This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer File: FUA-FXyC9176fFSpvH0NG_AbHK4.cer (raw, json) Hash identifier: HJq2LNOhQUnUfmiJQXyhvKVpHDkI2o3fcb3WBuXNaro= Subject key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369FE7EB0381147ED9ACFFE165CA91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58215 IP: 91.239.187.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9f:e7:eb:03:81:14:7e:d9:ac:ff:e1:65:ca:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:19:b4:dd:e3:e3:fe:7e:d6:97:69:c4:19: 71:43:7e:97:f7:de:ab:ed:1d:07:e3:c7:45:7d:31: c6:ce:3f:df:58:5a:c9:b3:2e:f4:e5:10:86:83:43: de:d4:24:71:70:c2:bb:f7:42:9b:a9:69:4c:78:f2: 35:ba:20:a6:7f:b3:c0:c9:6b:e5:97:d3:b2:d2:89: bf:27:a5:f5:02:b4:2d:f8:68:85:f4:2b:1d:6f:cd: fd:f3:7a:8c:28:4e:a6:c9:dd:90:4a:c2:87:aa:54: 1a:62:3d:c8:8b:c9:30:73:5e:c5:72:bf:87:ca:fb: 60:9c:87:e6:89:5e:c0:4c:23:83:cb:f4:d7:ef:16: cd:e6:9d:bf:da:15:b2:98:df:db:19:1f:2b:d1:c1: e4:c1:3d:ad:0b:77:b2:27:45:ed:84:c8:62:34:e5: c6:99:bf:1c:c9:75:90:a2:e5:7c:38:f3:66:52:34: 12:cd:77:b7:bc:44:01:00:95:40:b7:c9:f6:6f:55: a4:0d:7d:af:e4:26:13:4a:18:9d:b9:78:47:40:41: ce:26:27:c5:d9:40:b8:49:6a:44:0f:67:24:ab:9b: b4:c4:39:30:50:81:65:c5:78:08:91:0d:fb:a5:38: 87:eb:f7:f1:51:e8:ef:6e:e2:75:de:1c:bd:ba:94: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.187.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58215 Signature Algorithm: sha256WithRSAEncryption a0:b2:3d:13:43:ff:78:0a:b2:94:12:c7:05:b8:fd:78:1c:ea: aa:f2:62:af:37:86:f0:80:40:a3:75:a6:88:67:91:91:05:db: 51:19:0a:1c:fb:d4:87:9e:86:2e:02:af:20:e4:7b:b8:5e:fb: e4:d4:33:d3:4f:53:a1:5d:c5:b6:c6:78:ee:24:b1:82:49:04: da:95:d2:aa:ce:1b:03:7d:67:e6:ba:01:26:05:e8:76:c3:94: 2f:8a:31:d0:9b:2c:e7:5c:78:a6:aa:6e:35:10:31:98:7e:f1: 84:dd:7b:b2:97:a4:c5:7f:87:d4:57:22:f9:91:24:1f:81:3b: 35:29:0c:10:d0:6c:06:da:b3:36:95:3d:90:f4:ab:36:ad:34: ad:61:ae:77:51:1c:f2:85:5f:5e:f3:88:ec:76:3d:02:51:91: be:2d:0f:dc:db:e9:b8:8c:86:a2:25:4a:11:ce:5a:bd:ef:ee: c1:6a:bf:2c:33:9a:6b:3a:f7:6c:8b:6c:17:cc:65:cb:17:86: 3a:27:29:a5:08:21:62:13:2c:ff:ed:5e:69:de:d8:59:77:01: 9a:4c:a1:4b:f5:cb:fa:fd:43:a2:6f:28:8d:12:84:c3:89:d1: b4:bf:c5:9a:70:23:e8:a5:2e:03:ac:a3:f5:1c:45:49:6f:aa: 70:44:f4:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7Np/n6wOBFH7ZrP/hZcqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQwM2UxNTdjODJmNzVlZmE3YzU0YTliYzdkMGQxYmYwMWIxY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAwZtN3j4/5+1pdpxBlxQ36X996r 7R0H48dFfTHGzj/fWFrJsy705RCGg0Pe1CRxcMK790KbqWlMePI1uiCmf7PAyWvl l9Oy0om/J6X1ArQt+GiF9Csdb83983qMKE6myd2QSsKHqlQaYj3Ii8kwc17Fcr+H yvtgnIfmiV7ATCODy/TX7xbN5p2/2hWymN/bGR8r0cHkwT2tC3eyJ0XthMhiNOXG mb8cyXWQouV8OPNmUjQSzXe3vEQBAJVAt8n2b1WkDX2v5CYTShiduXhHQEHOJifF 2UC4SWpED2ckq5u0xDkwUIFlxXgIkQ37pTiH6/fxUejvbuJ13hy9upRi8wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBVAPhV8gvde+nxUqbx9DRvwGxyuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2VhZjg4 MC03MTA2LTRkMzMtODczNS0zMzRmOTQyOTI0OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvZWFmODgw LTcxMDYtNGQzMy04NzM1LTMzNGY5NDI5MjQ4ZS8xL0ZVQS1GWHlDOTE3NmZGU3B2 SDBOR19BYkhLNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW++7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjZzANBgkqhkiG9w0BAQsFAAOCAQEAoLI9E0P/eAqylBLHBbj9eBzqqvJirzeG 8IBAo3WmiGeRkQXbURkKHPvUh56GLgKvIOR7uF775NQz009ToV3FtsZ47iSxgkkE 2pXSqs4bA31n5roBJgXodsOUL4ox0Jss51x4pqpuNRAxmH7xhN17spekxX+H1Fci +ZEkH4E7NSkMENBsBtqzNpU9kPSrNq00rWGud1Ec8oVfXvOI7HY9AlGRvi0P3Nvp uIyGoiVKEc5ave/uwWq/LDOaazr3bItsF8xlyxeGOicppQghYhMs/+1ead7YWXcB mkyhS/XL+v1Dom8ojRKEw4nRtL/FmnAj6KUuA6yj9RxFSW+qcET0/A== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:07 2026 by rpki-client