This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer File: xFIGsdbzkSqG62KPYZxaVSxVNQE.cer (raw, json) Hash identifier: B8Rbcb1GyE9ER5fVsH5flo949Ff1j2bcjUhy7Mpxkak= Subject key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83BDCB4AE281270C2146B02B16E9D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50407 IP: 193.105.17.0/24 IP: 195.191.68.0/23 IP: 2001:67c:2e18::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bd:cb:4a:e2:81:27:0c:21:46:b0:2b:16:e9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45206b1d6f3912a86eb628f619c5a552c553501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:cf:7f:75:1a:9d:a1:36:90:46:4b:70:d6: d5:98:91:2e:e9:69:6b:b7:62:9d:f3:2d:28:09:2a: 48:b2:63:b3:3a:4c:b1:7f:2f:f6:1a:c7:8a:ab:63: 46:76:15:b9:fb:d4:c9:58:09:85:7a:5d:85:f8:42: 59:6c:6d:4c:85:bd:50:bc:fc:b2:83:64:84:a0:d3: 14:b5:42:c3:15:6e:93:03:48:7a:a3:fa:32:53:13: c4:ce:37:19:dd:08:e1:99:42:aa:fa:8a:45:1e:c8: 79:a8:4f:33:b6:7d:99:c9:11:03:0b:98:81:15:5b: 2f:77:47:1f:c1:43:92:40:c8:05:04:93:13:8f:09: 4c:19:50:3e:e0:26:30:95:55:76:c0:12:84:55:d9: 33:83:55:96:b1:ed:ac:e0:1f:dc:17:5c:27:df:cb: f3:38:11:92:ce:49:9d:64:d9:15:0d:3e:3a:ce:44: 88:5c:d3:31:86:d5:2f:8f:b8:01:30:0e:bf:00:c2: 76:8c:18:7a:01:1f:aa:bd:7a:f3:a1:02:e0:bb:46: bb:03:18:0f:1b:00:15:b5:2b:3c:bf:19:cb:a7:62: bc:dd:69:aa:30:49:71:02:25:fc:07:2f:2c:2e:cc: da:fb:a0:75:77:5e:8d:11:7f:3d:95:a9:4e:8a:11: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.17.0/24 195.191.68.0/23 IPv6: 2001:67c:2e18::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50407 Signature Algorithm: sha256WithRSAEncryption 28:50:55:3d:a5:4a:ee:cc:f4:c6:e5:a0:56:8d:ec:5c:d1:9e: f2:f8:81:23:e1:bf:9f:2f:00:55:8b:15:a2:cd:af:9c:30:ac: 4a:80:dc:54:9f:94:6c:bf:60:13:86:d8:f0:29:71:f3:62:73: ea:39:fb:39:57:63:33:76:fc:9b:b7:78:44:25:20:58:b5:fc: 1c:04:98:46:71:b1:ae:80:03:aa:91:89:df:f2:8b:d8:40:5a: 64:b4:0b:08:c1:c2:97:29:ff:3d:63:36:d6:07:c7:59:23:e9: a7:0c:51:98:86:99:17:65:4e:70:be:10:57:0c:f0:86:d9:ce: ee:c5:03:50:1f:f0:13:7c:00:34:bc:d9:45:91:79:df:2a:9b: b7:81:e0:8e:2d:61:fb:34:9f:87:f9:04:e0:84:30:ec:de:a1: 00:c5:12:46:2a:64:62:03:96:25:60:ee:8e:7f:02:04:1b:31: 9c:2d:14:dc:5d:f6:d1:f9:14:38:b6:e7:03:f1:70:a2:2f:b2: f5:d8:1b:b7:9c:6e:80:02:27:45:b1:11:cd:7d:9a:ad:a8:5a: 23:a7:6d:44:92:28:26:9b:81:15:e0:07:3e:bc:97:ab:a8:6c: 35:6a:aa:dc:f8:22:6e:fc:4f:d1:ac:0e:94:17:77:27:a4:39: 1e:af:f5:9d -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/g73LSuKBJwwhRrArFunZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDUyMDZiMWQ2ZjM5MTJhODZlYjYyOGY2MTljNWE1NTJjNTUzNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/zPf3UanaE2kEZLcNbVmJEu6Wlr t2Kd8y0oCSpIsmOzOkyxfy/2GseKq2NGdhW5+9TJWAmFel2F+EJZbG1Mhb1QvPyy g2SEoNMUtULDFW6TA0h6o/oyUxPEzjcZ3QjhmUKq+opFHsh5qE8ztn2ZyREDC5iB FVsvd0cfwUOSQMgFBJMTjwlMGVA+4CYwlVV2wBKEVdkzg1WWse2s4B/cF1wn38vz OBGSzkmdZNkVDT46zkSIXNMxhtUvj7gBMA6/AMJ2jBh6AR+qvXrzoQLgu0a7AxgP GwAVtSs8vxnLp2K83WmqMElxAiX8By8sLsza+6B1d16NEX89lalOihFIRQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFMRSBrHW85Eqhutij2GcWlUsVTUBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2NjODM1 Zi00OTA2LTRjOTUtYjhlNS01YmU0MGIxNGY4ZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvY2M4MzVm LTQ5MDYtNGM5NS1iOGU1LTViZTQwYjE0ZjhkZi8xL3hGSUdzZGJ6a1NxRzYyS1BZ WnhhVlN4Vk5RRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwWkRAwQBw79EMA8EAgACMAkDBwAgAQZ8Lhgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMTnMA0GCSqGSIb3DQEBCwUAA4IBAQAo UFU9pUruzPTG5aBWjexc0Z7y+IEj4b+fLwBVixWiza+cMKxKgNxUn5Rsv2AThtjw KXHzYnPqOfs5V2Mzdvybt3hEJSBYtfwcBJhGcbGugAOqkYnf8ovYQFpktAsIwcKX Kf89YzbWB8dZI+mnDFGYhpkXZU5wvhBXDPCG2c7uxQNQH/ATfAA0vNlFkXnfKpu3 geCOLWH7NJ+H+QTghDDs3qEAxRJGKmRiA5YlYO6OfwIEGzGcLRTcXfbR+RQ4tucD 8XCiL7L12Bu3nG6AAidFsRHNfZqtqFojp21Ekigmm4EV4Ac+vJerqGw1aqrc+CJu /E/RrA6UF3cnpDker/Wd -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:06 2026 by rpki-client