This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer File: f_yCWF32m3yUsWphky_8i24zUVY.cer (raw, json) Hash identifier: W+q4XP4ZW5tJKB6dkxP1nyZn+CfU7X7InIeAgeIP1os= Subject key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596167FE260F2C54233F3EE56A3E3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212587 IP: 194.31.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:67:fe:26:0f:2c:54:23:3f:3e:e5:6a:3e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:ee:c0:f6:c2:db:1e:9f:c7:5a:18:2d:8e: 98:d6:05:c2:d2:61:06:05:3c:2c:bf:ba:8b:c7:8a: 49:d0:ac:7b:3d:a0:0f:44:c6:85:fc:99:d4:90:36: 64:30:f4:36:3e:e1:85:de:44:3d:7a:d3:7a:ed:60: 0f:84:b5:0f:91:ae:0a:bd:05:52:f5:7b:74:99:73: da:49:37:de:94:3e:37:dd:4f:71:b0:71:3c:9b:86: ad:0b:78:4e:d2:77:8e:64:37:28:67:6b:8d:a2:6d: e1:5d:b6:58:2e:de:64:c9:32:5d:e5:16:95:05:55: e6:cc:ba:20:3d:84:8a:1c:d5:a6:36:b9:85:9f:09: f8:39:0f:59:da:d3:43:d0:3f:f8:bd:5b:67:1a:95: f7:4a:77:6c:a5:b6:7b:6b:9f:85:b5:f2:dd:6f:63: ac:66:d0:54:fb:09:93:ea:d0:be:57:fb:7d:90:12: 27:bd:d3:4d:65:7f:e6:c3:cf:35:af:54:a8:15:74: 25:cf:f4:b1:73:c6:77:5c:f3:2f:c4:5b:d1:f2:ba: 7b:9f:90:a0:15:da:1f:32:bf:f6:b9:57:5c:35:25: 55:0b:3a:22:a2:9f:3e:fd:a7:89:5a:4e:de:7c:19: 84:cf:85:0b:df:e0:5a:e6:9a:0a:a0:b5:33:d4:0d: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212587 Signature Algorithm: sha256WithRSAEncryption 4c:26:7a:85:70:22:7a:06:b4:55:79:ff:a8:19:12:38:1c:99: 9b:c9:78:71:6e:67:9d:4d:49:cd:e4:81:14:9f:a8:8a:48:f7: 57:43:79:50:7e:68:03:fd:0b:8c:ec:a0:fd:47:e5:96:01:4f: 1e:c3:b3:c1:ce:91:03:58:df:79:80:9d:cb:0b:1c:d6:4e:02: 55:8c:89:74:d6:c4:39:8d:0e:56:81:a6:22:bb:97:d0:c5:27: 00:6c:cc:00:2b:5a:4a:e0:50:5a:d9:08:82:9b:59:f5:c3:99: f5:f8:6f:b6:a7:a3:b0:0f:62:ed:a9:74:94:90:95:ba:38:0a: fe:83:30:3f:ad:26:6f:34:10:40:64:9f:5b:8b:04:39:05:6b: c9:75:6b:16:24:b7:57:b9:64:62:4d:a3:5d:14:38:b5:ae:5a: 3c:88:08:04:1a:06:81:33:f5:1d:bf:06:57:a6:bf:37:2a:ad: ed:e7:6e:e3:ff:5d:2a:e2:cc:cf:2e:35:d4:56:01:69:98:8b: bb:62:9b:15:89:27:7f:63:3e:37:ab:df:a0:4f:ba:3b:96:6a: 81:8e:10:ab:82:3b:ca:15:f4:31:5e:7f:1d:1c:f0:25:ce:68: c7:6e:49:26:12:44:4a:80:de:60:05:44:d7:04:40:5f:58:1b: e5:36:95:1f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WWFn/iYPLFQjPz7laj47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmZjODI1ODVkZjY5YjdjOTRiMTZhNjE5MzJmZmM4YjZlMzM1MTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXuwPbC2x6fx1oYLY6Y1gXC0mEG BTwsv7qLx4pJ0Kx7PaAPRMaF/JnUkDZkMPQ2PuGF3kQ9etN67WAPhLUPka4KvQVS 9Xt0mXPaSTfelD433U9xsHE8m4atC3hO0neOZDcoZ2uNom3hXbZYLt5kyTJd5RaV BVXmzLogPYSKHNWmNrmFnwn4OQ9Z2tND0D/4vVtnGpX3SndspbZ7a5+FtfLdb2Os ZtBU+wmT6tC+V/t9kBInvdNNZX/mw881r1SoFXQlz/Sxc8Z3XPMvxFvR8rp7n5Cg FdofMr/2uVdcNSVVCzoiop8+/aeJWk7efBmEz4UL3+Ba5poKoLUz1A1YKwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFH/8glhd9pt8lLFqYZMv/ItuM1FWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzUzMWQy Yi1lMTcwLTQ5YTUtODQwNC05MmY3M2Y1NmZjNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNTMxZDJi LWUxNzAtNDlhNS04NDA0LTkyZjczZjU2ZmM2Mi8xL2ZfeUNXRjMybTN5VXNXcGhr eV84aTI0elVWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwh8QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+azANBgkqhkiG9w0BAQsFAAOCAQEATCZ6hXAiega0VXn/qBkSOByZm8l4cW5n nU1JzeSBFJ+oikj3V0N5UH5oA/0LjOyg/UfllgFPHsOzwc6RA1jfeYCdywsc1k4C VYyJdNbEOY0OVoGmIruX0MUnAGzMACtaSuBQWtkIgptZ9cOZ9fhvtqejsA9i7al0 lJCVujgK/oMwP60mbzQQQGSfW4sEOQVryXVrFiS3V7lkYk2jXRQ4ta5aPIgIBBoG gTP1Hb8GV6a/Nyqt7edu4/9dKuLMzy411FYBaZiLu2KbFYknf2M+N6vfoE+6O5Zq gY4Qq4I7yhX0MV5/HRzwJc5ox25JJhJESoDeYAVE1wRAX1gb5TaVHw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:15 2026 by rpki-client