This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer File: f0LSfCHahsfp-_RK4OVsmPPS-As.cer (raw, json) Hash identifier: CUD8f/ifsqVbSdPFhYoak4dgyT4zMxqtE3X/poQYPDA= Subject key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F835C61C5D82E59403A192902DB1379 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198127 IP: 193.150.67.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5c:61:c5:d8:2e:59:40:3a:19:29:02:db:13:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:f8:6d:10:b2:43:9c:d1:45:68:1d:18:e4: 7a:c9:84:b4:9b:d8:03:9a:44:16:17:dd:ec:0d:eb: 3a:63:b9:e6:fe:96:8c:59:86:63:24:db:42:07:e1: 48:c2:65:e7:02:4f:fd:2a:0d:69:67:b8:9e:cf:5d: 99:1e:95:2c:7a:13:fa:9d:5c:5c:9a:cc:7f:b8:9e: b9:ce:6b:cb:80:ab:f8:f3:80:24:76:67:3d:0d:05: 8e:66:88:c4:88:2a:5a:a5:1a:84:d0:6f:4c:b6:cb: b2:eb:e1:05:2d:b3:6d:13:93:bf:96:22:2a:f2:e8: 45:38:d4:1c:8c:eb:24:41:cc:b9:ce:7a:c2:75:e1: d4:e9:69:f2:c5:8b:68:fd:1d:10:63:d7:7a:cb:ac: 02:ff:02:46:4d:05:1e:87:a0:cf:71:ed:46:e2:8d: ed:dd:f6:28:52:5a:58:ac:ab:a5:70:f3:37:db:3c: be:fc:59:4c:5c:26:c0:a5:40:67:82:d0:c8:58:02: af:02:dc:46:6e:d6:18:56:ff:9a:f0:cf:55:57:95: 1c:72:6f:a3:b3:b2:81:57:bb:85:fa:8b:ae:18:db: e0:f2:61:30:48:bf:4c:8a:bc:88:38:4f:b2:70:21: bf:a4:39:9a:ab:4a:76:97:97:a3:0a:51:d6:9e:ff: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.67.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198127 Signature Algorithm: sha256WithRSAEncryption 33:9f:04:b7:fa:93:1c:ed:21:b2:9e:c9:78:3a:22:fd:5e:ec: 1c:c4:77:91:1d:d5:1d:9b:d0:35:ad:df:49:03:23:2c:75:b7: 75:b3:81:fb:46:67:e5:6d:13:63:91:1d:b3:1e:0d:16:22:07: 48:0e:b5:ff:e9:b9:e6:1f:67:2f:c1:a5:cb:98:e6:c5:b5:55: 20:b1:de:6e:dd:57:50:ff:00:d9:27:89:a8:ab:f7:2e:4a:b5: 89:ec:a1:42:ad:7d:40:9a:d8:12:da:b9:46:c5:e2:b4:10:fc: ea:8b:cf:62:2d:3d:dc:b8:15:bc:0b:94:df:6f:fc:52:95:1c: c4:16:26:d2:d1:a7:21:66:8d:29:2a:5b:95:b3:9a:39:47:30: 07:0d:24:c0:25:00:05:2b:fc:de:37:9e:d4:d4:2c:12:88:82: 2e:c3:f7:08:27:f9:ec:d1:4d:cd:2a:f4:45:e8:08:18:2b:e8: b2:6a:ec:d2:4b:5a:81:7c:a5:94:74:0c:6c:8d:7f:cb:13:2c: 20:6f:7b:00:c3:4e:47:9f:e4:16:89:5f:3c:98:52:77:20:c8: 95:20:b9:0b:3c:f1:db:47:7c:81:af:4f:0d:38:e7:17:5d:93: 8b:46:53:c9:01:b1:ac:30:e7:d6:3f:05:76:e8:55:9e:3f:25: f6:ad:67:7e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/g1xhxdguWUA6GSkC2xN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjQyZDI3YzIxZGE4NmM3ZTlmYmY0NGFlMGU1NmM5OGYzZDJmODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXH4bRCyQ5zRRWgdGOR6yYS0m9gD mkQWF93sDes6Y7nm/paMWYZjJNtCB+FIwmXnAk/9Kg1pZ7iez12ZHpUsehP6nVxc msx/uJ65zmvLgKv484Akdmc9DQWOZojEiCpapRqE0G9Mtsuy6+EFLbNtE5O/liIq 8uhFONQcjOskQcy5znrCdeHU6WnyxYto/R0QY9d6y6wC/wJGTQUeh6DPce1G4o3t 3fYoUlpYrKulcPM32zy+/FlMXCbApUBngtDIWAKvAtxGbtYYVv+a8M9VV5Uccm+j s7KBV7uF+ouuGNvg8mEwSL9MiryIOE+ycCG/pDmaq0p2l5ejClHWnv8EkwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFH9C0nwh2obH6fv0SuDlbJjz0vgLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5Lzk4YjAy NC05ZDhmLTQ4NjktYTJhOS0wYWZiN2MzZmJmMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOThiMDI0 LTlkOGYtNDg2OS1hMmE5LTBhZmI3YzNmYmYzMC8xL2YwTFNmQ0hhaHNmcC1fUks0 T1ZzbVBQUy1Bcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwZZDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF7zANBgkqhkiG9w0BAQsFAAOCAQEAM58Et/qTHO0hsp7JeDoi/V7sHMR3kR3V HZvQNa3fSQMjLHW3dbOB+0Zn5W0TY5Edsx4NFiIHSA61/+m55h9nL8Gly5jmxbVV ILHebt1XUP8A2SeJqKv3Lkq1ieyhQq19QJrYEtq5RsXitBD86ovPYi093LgVvAuU 32/8UpUcxBYm0tGnIWaNKSpblbOaOUcwBw0kwCUABSv83jee1NQsEoiCLsP3CCf5 7NFNzSr0RegIGCvosmrs0ktagXyllHQMbI1/yxMsIG97AMNOR5/kFolfPJhSdyDI lSC5Czzx20d8ga9PDTjnF12Ti0ZTyQGxrDDn1j8FduhVnj8l9q1nfg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:13 2026 by rpki-client