This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer (raw, json) Hash identifier: D0P552m58baR+MsWruNSDs+cq77jrpyu9o03mS5viFI= Subject key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351E837F051CC28B70B274D1B0DACC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24610 AS: 39071 IP: 193.110.124.0/22 IP: 195.66.66.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1e:83:7f:05:1c:c2:8b:70:b2:74:d1:b0:da:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:3e:f8:ed:3e:af:af:e9:24:0d:9d:74:59: 4b:eb:19:ab:1e:ce:67:ab:89:b5:8c:d0:d1:13:0e: 9b:a1:f0:08:f3:52:63:58:d7:c9:4e:95:93:6f:93: 61:eb:b2:2d:e7:5a:84:a0:4c:d1:ba:98:6e:c1:0a: 8a:28:13:76:da:3a:8e:2e:eb:23:86:8c:81:38:97: b5:e9:3e:c3:16:cf:9a:79:67:5b:e0:84:f7:e3:74: 74:7c:10:fd:ec:32:79:90:90:a9:54:42:82:de:18: 61:ef:71:45:5f:8a:46:97:8a:4a:d8:93:88:80:18: e8:da:38:2c:4e:42:2d:c3:68:2b:20:61:b3:94:7a: eb:bd:fc:87:8a:88:f6:62:8b:4c:a9:e7:c7:9a:d8: e8:05:51:1a:1d:e0:84:ea:ba:4b:08:2e:df:da:c2: 83:16:25:e2:75:92:9f:ce:62:c0:fb:03:97:ba:ee: e0:d4:a8:3e:db:b1:83:c7:e8:9e:47:6c:17:96:be: 1a:d8:65:03:1d:a6:06:e3:b4:af:9f:06:b4:e6:c4: 4e:15:89:01:91:5b:78:dc:e0:8f:a1:cc:ad:30:41: e7:71:f2:c2:53:d4:f1:fa:42:e5:81:d0:6c:03:f6: 1d:4c:4e:93:98:8d:d8:96:0c:3b:c6:74:e5:f5:67: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.124.0/22 195.66.66.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24610 39071 Signature Algorithm: sha256WithRSAEncryption 55:f1:78:39:d6:f9:b0:af:a3:d7:f3:e7:6b:4c:c2:ea:3e:52: ef:d7:cf:2e:c7:cc:4e:65:84:bb:ab:50:b6:a1:84:96:c0:ba: 6c:d2:a9:4c:ed:10:62:36:02:f7:0d:ee:d9:93:72:5a:99:89: 9f:d2:7a:87:c2:d0:4f:92:01:af:73:65:27:fd:a7:8f:82:0c: ca:5c:c5:c4:10:54:8d:46:71:94:e7:cd:65:f1:1b:62:85:a1: c2:2a:5a:fa:e1:ed:d2:81:8f:69:58:b0:c1:cc:d9:ba:83:ff: 8f:da:18:db:4b:5e:8d:11:fe:52:63:0d:ba:d8:f6:ca:ff:c0: 8d:b9:9a:ff:14:1a:03:ae:25:4b:50:05:74:8a:ce:6f:7b:0b: 5b:59:d2:6b:fb:4c:d2:0f:71:93:76:ac:26:2e:c9:60:55:c4: f1:51:e2:b3:92:83:94:e4:cd:f4:5b:5a:c1:89:01:68:e4:93: fc:cc:b7:ff:4f:dc:0c:0b:00:3e:de:53:f6:54:7a:16:e6:ab: 8d:d5:09:78:4f:98:44:3b:ce:3d:0e:db:1a:1a:3c:e8:78:4c: 77:c1:26:ee:d8:73:0e:98:e9:57:3a:8c:3a:7a:d7:3e:99:da: 26:2a:10:a8:21:48:45:23:a8:da:b9:7c:74:51:b4:96:bf:97: 4a:3c:3d:48 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt4NR6DfwUcwotwsnTRsNrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM1ZDQ4MjhkYzM0MTk5ZWY3MTdjYzAzYTQ4YTAwNzRjMTQ0M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjQ++O0+r6/pJA2ddFlL6xmrHs5n q4m1jNDREw6bofAI81JjWNfJTpWTb5Nh67It51qEoEzRuphuwQqKKBN22jqOLusj hoyBOJe16T7DFs+aeWdb4IT343R0fBD97DJ5kJCpVEKC3hhh73FFX4pGl4pK2JOI gBjo2jgsTkItw2grIGGzlHrrvfyHioj2YotMqefHmtjoBVEaHeCE6rpLCC7f2sKD FiXidZKfzmLA+wOXuu7g1Kg+27GDx+ieR2wXlr4a2GUDHaYG47Svnwa05sROFYkB kVt43OCPocytMEHncfLCU9Tx+kLlgdBsA/YdTE6TmI3Ylgw7xnTl9WfAWwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFH7F1IKNw0GZ73F8wDpIoAdMFEO4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2EwMGI4 OS1iMzk4LTQwZDktYmRiNS00MjdiMmQ0ZjljODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTAwYjg5 LWIzOTgtNDBkOS1iZGI1LTQyN2IyZDRmOWM4Mi8xL2ZzWFVnbzNEUVpudmNYekFP a2lnQjB3VVE3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwW58AwQAw0JCMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAmAiAgMAmJ8wDQYJKoZIhvcNAQELBQADggEBAFXxeDnW+bCvo9fz52tM wuo+Uu/Xzy7HzE5lhLurULahhJbAumzSqUztEGI2AvcN7tmTclqZiZ/SeofC0E+S Aa9zZSf9p4+CDMpcxcQQVI1GcZTnzWXxG2KFocIqWvrh7dKBj2lYsMHM2bqD/4/a GNtLXo0R/lJjDbrY9sr/wI25mv8UGgOuJUtQBXSKzm97C1tZ0mv7TNIPcZN2rCYu yWBVxPFR4rOSg5TkzfRbWsGJAWjkk/zMt/9P3AwLAD7eU/ZUehbmq43VCXhPmEQ7 zj0O2xoaPOh4THfBJu7Ycw6Y6Vc6jDp61z6Z2iYqEKghSEUjqNq5fHRRtJa/l0o8 PUg= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:55 2026 by rpki-client