This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer File: _fnlz5EF-11F34wfudTxx6WQVMY.cer (raw, json) Hash identifier: fOsG54ZXOOAcDjs2qolJccBpt3VEg5hvkcH1TB7fHS4= Subject key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED0999A45449337B3ADA414DBC2D56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209187 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:09:99:a4:54:49:33:7b:3a:da:41:4d:bc:2d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:13:13:4f:85:98:eb:52:03:12:3d:09:b5: 56:32:90:84:0d:bf:5a:9a:23:d5:2a:15:9a:bd:bb: 51:25:b3:ac:08:7f:cd:d2:ec:6c:15:fa:ba:e7:e6: 28:9e:ed:c9:a7:3c:75:f7:01:82:a4:c1:9e:b9:ec: 11:14:25:b6:3b:a0:d7:a9:f4:70:d4:35:31:70:9a: c0:1d:8a:ae:72:32:e8:a4:97:83:e7:13:60:53:90: 40:c9:f4:bc:64:1a:2f:14:6b:df:8c:9d:63:ce:04: 36:e4:9e:8c:51:f3:77:2c:2e:75:76:d4:f5:a1:49: 6d:2e:9a:22:af:19:4c:2e:6e:39:c9:43:cc:48:1e: b3:2e:36:34:71:fa:d4:b8:5c:0d:6a:8e:51:8d:0c: 08:f7:cf:d3:d7:d4:17:ed:4e:60:87:82:bd:f2:42: 84:a5:34:20:2d:07:16:11:f5:b5:e2:70:c5:0d:1b: b5:2c:05:bf:89:38:1f:83:bc:71:88:12:da:c1:68: 48:6d:67:03:72:cd:2e:fd:fc:ce:22:59:e5:4c:58: 03:ce:b1:d1:41:7a:bd:dc:70:ed:0f:06:82:8c:d1: 4c:cf:e2:c0:ee:36:ef:81:11:71:f3:b2:45:ab:6f: ad:95:87:02:b3:17:58:86:c1:29:f5:bc:4b:7b:c3: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209187 Signature Algorithm: sha256WithRSAEncryption 17:eb:c7:43:04:df:d3:e4:95:fc:41:a2:5f:3a:9a:40:da:ca: 40:9d:aa:da:bf:ea:1d:dd:97:34:75:73:08:9a:ae:02:18:2e: 95:da:c4:34:01:78:1e:16:4b:82:8b:f0:2d:b8:8e:f9:cd:b0: a8:2d:3c:36:76:4b:37:71:7b:bb:d5:a6:d3:8a:97:0e:8e:b2: 78:38:63:b3:3e:03:43:08:cd:37:91:51:e3:67:78:0f:9e:b9: c3:4b:ad:be:43:65:eb:76:24:92:d4:e7:ca:31:16:61:de:e8: da:5e:1e:f4:a8:84:58:ae:2d:2b:83:7c:19:95:e1:68:8a:ef: f1:54:cb:15:9d:dd:4e:e6:1e:f2:90:fc:92:35:fe:2e:f8:31: b2:5e:61:b7:1a:87:66:ad:76:93:ee:f6:d3:70:51:96:21:2f: 7c:ae:17:df:b1:a4:1f:16:ca:0b:97:aa:ff:4f:7c:49:3e:12: 1e:3c:d9:b5:31:aa:fe:3d:c8:48:0c:69:97:dc:be:77:75:98: 4c:9b:f4:63:2d:7d:6a:03:73:c6:58:ba:cb:03:15:2d:90:b9: 41:f6:d3:3f:f4:89:e2:28:af:5e:ae:ba:c5:91:9b:0b:6b:0c: c7:f3:0b:b3:30:31:56:fb:11:db:17:30:83:ed:d8:9f:7b:48: 52:54:86:f0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57QmZpFRJM3s62kFNvC1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGY5ZTVjZjkxMDVmYjVkNDVkZjhjMWZiOWQ0ZjFjN2E1OTA1NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0TE0+FmOtSAxI9CbVWMpCEDb9a miPVKhWavbtRJbOsCH/N0uxsFfq65+Yonu3Jpzx19wGCpMGeuewRFCW2O6DXqfRw 1DUxcJrAHYqucjLopJeD5xNgU5BAyfS8ZBovFGvfjJ1jzgQ25J6MUfN3LC51dtT1 oUltLpoirxlMLm45yUPMSB6zLjY0cfrUuFwNao5RjQwI98/T19QX7U5gh4K98kKE pTQgLQcWEfW14nDFDRu1LAW/iTgfg7xxiBLawWhIbWcDcs0u/fzOIlnlTFgDzrHR QXq93HDtDwaCjNFMz+LA7jbvgRFx87JFq2+tlYcCsxdYhsEp9bxLe8MX6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP355c+RBftdRd+MH7nU8celkFTGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzA3ZDIy OS03MDc3LTRiODAtOTI5NS1lYzBiNmY0ZDRhNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvMDdkMjI5 LTcwNzctNGI4MC05Mjk1LWVjMGI2ZjRkNGE2Yy8xL19mbmx6NUVGLTExRjM0d2Z1 ZFR4eDZXUVZNWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxIzANBgkqhkiG9w0BAQsFAAOCAQEAF+vHQwTf0+SV /EGiXzqaQNrKQJ2q2r/qHd2XNHVzCJquAhguldrENAF4HhZLgovwLbiO+c2wqC08 NnZLN3F7u9Wm04qXDo6yeDhjsz4DQwjNN5FR42d4D565w0utvkNl63YkktTnyjEW Yd7o2l4e9KiEWK4tK4N8GZXhaIrv8VTLFZ3dTuYe8pD8kjX+Lvgxsl5htxqHZq12 k+7203BRliEvfK4X37GkHxbKC5eq/098ST4SHjzZtTGq/j3ISAxpl9y+d3WYTJv0 Yy19agNzxli6ywMVLZC5QfbTP/SJ4iivXq66xZGbC2sMx/MLszAxVvsR2xcwg+3Y n3tIUlSG8A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:41 2026 by rpki-client