This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer File: fsZaHc-CJefxC-IN3eHiFugAtnw.cer (raw, json) Hash identifier: D86ZQwKN8i52nY1PxwV5fDpzCml4etYE4y6YlwTc1sM= Subject key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15CE9B3BBE5BFE3628004836D0710F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.11.128.0/17 IP: 5.24.0.0/14 IP: 31.140.0.0/14 IP: 77.67.128.0/17 IP: 86.108.128.0/17 IP: 141.196.0.0/16 IP: 176.89.0.0 -- 176.91.255.255 IP: 176.227.0.0/17 IP: 176.237.0.0 -- 176.239.255.255 IP: 178.240.0.0/13 IP: 188.56.0.0/14 IP: 213.43.0.0/16 IP: 2a02:4e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:9b:3b:be:5b:fe:36:28:00:48:36:d0:71:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:85:a9:e3:f8:e6:2a:8e:51:aa:b9:a0:c7: 36:5b:50:b4:ca:0d:66:21:0b:5e:e7:b1:90:77:36: 26:64:8a:f1:a8:40:ef:c8:c4:fd:c1:7c:72:66:a0: a1:44:14:45:bb:92:c9:07:b0:b4:65:43:cd:8e:df: 89:46:8e:21:b1:b6:97:42:a0:61:06:cc:bb:3b:d9: ab:b6:1f:d7:6c:e6:f8:8b:15:cf:f1:9a:c5:c3:ca: d7:ea:d7:41:cc:e2:68:b5:ba:de:24:6f:f2:e5:44: c4:cd:59:29:d3:3b:92:2b:24:14:47:93:ff:3a:2f: 55:9e:a2:bd:e5:b3:4b:8a:17:ef:03:72:58:f7:0e: b9:f9:fc:ce:3d:dc:da:bf:0d:b5:06:ec:fb:cf:eb: 74:a7:1e:b6:15:e1:da:56:f5:49:2a:60:a1:4c:c3: c0:6d:d6:8e:54:38:34:4c:0e:1b:e4:ed:b1:d0:71: a8:2b:4d:5a:0a:dd:a1:8c:88:8f:22:e1:6a:ea:2a: 43:bb:aa:9b:16:0d:f5:2d:51:c7:42:dd:62:99:ec: 00:d6:7d:58:5c:91:f9:71:f4:d0:71:c1:46:3f:fc: ec:df:9b:f2:1c:86:cf:17:1d:31:41:87:ce:6b:b8: 97:b2:74:f6:54:9d:8a:51:dc:ed:6e:4c:58:d5:1b: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.128.0/17 5.24.0.0/14 31.140.0.0/14 77.67.128.0/17 86.108.128.0/17 141.196.0.0/16 176.89.0.0-176.91.255.255 176.227.0.0/17 176.237.0.0-176.239.255.255 178.240.0.0/13 188.56.0.0/14 213.43.0.0/16 IPv6: 2a02:4e0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:67:11:96:56:ec:6d:2f:59:0e:62:2d:57:cf:8d:33:33:fa: ff:cf:81:4a:b8:53:8a:c4:7c:88:24:54:b6:3a:97:61:76:b0: a3:9f:47:4a:57:5f:f3:bf:9b:f5:da:7c:9b:86:53:03:c5:34: 4c:2a:af:c3:e6:82:2b:75:5e:d1:16:f9:ee:83:b4:e1:79:e9: da:94:c0:b7:77:d6:98:ef:3b:a2:40:0b:48:8d:70:16:48:37: 86:8a:03:bc:4b:e7:fc:75:be:c4:49:ee:9d:2e:c7:5b:80:30: 61:53:be:aa:6d:35:77:43:ba:33:c1:6a:f2:9d:3c:3a:99:05: 65:02:cf:8d:8b:bc:1b:f9:ad:7a:a4:94:31:5d:8f:3f:a7:24: d1:44:c3:ae:4a:c9:71:fe:49:20:e4:02:96:18:d8:83:8f:11: 77:85:ee:8a:72:e1:30:ce:12:6d:2e:8b:82:e0:98:34:ea:4b: 93:6f:a6:64:49:70:39:ed:59:49:e0:f7:16:48:fc:ab:47:c4: 14:b8:d1:11:2a:69:a0:85:84:4e:cb:4d:a9:2d:bf:47:38:ff: 54:41:18:ce:47:c7:49:33:00:61:89:d2:81:fb:df:e3:9c:53: b6:85:c8:05:b3:2d:70:48:d8:f0:4e:a3:de:d5:9e:7f:78:c3: 37:09:0b:a8 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt/Fc6bO75b/jYoAEg20HEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM2NWExZGNmODIyNWU3ZjEwYmUyMGRkZGUxZTIxNmU4MDBiNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFWFqeP45iqOUaq5oMc2W1C0yg1m IQte57GQdzYmZIrxqEDvyMT9wXxyZqChRBRFu5LJB7C0ZUPNjt+JRo4hsbaXQqBh Bsy7O9mrth/XbOb4ixXP8ZrFw8rX6tdBzOJotbreJG/y5UTEzVkp0zuSKyQUR5P/ Oi9VnqK95bNLihfvA3JY9w65+fzOPdzavw21Buz7z+t0px62FeHaVvVJKmChTMPA bdaOVDg0TA4b5O2x0HGoK01aCt2hjIiPIuFq6ipDu6qbFg31LVHHQt1imewA1n1Y XJH5cfTQccFGP/zs35vyHIbPFx0xQYfOa7iXsnT2VJ2KUdztbkxY1RvVCQIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFH7GWh3PgiXn8QviDd3h4hboALZ8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzhlNzc4 NS05NDUxLTQ2ZmItYjI0NC03ZDliODIzMDUzN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOGU3Nzg1 LTk0NTEtNDZmYi1iMjQ0LTdkOWI4MjMwNTM3ZS8xL2ZzWmFIYy1DSmVmeEMtSU4z ZUhpRnVnQXRudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUF BwEHAQH/BGcwZTBUBAIAATBOAwQHBQuAAwMCBRgDAwIfjAMEB01DgAMEB1ZsgAMD AI3EMAoDAwCwWQMDArBYAwQHsOMAMAoDAwCw7QMDBLDgAwMDsvADAwK8OAMDANUr MA0EAgACMAcDBQAqAgTgMA0GCSqGSIb3DQEBCwUAA4IBAQA8ZxGWVuxtL1kOYi1X z40zM/r/z4FKuFOKxHyIJFS2OpdhdrCjn0dKV1/zv5v12nybhlMDxTRMKq/D5oIr dV7RFvnug7TheenalMC3d9aY7zuiQAtIjXAWSDeGigO8S+f8db7ESe6dLsdbgDBh U76qbTV3Q7ozwWrynTw6mQVlAs+Ni7wb+a16pJQxXY8/pyTRRMOuSslx/kkg5AKW GNiDjxF3he6KcuEwzhJtLouC4Jg06kuTb6ZkSXA57VlJ4PcWSPyrR8QUuNERKmmg hYROy02pLb9HOP9UQRjOR8dJMwBhidKB+9/jnFO2hcgFsy1wSNjwTqPe1Z5/eMM3 CQuo -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:19 2026 by rpki-client