This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer (raw, json) Hash identifier: RoifryuoJp56/aNg6ZRBglrLgwXkjEMw4QOLGmEdzLk= Subject key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1547E3A541513F95C3D2F1B90A6E96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209639 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:47:e3:a5:41:51:3f:95:c3:d2:f1:b9:0a:6e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:a6:71:c4:1f:bd:6c:37:6d:7c:98:24:27: c9:1a:c0:6a:fe:6e:f0:b4:a2:dc:09:cb:d4:9a:1d: 5d:ea:fb:cf:cf:f5:2a:fa:95:9c:f9:2d:09:f3:c8: 46:ea:44:2a:a6:48:df:6d:a5:24:83:4c:3c:39:eb: 80:d6:90:1f:55:1c:7d:39:da:f7:76:a2:6c:ad:76: 0a:ba:58:04:45:e9:28:2e:8f:dc:58:e8:cc:bd:21: 9f:62:6d:d7:2b:b4:b6:83:40:e5:77:b6:9d:44:ba: 9c:16:dc:6f:e5:ea:92:c5:47:6b:ed:b1:db:22:04: cc:29:7a:11:45:eb:b9:e2:7d:28:d7:f5:02:f9:24: 04:8b:92:d9:e1:11:68:95:4b:a1:35:2a:56:0f:5d: cb:c0:f6:75:ac:6b:7e:25:81:cc:64:07:37:2b:06: 4f:80:d0:79:7c:7f:39:01:89:ca:1b:67:47:8c:a0: f8:f0:f9:73:fa:6c:95:0d:db:02:c9:de:c4:6b:f6: e5:4e:5c:18:f4:61:87:44:fe:60:d7:91:03:b4:1d: 40:63:5a:5f:da:5c:7f:d0:c2:2c:9c:73:80:25:c5: 12:2a:ea:b0:18:6a:85:5b:9d:c4:cf:2c:1f:b0:b0: 37:93:9b:03:4d:ed:f5:f7:22:d4:86:1d:78:ab:02: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209639 Signature Algorithm: sha256WithRSAEncryption a7:6f:5a:a3:24:b5:1f:04:01:aa:69:cc:ab:ad:23:4c:aa:38: c8:25:9f:3e:3d:00:1c:a6:a3:b2:f6:d2:73:56:fb:95:63:2f: a4:82:2a:17:56:8a:15:99:27:39:fd:ad:f5:dd:10:48:91:b8: 76:a9:ce:81:5b:b0:4f:d1:df:b4:1c:b1:04:fa:ab:77:8f:89: 61:d6:92:3a:61:ed:03:c7:a3:9d:7c:54:29:fc:15:92:d9:b1: f4:86:ce:78:6a:87:a5:6f:68:0f:68:f4:a7:61:02:0a:a9:a6: 14:10:ae:17:74:07:6d:a1:2d:7e:32:11:a1:99:eb:fb:6e:f9: ed:34:6c:c4:e0:e8:1c:e0:a4:a0:5d:ba:68:20:b8:00:08:6e: b1:b5:70:93:a7:38:2c:24:be:61:c7:ba:c1:fb:fa:50:28:e5: fc:39:fa:13:da:81:33:52:ae:2e:fb:2e:0b:b5:56:da:eb:f1: e0:94:c0:66:3e:50:c9:64:51:7c:2a:c1:1f:82:75:af:66:4c: cf:eb:b5:18:bf:12:34:0b:6a:72:51:76:c8:39:30:2c:4e:49: d9:01:fc:31:9a:da:16:4c:02:e2:4e:4e:37:32:fa:9c:8c:da: 24:75:5e:f8:c2:9a:63:5e:68:0a:35:d8:72:f6:ee:45:ad:0b: bd:10:c6:b9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FUfjpUFRP5XD0vG5Cm6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGM1NWRkZGE0MTQyNDAyNjlmMDViZjhlOGNkNzA4MTM1ZGQ3ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntKmccQfvWw3bXyYJCfJGsBq/m7w tKLcCcvUmh1d6vvPz/Uq+pWc+S0J88hG6kQqpkjfbaUkg0w8OeuA1pAfVRx9Odr3 dqJsrXYKulgERekoLo/cWOjMvSGfYm3XK7S2g0Dld7adRLqcFtxv5eqSxUdr7bHb IgTMKXoRReu54n0o1/UC+SQEi5LZ4RFolUuhNSpWD13LwPZ1rGt+JYHMZAc3KwZP gNB5fH85AYnKG2dHjKD48Plz+myVDdsCyd7Ea/blTlwY9GGHRP5g15EDtB1AY1pf 2lx/0MIsnHOAJcUSKuqwGGqFW53EzywfsLA3k5sDTe319yLUhh14qwIkrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH3FXd2kFCQCafBb+OjNcIE13X3lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzc4MGYy OS1mNjE0LTRmMDItOTFlMC01ZDE0M2U1NmFmNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNzgwZjI5 LWY2MTQtNGYwMi05MWUwLTVkMTQzZTU2YWY2OC8xL2ZjVmQzYVFVSkFKcDhGdjQ2 TTF3Z1RYZGZlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy5zANBgkqhkiG9w0BAQsFAAOCAQEAp29aoyS1HwQB qmnMq60jTKo4yCWfPj0AHKajsvbSc1b7lWMvpIIqF1aKFZknOf2t9d0QSJG4dqnO gVuwT9HftByxBPqrd4+JYdaSOmHtA8ejnXxUKfwVktmx9IbOeGqHpW9oD2j0p2EC CqmmFBCuF3QHbaEtfjIRoZnr+2757TRsxODoHOCkoF26aCC4AAhusbVwk6c4LCS+ Yce6wfv6UCjl/Dn6E9qBM1KuLvsuC7VW2uvx4JTAZj5QyWRRfCrBH4J1r2ZMz+u1 GL8SNAtqclF2yDkwLE5J2QH8MZraFkwC4k5ONzL6nIzaJHVe+MKaY15oCjXYcvbu Ra0LvRDGuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:25 2026 by rpki-client