRf 0TJgveq7j3z+ehcdd7EXKh24iURa9HeYT1UyC/Znsp70SuhooPQtL5VZJkvyb3TK kIwGPYPIWjbUxPPRqg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:47:41 2026 by rpki-client