This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer File: fSoBIksdqGSAz-y8tsUt-YEpaOg.cer (raw, json) Hash identifier: qdnrYhiety0XfA2bAubRZp2BTgPSCeZgERI3UmeULCI= Subject key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157DBB194296F94FAEDEFBFA64BA96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43023 IP: 185.187.136.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7d:bb:19:42:96:f9:4f:ae:de:fb:fa:64:ba:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:04:ca:fc:a0:e1:45:e2:86:24:7b:9b:2d: 35:77:b1:74:b2:4c:3f:62:af:d7:46:c3:67:8f:7b: fa:77:3a:64:96:f0:ba:e0:82:ba:1a:48:21:42:7d: f3:c3:fd:48:76:47:21:10:c3:9c:8b:7b:28:e6:33: 17:76:72:82:4d:b1:c1:16:c1:4c:d8:d2:5c:ef:82: 79:14:0e:15:63:83:31:47:39:6d:ff:f4:ee:49:2c: ca:6b:16:53:30:66:ee:10:c2:e7:1d:91:35:db:f2: 24:f9:34:c8:91:34:64:6a:48:4d:bb:dc:cd:76:2f: 47:9d:04:96:27:1c:78:3c:a8:82:fa:09:9c:46:d4: 97:9a:cc:29:8e:ce:89:8a:9c:58:3b:66:b3:0f:96: ce:bb:3f:e9:a7:66:f4:ce:ba:3d:74:44:5e:42:27: 93:79:16:2e:29:46:2a:bb:5a:67:8a:87:8f:2c:d5: 39:2c:56:14:50:09:ec:e1:4e:c6:80:d8:87:a9:91: e8:4f:e2:cc:ae:bf:8a:88:fa:7f:03:04:c4:44:da: 0c:18:d9:85:03:e6:5d:20:ef:75:be:b8:ee:25:5d: c8:86:ed:46:14:dd:05:22:61:b1:e3:74:cd:7a:91: 73:12:01:e3:34:a2:50:54:51:2b:5c:14:4e:43:cf: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43023 Signature Algorithm: sha256WithRSAEncryption 19:85:2c:c3:28:d8:82:b3:bb:0b:60:33:32:52:aa:92:4f:87: 49:75:24:7b:c6:13:f5:5f:31:13:2c:a0:bf:d2:67:b2:bf:44: 94:b6:28:e7:9a:58:e3:a4:74:76:ff:93:36:d1:1d:a0:97:52: 1e:02:c3:6b:b3:e7:fb:b0:7b:ca:42:ce:14:d3:10:50:d0:0c: e1:95:7d:61:d9:80:f3:a9:80:e8:8b:ed:11:77:24:e4:59:3b: 3a:2c:0b:da:9c:3a:19:89:9c:cc:dd:a7:dd:f5:65:38:cc:10: 67:40:58:a2:00:92:99:a7:06:49:fd:bc:40:fb:ca:be:8b:80: af:7e:2f:7f:34:11:7c:34:74:46:54:0c:7c:15:4d:76:37:cc: 0c:dc:39:ea:a0:a4:1a:03:d0:3c:0c:ca:89:e5:f1:c0:08:b3: b2:1c:f1:cc:79:dc:37:08:98:6d:e8:1a:c0:99:46:84:5c:1a: c9:3f:25:99:53:49:ce:34:cc:c8:04:6f:2e:c1:48:b3:c3:1a: de:f0:ac:17:25:da:c1:d4:e2:98:70:68:d8:67:24:c2:e2:e4: e5:1f:a9:0f:e8:54:61:21:d2:9d:c7:11:c8:1a:a3:9a:ab:ef: 2a:c6:9d:0b:60:1c:63:dd:4c:f6:d2:09:69:79:be:20:0a:a4: 9e:2d:19:e4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FX27GUKW+U+u3vv6ZLqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDJhMDEyMjRiMWRhODY0ODBjZmVjYmNiNmM1MmRmOTgxMjk2OGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE8Eyvyg4UXihiR7my01d7F0skw/ Yq/XRsNnj3v6dzpklvC64IK6GkghQn3zw/1IdkchEMOci3so5jMXdnKCTbHBFsFM 2NJc74J5FA4VY4MxRzlt//TuSSzKaxZTMGbuEMLnHZE12/Ik+TTIkTRkakhNu9zN di9HnQSWJxx4PKiC+gmcRtSXmswpjs6JipxYO2azD5bOuz/pp2b0zro9dEReQieT eRYuKUYqu1pnioePLNU5LFYUUAns4U7GgNiHqZHoT+LMrr+KiPp/AwTERNoMGNmF A+ZdIO91vrjuJV3Ihu1GFN0FImGx43TNepFzEgHjNKJQVFErXBROQ89fCwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFH0qASJLHahkgM/svLbFLfmBKWjoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2M0MWY3 Ny1iNmEyLTQ0OTQtYTA3NC00ZmFlODRmYTE1OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYzQxZjc3 LWI2YTItNDQ5NC1hMDc0LTRmYWU4NGZhMTU4ZS8xL2ZTb0JJa3NkcUdTQXoteTh0 c1V0LVlFcGFPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubuIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCoDzANBgkqhkiG9w0BAQsFAAOCAQEAGYUswyjYgrO7C2AzMlKqkk+HSXUke8YT 9V8xEyygv9Jnsr9ElLYo55pY46R0dv+TNtEdoJdSHgLDa7Pn+7B7ykLOFNMQUNAM 4ZV9YdmA86mA6IvtEXck5Fk7OiwL2pw6GYmczN2n3fVlOMwQZ0BYogCSmacGSf28 QPvKvouAr34vfzQRfDR0RlQMfBVNdjfMDNw56qCkGgPQPAzKieXxwAizshzxzHnc NwiYbegawJlGhFwayT8lmVNJzjTMyARvLsFIs8Ma3vCsFyXawdTimHBo2GckwuLk 5R+pD+hUYSHSnccRyBqjmqvvKsadC2AcY91M9tIJaXm+IAqkni0Z5A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:06 2026 by rpki-client