This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer File: rF6twAMoUCNv7nVutY-_BeExa14.cer (raw, json) Hash identifier: YpXKq8xmxKiKzSrpVXvhdRDXfU6YjzYZmi4QgffzGEQ= Subject key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD842AD31A6CE2B493421A89F5959 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199938 IP: 185.41.104.0/22 IP: 194.39.187.0/24 IP: 194.39.215.0/24 IP: 194.40.244.0/24 IP: 194.41.1.0/24 IP: 2a01:55e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d8:42:ad:31:a6:ce:2b:49:34:21:a8:9f:59:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:6b:d9:a5:2e:d7:13:e4:31:31:0d:8d:54: 65:63:a9:00:67:fb:00:b6:c4:38:39:ff:d6:94:fa: c4:26:03:4c:ae:ad:7e:40:7f:1e:d1:0d:28:3f:cc: 2a:71:66:9c:8d:e7:b6:78:98:6d:80:bb:78:a0:41: 6a:53:4b:8b:d2:ab:d7:14:20:d4:83:98:51:47:ca: f8:8d:e6:be:8e:bb:1d:43:bc:06:1e:b5:7d:a8:2e: 2d:c3:ad:d1:f5:ae:f9:80:ae:8e:84:ad:80:8f:1d: 70:60:a4:34:73:bd:46:03:e0:0a:03:c2:7b:bb:89: b7:4d:30:8b:3d:99:80:9f:ce:5d:03:dc:25:e0:a4: ba:f6:4f:8e:6e:03:ac:dc:dc:e4:5a:e0:b7:de:f9: 7e:72:af:97:b4:64:84:5d:a5:b9:09:c0:43:b5:73: 90:7c:f4:cd:f3:5b:3b:be:c8:bf:0f:a6:59:88:23: de:bb:b9:a7:54:81:4b:b3:f4:97:22:0c:ad:f3:b1: 31:3f:02:f8:36:53:dd:cd:20:ea:09:9b:83:44:74: 41:1c:63:6a:bb:67:88:bd:3c:0f:fc:dc:96:ad:73: 5b:9f:b6:96:d9:d8:ea:59:e0:b5:05:05:21:6c:9d: f4:d9:58:c1:2f:5d:e9:e0:29:d4:8c:02:1c:7f:38: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.104.0/22 194.39.187.0/24 194.39.215.0/24 194.40.244.0/24 194.41.1.0/24 IPv6: 2a01:55e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199938 Signature Algorithm: sha256WithRSAEncryption 5f:51:a9:d7:79:d8:bd:a1:b1:ba:c3:7a:b8:67:1c:6a:11:9c: 66:81:4b:51:92:a2:69:9f:a9:b7:54:52:ac:16:d9:6e:41:63: 5e:fa:4d:0f:2b:f9:cc:eb:6a:ba:a7:52:3c:bd:94:10:73:77: 2a:f5:a1:0d:07:41:30:bd:01:ab:1f:4b:11:8d:04:8f:ce:a4: 4e:6a:e5:ee:fa:53:23:4e:53:2c:d6:df:3b:34:e1:99:fc:1c: ef:38:82:51:79:a9:e6:90:46:97:5f:8c:61:d6:77:85:10:9a: b5:5f:20:5a:33:28:4f:af:14:75:b1:60:0f:ff:9d:f5:a8:c1: 39:d7:c3:65:44:9f:fe:db:ca:0d:cc:4a:ae:24:3d:5d:a4:92: fd:39:8a:af:0c:fb:bd:71:44:87:68:3a:0c:14:03:93:d6:50: 5f:ff:dc:c0:c2:a6:a0:30:74:65:7c:a1:76:a4:c4:c5:c7:96: 4e:04:9f:98:e6:cd:5d:fe:fd:54:29:09:12:5e:be:d4:51:00: ec:f3:9f:a1:d5:cc:e0:bc:dc:a3:ab:c7:92:2c:c4:0a:68:a0: c7:39:2c:4a:40:d3:a3:77:9a:a0:40:98:d3:17:52:d8:60:0e: f6:f6:67:39:4a:6d:84:55:ab:82:37:86:1f:ed:c7:e6:7e:8a: 1d:9e:4c:41 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9ythCrTGmzitJNCGon1lZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVlYWRjMDAzMjg1MDIzNmZlZTc1NmViNThmYmYwNWUxMzE2YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JBr2aUu1xPkMTENjVRlY6kAZ/sA tsQ4Of/WlPrEJgNMrq1+QH8e0Q0oP8wqcWacjee2eJhtgLt4oEFqU0uL0qvXFCDU g5hRR8r4jea+jrsdQ7wGHrV9qC4tw63R9a75gK6OhK2Ajx1wYKQ0c71GA+AKA8J7 u4m3TTCLPZmAn85dA9wl4KS69k+ObgOs3NzkWuC33vl+cq+XtGSEXaW5CcBDtXOQ fPTN81s7vsi/D6ZZiCPeu7mnVIFLs/SXIgyt87ExPwL4NlPdzSDqCZuDRHRBHGNq u2eIvTwP/NyWrXNbn7aW2djqWeC1BQUhbJ302VjBL13p4CnUjAIcfzhniQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFKxercADKFAjb+51brWPvwXhMWteMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzUyOTc1 Zi1mZWIyLTQzM2ItYjJkYy1jMjM4Y2U0ODE3ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNTI5NzVm LWZlYjItNDMzYi1iMmRjLWMyMzhjZTQ4MTdkYi8xL3JGNnR3QU1vVUNOdjduVnV0 WS1fQmVFeGExNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCuSloAwQAwie7AwQAwifXAwQAwij0AwQAwikB MA0EAgACMAcDBQMqAVXgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNAjANBgkq hkiG9w0BAQsFAAOCAQEAX1Gp13nYvaGxusN6uGccahGcZoFLUZKiaZ+pt1RSrBbZ bkFjXvpNDyv5zOtquqdSPL2UEHN3KvWhDQdBML0Bqx9LEY0Ej86kTmrl7vpTI05T LNbfOzThmfwc7ziCUXmp5pBGl1+MYdZ3hRCatV8gWjMoT68UdbFgD/+d9ajBOdfD ZUSf/tvKDcxKriQ9XaSS/TmKrwz7vXFEh2g6DBQDk9ZQX//cwMKmoDB0ZXyhdqTE xceWTgSfmObNXf79VCkJEl6+1FEA7POfodXM4Lzco6vHkizECmigxzksSkDTo3ea oECY0xdS2GAO9vZnOUpthFWrgjeGH+3H5n6KHZ5MQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:05 2026 by rpki-client