This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer File: fU0ch5CpE-gyxzPf93je55EpcAo.cer (raw, json) Hash identifier: Nrt/6q86qHe1FlAB/alLfbQGT4Z8ugNoA6yS3kX8qUM= Subject key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759200513B963799B5566005E1A7209 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8222 AS: 12337 AS: 44880 IP: 62.128.0.0/19 IP: 89.250.128.0/20 IP: 185.54.240.0/22 IP: 185.227.12.0/22 IP: 188.92.112.0/21 IP: 192.101.75.0/24 IP: 192.109.102.0/24 IP: 194.31.2.0/24 IP: 194.59.179.0/24 IP: 213.95.0.0/16 IP: 213.155.64.0/19 IP: 213.183.0.0/19 IP: 2001:780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:05:13:b9:63:79:9b:55:66:00:5e:1a:72:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4d1c8790a913e832c733dff778dee79129700a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:53:e1:85:7b:47:4f:98:19:f2:74:6f:12: 52:bb:e0:2e:24:ba:10:bd:b1:ab:02:bd:99:b5:45: 6f:38:10:ee:d8:21:86:83:9f:69:f9:10:3f:c7:30: e1:25:9b:f7:ba:90:b3:a8:28:88:fe:c8:35:f6:d8: 7a:03:7a:2d:c7:d9:0c:fd:47:f7:2a:83:26:e4:e0: 84:71:c2:04:02:2a:c5:3a:12:50:78:ad:d6:75:43: 84:0b:49:aa:53:7f:e1:9e:da:c7:c3:a3:66:07:11: b5:a8:7a:4b:47:06:68:dc:57:db:a4:0e:66:9a:92: 04:47:09:58:2f:41:5f:b2:d9:50:6e:78:e0:b9:c6: 82:60:39:41:7d:42:d0:6d:d7:e7:fc:40:12:ee:8c: 6c:c9:6e:5a:f8:38:14:4d:ea:1d:46:56:ab:50:b8: 0d:66:49:ab:74:18:d8:a8:29:72:f3:26:7c:2f:50: 54:29:22:da:9c:00:f9:48:58:b6:2b:79:3c:5a:70: 84:5d:17:8f:2d:4a:00:27:3e:43:8c:01:28:36:10: b7:19:eb:10:ee:1f:b2:cf:03:dc:e3:95:d2:d0:f1: 30:51:0c:23:40:bf:f4:3e:90:6b:dc:80:04:26:da: be:c2:8e:e6:21:1c:1b:c7:10:83:c3:70:ec:56:ca: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.128.0.0/19 89.250.128.0/20 185.54.240.0/22 185.227.12.0/22 188.92.112.0/21 192.101.75.0/24 192.109.102.0/24 194.31.2.0/24 194.59.179.0/24 213.95.0.0/16 213.155.64.0/19 213.183.0.0/19 IPv6: 2001:780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8222 12337 44880 Signature Algorithm: sha256WithRSAEncryption 21:5b:ac:dc:7f:62:fb:8e:f6:3f:3f:14:40:7f:c7:0f:02:b6: 55:ca:1a:91:0f:18:34:f1:b8:bd:4c:8a:32:76:fc:12:a8:68: 86:14:7d:c1:38:00:8f:a3:26:a8:2f:54:16:0b:15:82:70:e9: 6d:91:fc:72:13:be:0b:eb:30:59:ca:82:86:5e:a8:d3:04:f4: 43:f7:0f:b6:fa:d5:73:11:26:a2:2a:8f:53:0c:93:01:8f:e4: f3:d6:3c:36:4d:19:d8:e0:af:f2:8b:48:f0:7a:ac:89:49:1c: 0b:b4:cc:9b:20:f3:3f:47:13:5e:e8:a3:e3:79:40:1a:8e:f7: 23:0a:7a:ac:2f:9f:85:d3:5a:e4:3b:84:73:df:bd:e5:3a:9b: 89:91:d6:10:96:b5:13:6e:08:21:0d:b5:77:09:6f:f2:6c:92: 61:4a:50:c7:fe:48:1c:aa:22:30:43:48:72:81:6c:2b:61:f5: 56:ee:27:e7:b5:50:8f:d9:33:a2:93:0d:bb:bc:b5:96:24:f0: 80:6d:c2:18:af:69:e8:05:0c:55:e4:ac:af:6d:f7:5b:ff:e1: d3:5c:37:95:eb:1b:9f:01:4d:37:1c:ff:5e:58:46:98:e9:d8: 80:91:4a:d2:3a:fd:60:6a:89:e2:b5:b3:2b:fc:92:6c:13:6a: b8:76:00:c3 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISAZt3WSAFE7ljeZtVZgBeGnIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDRkMWM4NzkwYTkxM2U4MzJjNzMzZGZmNzc4ZGVlNzkxMjk3MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0NT4YV7R0+YGfJ0bxJSu+AuJLoQ vbGrAr2ZtUVvOBDu2CGGg59p+RA/xzDhJZv3upCzqCiI/sg19th6A3otx9kM/Uf3 KoMm5OCEccIEAirFOhJQeK3WdUOEC0mqU3/hntrHw6NmBxG1qHpLRwZo3FfbpA5m mpIERwlYL0FfstlQbnjgucaCYDlBfULQbdfn/EAS7oxsyW5a+DgUTeodRlarULgN ZkmrdBjYqCly8yZ8L1BUKSLanAD5SFi2K3k8WnCEXRePLUoAJz5DjAEoNhC3GesQ 7h+yzwPc45XS0PEwUQwjQL/0PpBr3IAEJtq+wo7mIRwbxxCDw3DsVspCawIDAQAB o4IC+DCCAvQwHQYDVR0OBBYEFH1NHIeQqRPoMscz3/d43ueRKXAKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzFjNjE4 MC05OTUwLTRjZTgtODExZS1mOGQ2NjJiOTZkYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvMWM2MTgw LTk5NTAtNGNlOC04MTFlLWY4ZDY2MmI5NmRhYi8xL2ZVMGNoNUNwRS1neXh6UGY5 M2plNTVFcGNBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG8GCCsGAQUF BwEHAQH/BGAwXjBNBAIAATBHAwQFPoAAAwQEWfqAAwQCuTbwAwQCueMMAwQDvFxw AwQAwGVLAwQAwG1mAwQAwh8CAwQAwjuzAwMA1V8DBAXVm0ADBAXVtwAwDQQCAAIw BwMFAyABB4AwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICIB4CAjAxAgMAr1AwDQYJ KoZIhvcNAQELBQADggEBACFbrNx/YvuO9j8/FEB/xw8CtlXKGpEPGDTxuL1MijJ2 /BKoaIYUfcE4AI+jJqgvVBYLFYJw6W2R/HITvgvrMFnKgoZeqNME9EP3D7b61XMR JqIqj1MMkwGP5PPWPDZNGdjgr/KLSPB6rIlJHAu0zJsg8z9HE17oo+N5QBqO9yMK eqwvn4XTWuQ7hHPfveU6m4mR1hCWtRNuCCENtXcJb/JskmFKUMf+SByqIjBDSHKB bCth9VbuJ+e1UI/ZM6KTDbu8tZYk8IBtwhivaegFDFXkrK9t91v/4dNcN5XrG58B TTcc/15YRpjp2ICRStI6/WBqieK1syv8kmwTarh2AMM= -----END CERTIFICATE-----Generated at Tue Feb 3 08:15:42 2026 by rpki-client