This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer File: fXyyl4u1TrVXyuP_s15GrE1cIr8.cer (raw, json) Hash identifier: UJQsfBMQqfDWA52BNLHLjJlzDJkJl1Ep+Buz7BPF9pU= Subject key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B362979A91A0356E9775346CA97264C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.54.96.0/22 IP: 2a04:d1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:29:79:a9:1a:03:56:e9:77:53:46:ca:97:26:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:d8:58:48:6f:53:d3:17:91:6b:19:04:4e: d0:3c:ae:57:6c:b0:34:b0:b5:b8:5f:7d:5f:06:c9: b9:b6:08:06:f6:79:17:e8:22:92:a2:51:35:9a:92: 63:05:7a:0c:6e:94:73:c2:f6:78:ae:42:00:13:32: e9:8e:a5:d9:07:2b:fa:2f:26:d7:9d:3c:18:fd:ef: e6:12:61:10:5b:35:b8:02:32:52:01:e0:0f:5a:68: e3:05:ad:2b:8a:f7:57:69:e4:61:83:5b:b6:97:e0: d2:ad:73:4d:2b:b5:ea:23:ee:c1:78:d1:ec:a2:5b: aa:43:a3:55:64:c5:18:70:f7:70:12:59:99:a3:a8: a2:68:a3:ce:14:d7:de:34:d8:93:bb:49:3c:bf:4e: 41:ed:e0:ab:39:9d:cf:fe:0c:cf:4c:f2:a3:74:72: f7:37:ec:26:33:b5:0b:bf:6d:e1:64:17:7b:88:b8: c5:e2:3b:1a:4c:4b:f6:c6:77:50:6a:32:3a:b2:a5: 64:b9:3a:a8:4b:cb:26:fd:76:ae:12:12:36:b0:d6: 63:3a:52:18:c8:f4:43:0f:a8:ef:45:b8:70:b7:03: 84:4e:0d:7a:47:00:d1:dc:74:c9:b4:a5:60:99:0b: a1:15:3a:36:63:b7:96:f7:a0:65:94:c9:12:0a:33: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.96.0/22 IPv6: 2a04:d1c0::/29 Signature Algorithm: sha256WithRSAEncryption 67:bf:e5:60:c4:b9:30:8c:43:a2:ef:11:01:8a:d8:87:1f:48: 83:fa:ff:36:9f:c1:80:ae:7b:3b:c2:1e:3d:92:de:05:8e:48: e9:b8:1e:f0:77:fe:00:df:2a:e9:75:09:ea:b8:36:9d:18:f6: 77:4f:d5:aa:44:a5:7b:95:d1:46:47:a2:32:2c:32:4e:99:6e: 37:07:c8:c4:cf:49:96:35:5a:17:7d:dd:b2:59:c9:31:b2:b6: 09:59:16:cd:b4:86:5f:a7:7e:4e:31:ca:42:51:6d:31:b5:3d: 0e:04:0b:fe:70:bf:a0:65:d2:b7:48:ef:e1:a9:fd:34:a1:f0: 08:00:2b:cd:dd:b5:54:9d:9c:d5:a5:6e:26:ff:21:d5:11:25: 7c:59:1b:2e:7d:af:16:2a:87:db:0a:73:33:b9:ea:ae:01:4e: 20:41:aa:51:e5:37:2b:c3:1e:37:09:e2:11:f0:6a:71:2c:e5: a8:cb:46:c6:c6:0d:9d:d6:2b:e8:37:33:6c:1d:68:0f:c8:ad: 84:e2:46:50:83:c2:da:37:ee:14:5d:44:b5:36:82:29:9b:a1: 96:7b:22:15:0c:c4:8c:b7:b7:c8:42:12:38:be:da:95:46:71: 49:f4:f0:5b:df:61:ad:f3:42:dc:c7:bb:a0:fe:8d:bc:2c:7b: 55:f3:85:25 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nil5qRoDVul3U0bKlyZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdjYjI5NzhiYjU0ZWI1NTdjYWUzZmZiMzVlNDZhYzRkNWMyMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsHYWEhvU9MXkWsZBE7QPK5XbLA0 sLW4X31fBsm5tggG9nkX6CKSolE1mpJjBXoMbpRzwvZ4rkIAEzLpjqXZByv6LybX nTwY/e/mEmEQWzW4AjJSAeAPWmjjBa0rivdXaeRhg1u2l+DSrXNNK7XqI+7BeNHs oluqQ6NVZMUYcPdwElmZo6iiaKPOFNfeNNiTu0k8v05B7eCrOZ3P/gzPTPKjdHL3 N+wmM7ULv23hZBd7iLjF4jsaTEv2xndQajI6sqVkuTqoS8sm/XauEhI2sNZjOlIY yPRDD6jvRbhwtwOETg16RwDR3HTJtKVgmQuhFTo2Y7eW96BllMkSCjM0kQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFH18speLtU61V8rj/7NeRqxNXCK/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzZjZWEz Ny1kMjcwLTRkMWMtYTkzNy0yNGMzZDllMjU0MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNmNlYTM3 LWQyNzAtNGQxYy1hOTM3LTI0YzNkOWUyNTQwMS8xL2ZYeXlsNHUxVHJWWHl1UF9z MTVHckUxY0lyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTZgMA0EAgACMAcDBQMqBNHAMA0GCSqGSIb3 DQEBCwUAA4IBAQBnv+VgxLkwjEOi7xEBitiHH0iD+v82n8GArns7wh49kt4Fjkjp uB7wd/4A3yrpdQnquDadGPZ3T9WqRKV7ldFGR6IyLDJOmW43B8jEz0mWNVoXfd2y WckxsrYJWRbNtIZfp35OMcpCUW0xtT0OBAv+cL+gZdK3SO/hqf00ofAIACvN3bVU nZzVpW4m/yHVESV8WRsufa8WKofbCnMzuequAU4gQapR5Tcrwx43CeIR8GpxLOWo y0bGxg2d1ivoNzNsHWgPyK2E4kZQg8LaN+4UXUS1NoIpm6GWeyIVDMSMt7fIQhI4 vtqVRnFJ9PBb32Gt80Lcx7ug/o28LHtV84Ul -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:27 2026 by rpki-client