This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer (raw, json) Hash identifier: Wf+MuARxXgAynL8gz/HutiLp0ygf7RUe7Y+WRfodhl4= Subject key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFBFF6F87BBA14ACA69181CDCA7FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29389 IP: 195.137.240.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fb:ff:6f:87:bb:a1:4a:ca:69:18:1c:dc:a7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:ae:94:d6:f4:d7:4b:54:a6:a1:0b:33:0b: 25:d0:b3:61:9a:70:32:86:5c:4a:5f:dc:56:64:d2: e8:dd:8a:dc:e6:65:b4:71:d2:b9:fe:ec:dc:81:b5: 1a:b2:52:a4:e3:49:49:fc:57:16:d6:f7:01:a6:c1: 36:10:11:b5:68:3c:29:bf:18:97:5b:23:06:6c:26: 95:06:aa:b8:03:b0:4e:54:ea:41:bb:f6:53:d7:e9: 13:c9:d5:a6:1c:5e:cc:05:d5:d4:b5:3f:d4:1e:5a: f6:c8:43:25:05:c2:7f:19:ee:0e:ae:f2:e1:0c:1f: fe:c6:79:34:8e:2e:b2:e3:65:5b:be:df:dc:58:9a: 47:ab:0d:36:51:47:f9:e0:fd:d5:e8:41:bb:9a:f7: 91:72:94:f6:3f:9d:3b:22:3f:57:83:54:17:56:df: 7d:f8:7c:69:5a:7c:f1:d8:5f:a8:1e:4c:ed:52:94: 2d:19:1c:35:0c:fd:49:72:84:cb:04:dc:33:15:74: 39:89:03:9b:e5:2e:3a:b3:91:69:df:74:d7:f6:c6: aa:e5:cb:5b:31:e6:7e:28:62:8b:a0:af:f5:83:1f: d4:e3:3a:58:a7:94:c3:8b:9b:6a:8a:ff:dc:cc:86: 6f:8c:b5:16:0d:d3:fc:c3:21:42:9a:25:7f:b2:42: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.240.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29389 Signature Algorithm: sha256WithRSAEncryption 68:be:2d:47:7e:c2:ad:04:93:77:61:78:32:e3:56:24:09:20: a8:85:22:b3:34:74:da:fc:0f:9d:a1:05:28:cf:c8:e3:27:2d: 85:4f:e4:a6:23:f8:24:40:c1:69:c0:d0:89:89:48:ec:79:8f: ed:51:57:79:44:7d:ea:0e:4d:8f:a1:cb:02:e5:4e:b0:c6:61: 43:ab:d2:71:16:5f:77:ae:74:fd:d6:bb:3b:5e:e7:db:1e:4c: 01:95:d6:7f:87:66:05:d1:c3:08:55:a3:79:ce:95:5f:da:d5: 17:00:41:92:a7:99:d0:5f:b1:a8:54:19:a5:5c:6b:a0:44:ab: 33:55:ed:04:67:91:96:6c:7a:55:f0:2c:24:a3:b8:44:72:2e: 8e:0b:8e:8d:03:06:0a:02:bf:51:3a:bd:4d:7d:f6:de:f5:5e: 32:29:d5:41:b2:75:bb:4b:11:7a:2e:15:35:b2:cc:cd:ac:47: 70:7b:df:a7:a8:dd:29:f4:b4:33:aa:78:d7:31:e0:2d:b1:96: da:34:f0:6c:46:4b:9d:cd:8a:f0:15:ff:99:9b:9d:a4:b0:aa: 1a:4b:2f:27:59:fe:49:dc:cd:43:75:4f:2b:6e:9f:76:77:57: 44:15:de:19:6e:88:5e:57:41:bf:87:cd:b9:9a:71:93:50:bd: 58:6b:ae:46 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fvv/b4e7oUrKaRgc3Kf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWE2NmY5ZGQ2YjcyYzU2NzE4Yzg1YzVlMThmNjY4NWY1Nzk1Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVeulNb010tUpqELMwsl0LNhmnAy hlxKX9xWZNLo3Yrc5mW0cdK5/uzcgbUaslKk40lJ/FcW1vcBpsE2EBG1aDwpvxiX WyMGbCaVBqq4A7BOVOpBu/ZT1+kTydWmHF7MBdXUtT/UHlr2yEMlBcJ/Ge4OrvLh DB/+xnk0ji6y42Vbvt/cWJpHqw02UUf54P3V6EG7mveRcpT2P507Ij9Xg1QXVt99 +HxpWnzx2F+oHkztUpQtGRw1DP1JcoTLBNwzFXQ5iQOb5S46s5Fp33TX9saq5ctb MeZ+KGKLoK/1gx/U4zpYp5TDi5tqiv/czIZvjLUWDdP8wyFCmiV/skJSjQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFH6mb53WtyxWcYyFxeGPZoX1eVx1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2NiYTU3 YS02MzA2LTRjOWMtOWU4Yy0xZjJmNDY0YmVhMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvY2JhNTdh LTYzMDYtNGM5Yy05ZThjLTFmMmY0NjRiZWEyYS8xL2ZxWnZuZGEzTEZaeGpJWEY0 WTltaGZWNVhIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw4nwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnLNMA0GCSqGSIb3DQEBCwUAA4IBAQBovi1HfsKtBJN3YXgy41YkCSCohSKzNHTa /A+doQUoz8jjJy2FT+SmI/gkQMFpwNCJiUjseY/tUVd5RH3qDk2PocsC5U6wxmFD q9JxFl93rnT91rs7XufbHkwBldZ/h2YF0cMIVaN5zpVf2tUXAEGSp5nQX7GoVBml XGugRKszVe0EZ5GWbHpV8Cwko7hEci6OC46NAwYKAr9ROr1Nffbe9V4yKdVBsnW7 SxF6LhU1sszNrEdwe9+nqN0p9LQzqnjXMeAtsZbaNPBsRkudzYrwFf+Zm52ksKoa Sy8nWf5J3M1DdU8rbp92d1dEFd4ZboheV0G/h825mnGTUL1Ya65G -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:22 2026 by rpki-client