This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer File: f-aLEiNL1wNDAbyWsTiq4neGCj4.cer (raw, json) Hash identifier: k+Yq/2WDMV9LgIRNZsUCHXyTpxiMywJb0zdpqxGfdBU= Subject key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A283E7B2388E4CB6B7A281BD78FC64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214867 IP: 185.253.131.0/24 IP: 194.56.152.0/23 IP: 2a14:5040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:83:e7:b2:38:8e:4c:b6:b7:a2:81:bd:78:fc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fe68b12234bd7034301bc96b138aae277860a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:8e:2a:7c:ff:58:20:5a:65:9a:51:9f:67: 14:74:69:a3:3a:2e:d8:d9:cd:0c:3d:88:d3:85:46: 3b:54:a4:ae:c8:76:73:4e:7e:3a:59:38:7e:25:33: 20:4d:af:b1:1a:82:9d:6b:1e:1d:8f:a0:5a:dd:7c: ae:f4:4b:41:b9:a5:23:3c:c4:89:0b:b8:0d:07:01: ac:52:8b:4e:33:e5:aa:74:07:f7:4a:02:85:d5:82: c2:9b:e9:bf:d6:1d:d3:4a:bb:e4:9d:72:32:a2:ab: bd:1d:ea:22:2b:11:dc:38:cf:4b:22:4b:41:35:f3: 84:c8:81:ea:0f:65:58:96:36:25:40:69:2b:4d:cf: 37:61:9d:6a:3e:b8:56:32:61:a4:54:e6:b6:d7:3b: 7c:a4:60:b8:d1:38:15:7f:2e:fa:f5:f4:18:26:25: 78:a9:9f:47:c2:0f:0f:7a:d8:dc:56:db:87:c8:fe: b9:17:3a:0b:1d:ad:7a:c4:0a:33:96:12:db:3c:3b: f4:44:36:3e:c9:73:b7:5e:ad:e6:a0:92:20:97:e8: 0f:05:b0:87:73:7b:39:87:97:b0:a3:ce:73:88:5f: 08:ca:09:0f:9b:b8:60:7e:ad:4e:e6:90:f1:aa:c6: f3:49:c4:dd:75:77:53:27:c0:60:f7:45:8c:19:20: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.131.0/24 194.56.152.0/23 IPv6: 2a14:5040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214867 Signature Algorithm: sha256WithRSAEncryption 6f:ad:12:a8:ea:66:72:d7:31:5d:09:80:78:e8:4a:b3:c7:1a: 14:04:4e:ae:5b:6b:79:d9:5e:71:1e:7f:57:9c:86:b1:41:55: 95:47:34:c2:88:ea:72:df:21:79:69:10:e0:c3:66:84:df:b9: 41:2d:fc:b9:89:3d:a0:e8:50:3f:7c:33:3f:40:fe:dc:a1:53: d9:6e:0e:e8:c2:2d:41:a6:cf:da:6a:26:96:bf:c8:b1:39:82: fd:db:f8:55:3f:9b:cc:29:58:89:fb:59:c4:71:48:53:f7:a8: a1:9b:4d:22:7f:6e:45:2b:be:a1:a3:5b:92:c8:50:09:b7:12: c6:b8:a4:f5:c3:ab:be:03:14:97:5f:8e:67:ef:6e:5e:ef:74: 0b:36:0b:b6:ba:29:f0:5d:14:e1:ed:c4:b3:7d:c9:24:ce:3c: 32:ce:ee:d3:0f:31:b1:d8:22:6c:09:28:ee:36:99:af:19:84: a4:00:df:bf:ae:16:5f:03:61:60:1d:1a:fb:3d:79:47:dc:17: ff:ce:8a:5b:b1:42:27:f5:c7:f1:f7:6f:70:f7:47:e5:a2:2d: b4:36:ce:9a:05:a2:56:33:1d:90:0a:e4:e7:c2:d3:76:54:92: cc:5a:8a:f9:3f:11:f6:06:ca:04:52:f4:ac:ed:29:59:3a:fd: 72:24:34:ef -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4ooPnsjiOTLa3ooG9ePxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmU2OGIxMjIzNGJkNzAzNDMwMWJjOTZiMTM4YWFlMjc3ODYwYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUSOKnz/WCBaZZpRn2cUdGmjOi7Y 2c0MPYjThUY7VKSuyHZzTn46WTh+JTMgTa+xGoKdax4dj6Ba3Xyu9EtBuaUjPMSJ C7gNBwGsUotOM+WqdAf3SgKF1YLCm+m/1h3TSrvknXIyoqu9HeoiKxHcOM9LIktB NfOEyIHqD2VYljYlQGkrTc83YZ1qPrhWMmGkVOa21zt8pGC40TgVfy769fQYJiV4 qZ9Hwg8PetjcVtuHyP65FzoLHa16xAozlhLbPDv0RDY+yXO3Xq3moJIgl+gPBbCH c3s5h5ewo85ziF8IygkPm7hgfq1O5pDxqsbzScTddXdTJ8Bg90WMGSD8FwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH/mixIjS9cDQwG8lrE4quJ3hgo+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzRhMTEx MS04ZjNjLTRlZGYtYjc3Yy0yZmEyNjMxYmMzMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNGExMTEx LThmM2MtNGVkZi1iNzdjLTJmYTI2MzFiYzMxYy8xL2YtYUxFaU5MMXdOREFieVdz VGlxNG5lR0NqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuf2DAwQBwjiYMA0EAgACMAcDBQMqFFBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHUzANBgkqhkiG9w0BAQsFAAOCAQEAb60S qOpmctcxXQmAeOhKs8caFAROrltredlecR5/V5yGsUFVlUc0wojqct8heWkQ4MNm hN+5QS38uYk9oOhQP3wzP0D+3KFT2W4O6MItQabP2momlr/IsTmC/dv4VT+bzClY iftZxHFIU/eooZtNIn9uRSu+oaNbkshQCbcSxrik9cOrvgMUl1+OZ+9uXu90CzYL trop8F0U4e3Es33JJM48Ms7u0w8xsdgibAko7jaZrxmEpADfv64WXwNhYB0a+z15 R9wX/86KW7FCJ/XH8fdvcPdH5aIttDbOmgWiVjMdkArk58LTdlSSzFqK+T8R9gbK BFL0rO0pWTr9ciQ07w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:55 2026 by rpki-client