This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer File: fp2uVBo7fD77bdZkadCH6F9179o.cer (raw, json) Hash identifier: Qqx/sUN8Icf9yld1FGSjmFA02AfG1vERkUQFkavDsT8= Subject key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB3107903ED2CE557E5E433D5A2809 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215011 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:31:07:90:3e:d2:ce:55:7e:5e:43:3d:5a:28:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:05:c6:23:4d:6b:cc:0b:8b:81:4c:41:29: 0c:3d:c5:a8:1e:47:5b:c5:db:df:10:6d:5c:ed:6c: fc:81:09:bc:be:78:ee:d5:b6:7f:be:e1:f4:39:88: c1:ee:d5:94:d7:8c:d7:9d:66:d1:71:13:2b:78:4b: 57:2c:da:cd:bb:74:5e:b7:f2:c7:08:83:88:6a:74: 10:eb:57:8c:c8:f1:53:94:c4:a0:32:61:13:57:03: f3:ff:96:95:3b:a0:cb:1a:ab:8c:e6:e7:04:db:35: d7:ac:5e:c5:7e:1d:db:4a:af:3a:d6:10:0d:96:62: b8:6d:49:72:7b:d8:99:28:f1:66:47:5b:3b:cc:e7: 0d:2a:cf:fc:7b:82:2f:6a:75:02:99:ed:7d:d0:b4: 58:3f:75:59:79:d5:b0:81:c3:df:7a:2e:45:d3:f9: 25:02:f9:d0:d0:22:b2:07:b1:87:95:7a:d5:39:98: f1:1a:aa:a7:50:bb:4d:69:1c:48:d2:f4:5d:53:0c: 6a:16:32:2c:43:bc:6c:6b:9b:0c:3c:c2:b2:8e:20: cc:21:ad:c9:68:27:d1:08:00:de:0f:c4:54:f8:a4: 1e:b0:84:fa:d3:de:83:90:68:06:df:30:8d:43:4a: b0:49:74:7c:0f:51:0a:03:d5:1e:11:2f:5d:06:4e: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215011 Signature Algorithm: sha256WithRSAEncryption 06:12:ff:ef:8b:4f:d8:27:64:95:18:2c:0a:07:65:c0:f6:4e: 2b:96:12:1a:44:f4:6c:e1:17:91:67:f0:4b:94:de:1a:15:85: f4:a4:95:bc:83:5d:cd:62:64:42:4f:6f:86:c8:5a:75:f3:68: 65:e9:b9:85:3e:bb:c7:b8:74:ed:67:f3:2e:c1:40:cf:cb:eb: 1c:6f:02:33:ff:5b:8e:b7:59:6b:43:87:20:03:56:96:f5:42: 27:48:e1:c1:04:4d:f3:a7:0d:04:75:1e:e8:01:67:23:01:93: 5f:94:b9:b5:03:87:7e:f4:8a:a8:0c:44:19:7d:1c:02:c1:ef: 4e:df:50:f0:3e:f7:c1:35:98:27:d6:4b:fc:f8:45:ac:f4:c9: ee:21:84:62:48:61:ca:f9:b2:a3:2d:5e:e2:3f:32:15:30:cf: 51:fc:f1:eb:3f:23:a3:5f:dd:64:cc:13:20:59:9c:63:0c:94: f2:83:08:e9:3f:6f:83:02:71:96:4c:e9:2c:49:68:b8:6f:82: cb:a1:3a:1a:7f:7c:ba:0f:cb:f8:8e:81:34:bc:d4:f9:11:e5: 0d:d5:88:05:fa:b5:d0:cb:03:e8:2b:66:be:24:ea:79:da:fe: 42:f1:61:5a:ee:9e:39:22:40:b8:c4:5f:82:91:f4:2c:87:0f: e1:89:6c:76 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yzEHkD7SzlV+XkM9WigJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTlkYWU1NDFhM2I3YzNlZmI2ZGQ2NjQ2OWQwODdlODVmNzVlZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQEFxiNNa8wLi4FMQSkMPcWoHkdb xdvfEG1c7Wz8gQm8vnju1bZ/vuH0OYjB7tWU14zXnWbRcRMreEtXLNrNu3Ret/LH CIOIanQQ61eMyPFTlMSgMmETVwPz/5aVO6DLGquM5ucE2zXXrF7Ffh3bSq861hAN lmK4bUlye9iZKPFmR1s7zOcNKs/8e4IvanUCme190LRYP3VZedWwgcPfei5F0/kl AvnQ0CKyB7GHlXrVOZjxGqqnULtNaRxI0vRdUwxqFjIsQ7xsa5sMPMKyjiDMIa3J aCfRCADeD8RU+KQesIT6096DkGgG3zCNQ0qwSXR8D1EKA9UeES9dBk7bZwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH6drlQaO3w++23WZGnQh+hfde/aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Q2YTdj OC1mNWRjLTQyZDMtYjkwOC03ODAxNzE3NzllNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDZhN2M4 LWY1ZGMtNDJkMy1iOTA4LTc4MDE3MTc3OWU1MC8xL2ZwMnVWQm83ZkQ3N2JkWmth ZENINkY5MTc5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNH4zANBgkqhkiG9w0BAQsFAAOCAQEABhL/74tP2Cdk lRgsCgdlwPZOK5YSGkT0bOEXkWfwS5TeGhWF9KSVvINdzWJkQk9vhshadfNoZem5 hT67x7h07WfzLsFAz8vrHG8CM/9bjrdZa0OHIANWlvVCJ0jhwQRN86cNBHUe6AFn IwGTX5S5tQOHfvSKqAxEGX0cAsHvTt9Q8D73wTWYJ9ZL/PhFrPTJ7iGEYkhhyvmy oy1e4j8yFTDPUfzx6z8jo1/dZMwTIFmcYwyU8oMI6T9vgwJxlkzpLElouG+Cy6E6 Gn98ug/L+I6BNLzU+RHlDdWIBfq10MsD6CtmviTqedr+QvFhWu6eOSJAuMRfgpH0 LIcP4Ylsdg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:22 2026 by rpki-client