This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer File: c-FXspGMrcqKWp-8Zul3YIpt9eE.cer (raw, json) Hash identifier: fLS4AdrkafEJs1mZ6XeZL8QqGf5XDKy+jv00H8Yi2L8= Subject key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910464FF22F93435629705869DC30A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203560 IP: 178.21.144.0/21 IP: 185.8.168.0/22 IP: 2a02:2c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:46:4f:f2:2f:93:43:56:29:70:58:69:dc:30:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:84:33:ff:96:2b:af:22:89:2e:13:97:57: 1d:d7:f3:48:cc:53:aa:ca:ae:4b:85:d6:3b:29:a0: 67:6c:e2:b2:f9:4a:37:87:1d:a2:37:b8:97:03:b5: 16:0e:af:89:a8:d5:bc:09:89:4f:e9:4e:b1:9e:ec: ba:0f:ef:e1:a6:5d:b3:29:c5:38:9a:e2:74:08:10: e4:79:2e:30:36:97:b7:e0:4e:38:a9:e7:b7:dd:60: 17:3d:1b:d2:0d:67:39:30:00:7e:10:f6:09:86:9c: 24:e9:1f:c1:d4:26:1d:80:b3:2f:c4:fa:9a:43:40: 68:ee:9a:64:a7:9c:e1:a3:7f:10:a3:2d:3c:e6:08: 40:bb:c9:0a:28:1d:0c:a4:c3:d5:ee:e4:a8:47:43: 14:5d:ee:3a:f1:8c:d5:fd:fd:38:26:66:48:97:8b: 42:99:98:ff:d5:a7:30:70:0a:92:9e:0b:59:d6:2a: c2:44:69:32:a0:de:fa:04:87:f8:43:f4:9a:6d:d4: c5:fc:9d:1e:89:15:d8:6a:74:82:d5:13:9c:fb:3e: e4:02:94:88:63:63:f7:4c:3d:56:ea:1a:6e:56:c2: 63:b0:02:7f:64:2d:b0:c5:58:f6:e5:a6:3a:79:4b: f3:f9:d0:b9:cc:4c:26:51:9a:c0:5d:be:85:56:8d: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.144.0/21 185.8.168.0/22 IPv6: 2a02:2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203560 Signature Algorithm: sha256WithRSAEncryption 34:48:c6:57:c3:a3:66:ce:2b:4e:dc:f4:6a:8f:c1:59:75:0a: 8a:00:b9:35:05:0d:6d:5e:38:f9:ce:d3:5f:71:52:8c:9d:82: d7:d6:1c:8c:9d:23:5a:a7:8c:dd:99:8d:aa:54:05:d5:3c:ec: 75:e8:23:7a:7e:dc:fd:e7:0b:aa:be:91:5d:93:08:86:10:81: 98:ae:c0:76:3d:68:d9:35:d0:fb:f5:91:05:c7:f6:da:42:bb: 95:d7:21:71:24:c8:0e:42:c4:8b:f0:f9:e0:56:45:3e:df:43: 2a:80:fd:1e:47:ac:aa:21:99:df:be:f3:d3:2c:00:bc:d7:fd: 23:bb:48:2f:ea:93:cb:c4:71:2a:46:3e:d9:51:f1:f5:f1:de: dd:0c:0a:a4:c1:a8:9b:cb:76:a8:0a:be:b7:81:e3:e2:8d:fa: 5f:d1:2e:f7:a4:ab:52:3e:bd:c4:4a:96:28:2c:d2:15:a3:ae: bd:73:1b:66:c9:2a:b3:40:63:5f:cf:1a:a5:f1:7a:a5:f7:7e: 03:f7:a4:0f:61:50:37:80:dd:1f:61:59:43:55:07:11:22:37: 36:0b:bf:ab:43:2e:c8:0e:f0:e3:d9:66:35:ed:07:91:e2:38: 32:50:c4:97:40:f7:47:bd:36:68:77:cd:c3:43:58:76:c7:f3: df:e8:1d:8a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EEZP8i+TQ1YpcFhp3DCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2UxNTdiMjkxOGNhZGNhOGE1YTlmYmM2NmU5Nzc2MDhhNmRmNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeWEM/+WK68iiS4Tl1cd1/NIzFOq yq5LhdY7KaBnbOKy+Uo3hx2iN7iXA7UWDq+JqNW8CYlP6U6xnuy6D+/hpl2zKcU4 muJ0CBDkeS4wNpe34E44qee33WAXPRvSDWc5MAB+EPYJhpwk6R/B1CYdgLMvxPqa Q0Bo7ppkp5zho38Qoy085ghAu8kKKB0MpMPV7uSoR0MUXe468YzV/f04JmZIl4tC mZj/1acwcAqSngtZ1irCRGkyoN76BIf4Q/SabdTF/J0eiRXYanSC1ROc+z7kApSI Y2P3TD1W6hpuVsJjsAJ/ZC2wxVj25aY6eUvz+dC5zEwmUZrAXb6FVo0D3wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHPhV7KRjK3KilqfvGbpd2CKbfXhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2JiY2Q1 My1jNGY4LTQyNDUtYmI5MC0wMGExNTRiOGVjYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYmJjZDUz LWM0ZjgtNDI0NS1iYjkwLTAwYTE1NGI4ZWNiMS8xL2MtRlhzcEdNcmNxS1dwLTha dWwzWUlwdDllRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDshWQAwQCuQioMA0EAgACMAcDBQAqAgLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbKDANBgkqhkiG9w0BAQsFAAOCAQEANEjG V8OjZs4rTtz0ao/BWXUKigC5NQUNbV44+c7TX3FSjJ2C19YcjJ0jWqeM3ZmNqlQF 1Tzsdegjen7c/ecLqr6RXZMIhhCBmK7Adj1o2TXQ+/WRBcf22kK7ldchcSTIDkLE i/D54FZFPt9DKoD9HkesqiGZ377z0ywAvNf9I7tIL+qTy8RxKkY+2VHx9fHe3QwK pMGom8t2qAq+t4Hj4o36X9Eu96SrUj69xEqWKCzSFaOuvXMbZskqs0BjX88apfF6 pfd+A/ekD2FQN4DdH2FZQ1UHESI3Ngu/q0MuyA7w49lmNe0HkeI4MlDEl0D3R702 aHfNw0NYdsfz3+gdig== -----END CERTIFICATE-----Generated at Fri Jan 2 11:17:12 2026 by rpki-client