This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer File: 90fq0fqaE1xlBXykEtiTu4LpFCk.cer (raw, json) Hash identifier: 47LmYQv0uuX6Npt4QsXnsZQKMVvF+PiOA8EB1G38tes= Subject key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2F73C9527D2D69883CEA6040F212 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 288 AS: 8519 IP: 131.176.0.0/16 IP: 185.207.220.0/22 IP: 192.147.251.0/24 IP: 192.171.1.0 -- 192.171.5.255 IP: 195.74.160.0/19 IP: 2a03:62e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2f:73:c9:52:7d:2d:69:88:3c:ea:60:40:f2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c8:72:90:c3:5e:61:89:1b:ec:2c:d5:0e:6b: e3:37:86:d2:02:4d:dc:b2:55:b2:99:fd:2f:f9:13: 14:39:7a:b1:f8:d1:e2:01:93:28:05:f9:f7:c8:b1: f2:28:2a:3a:8f:96:9d:7f:22:a8:69:ce:cf:fb:d7: df:4b:a1:c0:88:97:93:22:f3:50:31:05:00:1d:ae: 58:76:f3:ba:29:cc:5e:eb:62:c5:17:52:90:fe:8e: 79:62:14:7a:1f:6a:c3:e5:91:3b:31:15:34:48:cd: 37:cc:0b:e1:37:f7:4b:0f:6f:17:05:79:52:78:b6: 59:8b:c6:5a:43:eb:aa:e3:27:0c:10:7e:2e:00:70: a3:3f:72:c3:20:5a:56:66:63:ca:d2:92:70:84:aa: fb:69:75:29:0d:0e:42:4e:6f:27:8a:5c:f6:3c:e2: 97:00:42:33:9f:9c:ef:55:89:44:cb:b8:b5:cd:f5: 51:4e:c7:e8:2d:f1:53:05:e2:df:ba:57:af:0a:50: 81:b8:fe:7e:11:3f:3b:d4:4d:a4:dc:4f:ff:ec:b9: 46:09:af:9a:ba:af:fb:a7:1a:3c:f3:4b:28:8a:5d: 00:d0:29:31:c4:30:27:1e:f8:0e:7b:a1:e0:da:d9: 01:64:2b:82:44:0a:3b:b9:ca:3f:67:c5:f8:91:d9: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.176.0.0/16 185.207.220.0/22 192.147.251.0/24 192.171.1.0-192.171.5.255 195.74.160.0/19 IPv6: 2a03:62e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 288 8519 Signature Algorithm: sha256WithRSAEncryption 7f:e3:ce:90:d8:82:94:a2:62:ba:31:17:35:9d:88:94:a8:d8: 2f:2e:ab:92:2d:88:70:b5:38:7d:d5:90:89:c8:87:94:81:c1: d7:47:2d:f4:b1:7c:75:85:ec:f0:a0:77:d3:b2:4c:8f:1f:a8: 74:29:d6:15:06:5d:2a:bd:17:b3:d0:c5:fc:bf:db:81:c8:6b: ba:17:df:66:eb:fb:7d:24:e6:c8:9d:48:10:4c:ab:1e:5a:9c: 34:d4:8e:6d:7f:9e:d8:b6:61:3d:36:5e:94:66:49:88:26:2d: 46:c7:65:19:1d:79:46:c5:ef:60:ba:76:46:63:bb:f1:95:49: e5:3b:81:9f:b9:71:6b:ce:19:39:39:db:f3:9c:c9:6d:d9:9a: 63:d5:83:7b:8c:5d:6f:5d:58:55:e7:e0:4a:50:44:ec:60:12: df:61:2c:47:72:d1:5d:a2:62:40:a2:e2:d3:77:52:70:ad:5d: 80:62:77:29:1c:d2:b3:13:f4:21:a1:60:f9:a6:89:29:69:dd: f0:84:73:d3:50:3c:23:56:55:dc:e1:29:9b:25:d6:c5:51:61: 01:80:67:61:88:25:7e:73:af:9a:68:22:b4:3d:79:6b:c3:06: aa:fd:aa:c2:0d:3e:34:bf:ce:58:f0:5d:f7:ac:9a:46:d6:e2: 89:3d:c6:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt5fy9zyVJ9LWmIPOpgQPISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQ3ZWFkMWZhOWExMzVjNjUwNTdjYTQxMmQ4OTNiYjgyZTkxNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MhykMNeYYkb7CzVDmvjN4bSAk3c slWymf0v+RMUOXqx+NHiAZMoBfn3yLHyKCo6j5adfyKoac7P+9ffS6HAiJeTIvNQ MQUAHa5YdvO6Kcxe62LFF1KQ/o55YhR6H2rD5ZE7MRU0SM03zAvhN/dLD28XBXlS eLZZi8ZaQ+uq4ycMEH4uAHCjP3LDIFpWZmPK0pJwhKr7aXUpDQ5CTm8nilz2POKX AEIzn5zvVYlEy7i1zfVRTsfoLfFTBeLfulevClCBuP5+ET871E2k3E//7LlGCa+a uq/7pxo880soil0A0CkxxDAnHvgOe6Hg2tkBZCuCRAo7uco/Z8X4kdnozwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFPdH6tH6mhNcZQV8pBLYk7uC6RQpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzA0Nzg5 Yy1hZTA0LTRiOTgtOTA5Yy1iOTE3ZjgzZjFlOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMDQ3ODlj LWFlMDQtNGI5OC05MDljLWI5MTdmODNmMWU4Yy8xLzkwZnEwZnFhRTF4bEJYeWtF dGlUdTRMcEZDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDArBAIAATAlAwMAg7ADBAK5z9wDBADAk/swDAMEAMCrAQMEAcCr BAMEBcNKoDANBAIAAjAHAwUAKgNi4DAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIB IAICIUcwDQYJKoZIhvcNAQELBQADggEBAH/jzpDYgpSiYroxFzWdiJSo2C8uq5It iHC1OH3VkInIh5SBwddHLfSxfHWF7PCgd9OyTI8fqHQp1hUGXSq9F7PQxfy/24HI a7oX32br+30k5sidSBBMqx5anDTUjm1/nti2YT02XpRmSYgmLUbHZRkdeUbF72C6 dkZju/GVSeU7gZ+5cWvOGTk52/OcyW3ZmmPVg3uMXW9dWFXn4EpQROxgEt9hLEdy 0V2iYkCi4tN3UnCtXYBidykc0rMT9CGhYPmmiSlp3fCEc9NQPCNWVdzhKZsl1sVR YQGAZ2GIJX5zr5poIrQ9eWvDBqr9qsINPjS/zljwXfesmkbW4ok9xko= -----END CERTIFICATE-----Generated at Sun Jan 25 22:33:46 2026 by rpki-client