This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer File: fsXxiW6aRDV8nXis831I9HgFINk.cer (raw, json) Hash identifier: wD8CfElvUecjM4x/KJngVz/KjWlyJdoZzq54O0NFdWg= Subject key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33B0ED16722DF8B7D1F971A7BEA94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205728 IP: 185.208.132.0/22 IP: 2a0b:37c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:0e:d1:67:22:df:8b:7d:1f:97:1a:7b:ea:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:d2:19:ec:0b:42:1b:60:9b:08:07:41:6c: 3c:a1:a4:53:99:23:c3:0c:30:36:a2:ce:4c:ae:57: 72:4b:f9:fc:2c:20:b5:cf:bd:ca:55:56:ee:c4:16: 0f:cd:70:ff:95:27:01:17:1e:eb:9d:30:53:54:df: 91:29:f3:be:ee:6d:03:c8:67:b6:58:66:9d:4f:7c: 31:af:3b:2e:ef:fc:13:7f:60:15:c0:80:46:1b:59: 81:bd:3f:7d:08:6a:2d:66:d4:f1:e9:62:a1:0a:4f: 28:d6:2e:a0:24:0e:ef:1a:ff:30:60:8b:00:a8:7a: e1:d8:14:ce:90:32:82:6f:a8:ff:8f:eb:fd:64:32: ee:65:76:a9:2a:f3:96:f3:69:fc:df:1c:1b:b5:ac: 6b:1c:f1:65:ae:f4:83:77:d2:44:22:52:f2:9a:c2: 16:c7:0e:bc:88:28:84:66:3c:7c:7f:9b:18:6f:ae: 61:76:48:1b:9c:dd:2f:0e:2f:ea:dc:ff:51:13:a2: f8:dc:9d:46:66:df:bc:02:54:77:0b:33:32:c7:15: 4d:43:e0:0f:52:7c:31:56:c4:df:7b:43:43:3c:51: b0:92:5b:66:e4:21:a7:54:29:a9:9e:51:6e:15:63: 66:bb:07:7d:37:43:ed:18:fc:68:90:08:0f:3a:2b: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.132.0/22 IPv6: 2a0b:37c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205728 Signature Algorithm: sha256WithRSAEncryption 89:f7:25:a1:e6:55:83:0d:7f:20:ff:5c:58:0f:a8:15:0d:78: e3:7d:e1:b2:1d:f7:42:80:19:52:36:92:60:e3:1d:65:94:89: 1f:1e:3f:1f:31:66:d2:28:3f:68:9e:58:e4:11:de:e2:85:e3: 46:db:67:81:e0:a6:10:22:08:eb:ec:ea:ee:05:52:38:2e:bc: c2:ab:d8:37:00:3c:2f:b2:6e:4b:b3:1d:85:09:93:7f:88:1c: 86:68:c0:2b:ed:c3:cc:2b:6e:9c:27:a5:75:f7:ed:1e:9e:25: 35:8a:b4:ff:c5:89:c8:79:d6:ca:b2:e5:91:01:a3:4d:90:72: 89:bc:6d:96:99:92:11:df:ce:0a:7a:bc:a5:65:19:b4:96:4b: 0d:14:83:d2:36:ae:16:ee:2e:fa:17:9f:4c:6c:0d:80:90:8c: 9a:29:81:a5:16:75:57:07:26:8a:6f:7f:2c:ec:b7:94:f2:c1: 24:b0:1f:fe:4f:ef:1b:87:84:92:89:6d:ae:57:3a:71:dc:3d: 6e:55:6a:6c:f3:25:58:13:1e:33:51:26:c2:3c:9e:4f:84:2d: 53:0d:70:5c:1c:54:5d:7f:18:f5:25:9e:b9:e8:6a:40:45:1e: 00:69:82:99:4d:cb:fa:3d:5e:61:0c:a7:82:e1:b0:d3:50:29: bc:c7:b0:15 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ozsO0Wci34t9H5cae+qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM1ZjE4OTZlOWE0NDM1N2M5ZDc4YWNmMzdkNDhmNDc4MDUyMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM3SGewLQhtgmwgHQWw8oaRTmSPD DDA2os5MrldyS/n8LCC1z73KVVbuxBYPzXD/lScBFx7rnTBTVN+RKfO+7m0DyGe2 WGadT3wxrzsu7/wTf2AVwIBGG1mBvT99CGotZtTx6WKhCk8o1i6gJA7vGv8wYIsA qHrh2BTOkDKCb6j/j+v9ZDLuZXapKvOW82n83xwbtaxrHPFlrvSDd9JEIlLymsIW xw68iCiEZjx8f5sYb65hdkgbnN0vDi/q3P9RE6L43J1GZt+8AlR3CzMyxxVNQ+AP UnwxVsTfe0NDPFGwkltm5CGnVCmpnlFuFWNmuwd9N0PtGPxokAgPOiu1NQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH7F8YlumkQ1fJ14rPN9SPR4BSDZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzE1N2M4 Yi04ZjI3LTQ3ZGQtOTk1ZS1iNDM2ZDc2ZGFkNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMTU3Yzhi LThmMjctNDdkZC05OTVlLWI0MzZkNzZkYWQ2NS8xL2ZzWHhpVzZhUkRWOG5YaXM4 MzFJOUhnRklOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudCEMA0EAgACMAcDBQMqCzfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjoDANBgkqhkiG9w0BAQsFAAOCAQEAifcloeZVgw1/ IP9cWA+oFQ14433hsh33QoAZUjaSYOMdZZSJHx4/HzFm0ig/aJ5Y5BHe4oXjRttn geCmECII6+zq7gVSOC68wqvYNwA8L7JuS7MdhQmTf4gchmjAK+3DzCtunCeldfft Hp4lNYq0/8WJyHnWyrLlkQGjTZByibxtlpmSEd/OCnq8pWUZtJZLDRSD0jauFu4u +hefTGwNgJCMmimBpRZ1Vwcmim9/LOy3lPLBJLAf/k/vG4eEkoltrlc6cdw9blVq bPMlWBMeM1EmwjyeT4QtUw1wXBxUXX8Y9SWeuehqQEUeAGmCmU3L+j1eYQynguGw 01ApvMewFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:49 2026 by rpki-client