This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer (raw, json) Hash identifier: lWnzZMRSKbGQgBakEfjPEfgjKnxhzdl89WMq9K5KQfM= Subject key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835557C10D9BFF9C68C406A74E4C62D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60275 IP: 2001:67c:2b10::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:7c:10:d9:bf:f9:c6:8c:40:6a:74:e4:c6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dad62180863d722aaa4f0881e44378e3c808372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:09:85:fd:f8:43:14:89:a3:ea:f2:ff:a3: 3f:f1:59:18:ea:cf:1f:5d:2b:c5:88:80:d7:3e:72: ae:43:8f:53:13:81:02:eb:e4:fb:12:14:ff:ce:cc: eb:f9:04:b3:14:29:c7:2b:90:74:cc:f7:80:54:3f: 12:74:6c:4e:ce:16:4d:ba:d0:57:bd:ab:cd:b5:d3: 53:cd:5a:e5:82:79:4c:b9:7f:dc:c5:4a:3b:e4:ac: ce:24:93:e3:f1:41:79:a8:71:42:e3:a3:b7:28:04: e6:bc:d4:c2:9d:db:10:f3:c1:ed:34:31:07:14:0d: d1:88:2c:f1:52:82:a6:f1:bf:cd:0e:04:e3:d8:d8: df:95:d9:98:71:46:31:31:f2:37:6c:a8:04:85:56: d1:02:02:1b:b6:28:57:53:95:33:44:18:c3:1e:15: a5:93:1a:a8:1b:5c:7e:25:a1:e2:92:0d:ed:ca:5a: 1e:32:24:35:5c:8a:6e:5d:a3:3a:b4:ec:42:bb:21: 67:94:b1:eb:86:69:33:f9:94:f9:d2:a7:07:80:ba: b5:b0:1b:bf:58:3b:35:85:5b:b1:5e:3e:7c:22:39: a1:ce:a7:01:ec:ad:7c:c5:26:64:7c:b3:e5:8e:88: b1:30:a4:d2:85:e6:df:67:f4:f6:ef:30:27:d9:15: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2b10::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60275 Signature Algorithm: sha256WithRSAEncryption 82:8e:3d:a1:78:29:8f:db:bf:9c:ff:ed:10:f4:38:31:54:93: e9:c5:3a:7b:2b:23:9d:7f:4c:e6:6b:1d:75:a5:f3:c0:ff:c1: 53:28:be:51:4d:53:72:a5:8b:87:18:a9:88:be:e3:54:49:b4: 08:63:7b:f6:11:66:55:79:c9:fe:a2:77:fa:51:21:30:03:a4: 6c:7a:0f:0f:1a:92:fb:7c:c9:4f:fb:20:c1:3b:e3:f4:71:80: dd:6f:61:d2:77:52:e2:e1:75:43:32:6d:81:c4:00:b0:f7:34: 53:fb:8f:09:99:ef:af:d8:a8:36:58:eb:71:8a:a4:b9:43:cd: f4:e2:f7:08:78:86:96:08:c3:24:0d:c7:86:6b:66:b3:3b:3b: bb:ca:af:be:ff:ed:8e:ff:80:5a:46:db:37:17:a6:2a:eb:e6: 18:f1:8c:51:a2:45:80:af:f0:31:24:68:0b:36:47:a4:69:59: 89:26:0b:55:a3:57:e2:a6:e3:69:ae:bf:09:53:4e:15:d7:5b: fc:0a:d0:b6:b4:b8:8d:80:74:61:8d:26:3c:02:5d:85:56:e1: 10:11:5c:42:96:90:8b:c8:26:ff:0f:d9:65:9c:e3:7f:d1:a9: 8b:12:cf:52:d4:c5:32:a0:dc:13:ad:60:1b:01:d2:0e:f7:3d: 21:5c:57:a8 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NVV8ENm/+caMQGp05MYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGFkNjIxODA4NjNkNzIyYWFhNGYwODgxZTQ0Mzc4ZTNjODA4MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueUJhf34QxSJo+ry/6M/8VkY6s8f XSvFiIDXPnKuQ49TE4EC6+T7EhT/zszr+QSzFCnHK5B0zPeAVD8SdGxOzhZNutBX vavNtdNTzVrlgnlMuX/cxUo75KzOJJPj8UF5qHFC46O3KATmvNTCndsQ88HtNDEH FA3RiCzxUoKm8b/NDgTj2NjfldmYcUYxMfI3bKgEhVbRAgIbtihXU5UzRBjDHhWl kxqoG1x+JaHikg3tyloeMiQ1XIpuXaM6tOxCuyFnlLHrhmkz+ZT50qcHgLq1sBu/ WDs1hVuxXj58IjmhzqcB7K18xSZkfLPljoixMKTShebfZ/T27zAn2RWEHwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFH2tYhgIY9ciqqTwiB5EN448gINyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzgwZWQ5 OC1kYTg0LTRlNGEtYjg2Yy02ODE4NjJhMThmMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvODBlZDk4 LWRhODQtNGU0YS1iODZjLTY4MTg2MmExOGYwYy8xL2ZhMWlHQWhqMXlLcXBQQ0lI a1Ezamp5QWczSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCsQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDrczANBgkqhkiG9w0BAQsFAAOCAQEAgo49oXgpj9u/nP/tEPQ4MVST6cU6 eysjnX9M5msddaXzwP/BUyi+UU1TcqWLhxipiL7jVEm0CGN79hFmVXnJ/qJ3+lEh MAOkbHoPDxqS+3zJT/sgwTvj9HGA3W9h0ndS4uF1QzJtgcQAsPc0U/uPCZnvr9io NljrcYqkuUPN9OL3CHiGlgjDJA3Hhmtmszs7u8qvvv/tjv+AWkbbNxemKuvmGPGM UaJFgK/wMSRoCzZHpGlZiSYLVaNX4qbjaa6/CVNOFddb/ArQtrS4jYB0YY0mPAJd hVbhEBFcQpaQi8gm/w/ZZZzjf9GpixLPUtTFMqDcE61gGwHSDvc9IVxXqA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:14 2026 by rpki-client