This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer File: FsF7vpSeJS3Q4skgr13ij96HRxw.cer (raw, json) Hash identifier: pbx6RhmQNMVRTiX3lasfbgJ+bhGrT4v0hZGZHY3aKrU= Subject key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F857ADED7710FDF3B75FACFF085F06A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50314 IP: 109.236.192.0/20 IP: 2a00:1888::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7a:de:d7:71:0f:df:3b:75:fa:cf:f0:85:f0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c17bbe949e252dd0e2c920af5de28fde87471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:4e:77:7d:d3:cb:be:4b:74:3c:6a:9f:ac: 78:47:72:4a:83:d5:17:69:be:31:3c:fb:d3:33:4a: b5:0c:b4:59:64:e3:f5:9f:e5:c1:f4:f5:11:07:fb: df:d0:9f:1a:49:38:ea:2a:d5:29:08:e2:e3:59:8b: 24:f0:77:08:bb:8c:b7:95:f7:2c:49:f2:1c:0e:40: d1:56:2c:d1:c6:16:6e:b7:92:65:96:e2:8a:ba:41: e3:a1:ff:e0:e1:84:58:f3:da:4b:84:69:1a:95:0f: 31:6f:b6:95:1e:25:f1:02:a5:f1:b9:96:9b:fe:41: ca:c4:dc:fc:bb:df:34:c8:bf:c1:e9:a0:00:a1:2d: 94:f0:54:76:e4:bf:ed:b2:58:37:92:81:ee:e8:7b: 60:e0:79:5c:f8:d5:33:1f:4a:79:dd:e7:69:e0:31: 5a:01:15:cb:21:d6:1d:c4:66:2d:e9:7b:61:38:d8: 23:36:8d:5c:de:7e:ac:a7:63:47:de:57:96:03:b6: f5:a3:fa:ab:c5:b5:fd:f3:a4:07:8b:89:86:c4:1d: 95:8a:02:0a:cd:e2:11:47:77:27:52:5e:2f:91:9b: e0:50:6b:4e:42:4f:40:ca:45:23:c2:2f:fc:58:7c: 7d:3e:99:af:34:e2:0c:87:98:28:ab:a8:f5:41:44: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.192.0/20 IPv6: 2a00:1888::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50314 Signature Algorithm: sha256WithRSAEncryption 5d:6e:cb:47:e1:03:1d:ac:a2:50:74:a1:0b:fb:a2:47:a3:c6: 05:14:b3:99:24:67:ff:0c:8a:f3:43:57:63:f0:58:7a:64:3a: 2a:fb:ac:fe:5b:7d:d5:fd:5d:0f:99:bb:08:4b:52:7d:e8:0f: 3d:b2:53:87:e3:7a:67:59:f9:55:b3:84:6c:c6:5d:aa:9c:c4: 4c:c5:b9:a5:86:56:0b:b3:10:45:ea:73:e0:e1:26:2a:b0:80: d2:d2:2e:25:0f:dd:ee:59:6f:77:8f:f1:73:e6:10:10:1a:ff: dc:71:4c:fb:3d:f0:a0:34:22:8a:de:3d:39:c1:e3:38:44:f4: c7:56:1b:36:c2:67:57:e6:18:9d:30:33:14:de:62:51:50:f8: fd:93:5b:5c:42:3d:c5:a8:ae:1a:94:61:fc:61:51:74:f7:2a: 42:76:7e:5c:bc:75:47:a2:e8:6a:be:00:4e:46:95:cb:27:6f: 4d:45:d8:d3:20:d6:95:18:0f:ad:3c:a5:92:8f:49:98:b1:80: 8a:e6:2e:5d:6f:50:56:26:72:40:74:01:45:21:fb:e1:5a:65: 03:00:cc:40:82:41:ba:1e:5a:2b:41:91:8b:4e:8f:cb:88:9f: 69:bf:58:10:6c:d5:87:ff:fb:b0:4a:70:6c:a9:b2:b4:a3:9b: ad:26:2c:bb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hXre13EP3zt1+s/whfBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmMxN2JiZTk0OWUyNTJkZDBlMmM5MjBhZjVkZTI4ZmRlODc0NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ZOd33Ty75LdDxqn6x4R3JKg9UX ab4xPPvTM0q1DLRZZOP1n+XB9PURB/vf0J8aSTjqKtUpCOLjWYsk8HcIu4y3lfcs SfIcDkDRVizRxhZut5JlluKKukHjof/g4YRY89pLhGkalQ8xb7aVHiXxAqXxuZab /kHKxNz8u980yL/B6aAAoS2U8FR25L/tslg3koHu6Htg4Hlc+NUzH0p53edp4DFa ARXLIdYdxGYt6XthONgjNo1c3n6sp2NH3leWA7b1o/qrxbX986QHi4mGxB2VigIK zeIRR3cnUl4vkZvgUGtOQk9AykUjwi/8WHx9PpmvNOIMh5goq6j1QUSQowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBbBe76UniUt0OLJIK9d4o/eh0ccMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2U5Yzk4 OC1hZGQ1LTRhNDQtYTI5Yy03ZjU5YmM2MGUzMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZTljOTg4 LWFkZDUtNGE0NC1hMjljLTdmNTliYzYwZTMwMC8xL0ZzRjd2cFNlSlMzUTRza2dy MTNpajk2SFJ4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEbezAMA0EAgACMAcDBQAqABiIMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDEijANBgkqhkiG9w0BAQsFAAOCAQEAXW7LR+EDHayi UHShC/uiR6PGBRSzmSRn/wyK80NXY/BYemQ6Kvus/lt91f1dD5m7CEtSfegPPbJT h+N6Z1n5VbOEbMZdqpzETMW5pYZWC7MQRepz4OEmKrCA0tIuJQ/d7llvd4/xc+YQ EBr/3HFM+z3woDQiit49OcHjOET0x1YbNsJnV+YYnTAzFN5iUVD4/ZNbXEI9xaiu GpRh/GFRdPcqQnZ+XLx1R6Loar4ATkaVyydvTUXY0yDWlRgPrTylko9JmLGAiuYu XW9QViZyQHQBRSH74VplAwDMQIJBuh5aK0GRi06Py4ifab9YEGzVh//7sEpwbKmy tKObrSYsuw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:32 2026 by rpki-client