This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer File: _FXgUz76pWJPU4uS7RqXP-_4l1E.cer (raw, json) Hash identifier: POQPVKeVKGomV6rcSdxq1DI7C2003nQzakVOKCebzYU= Subject key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11E42240837EE79D9A7BE0C1C3977D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39144 AS: 41397 IP: 80.255.112.0/20 IP: 185.84.116.0/22 IP: 185.132.188.0/23 IP: 2a02:5100::/32 IP: 2a05:a4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e4:22:40:83:7e:e7:9d:9a:7b:e0:c1:c3:97:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc55e0533efaa5624f538b92ed1a973feff89751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:19:e6:64:6e:84:d6:bc:87:3f:89:ae:59:66: 37:22:09:12:e0:62:11:f1:8c:b8:3a:8f:aa:08:30: c2:35:1d:d4:61:53:f2:d0:17:fe:d5:ca:6f:85:62: 94:94:4f:52:11:83:f0:59:e9:5b:da:0c:e6:f5:d3: cd:88:ef:b7:6f:24:d2:ac:cc:50:30:13:0d:e8:81: cd:03:05:7f:ae:46:6e:15:8c:e0:8e:cc:dc:8f:3e: 55:1e:61:4f:15:e5:65:95:9d:4e:53:7c:69:06:9d: 1b:5d:b8:b7:43:c1:64:17:1b:bc:51:66:09:4b:92: 67:85:49:f5:43:26:52:08:ef:36:7a:b8:5c:9f:39: 44:17:2b:94:b1:a9:26:78:67:5b:b5:03:b5:96:ba: 44:fd:d6:b8:39:78:bc:cb:b3:ce:36:8a:75:6f:90: b7:e2:66:64:23:51:5e:51:a8:83:0d:b8:72:7d:9d: 2e:4e:f4:91:ac:e9:c7:a0:fa:e2:7d:ab:15:49:5e: 4d:67:ea:0f:97:ed:05:5a:e6:b1:2f:59:53:be:50: 64:71:96:a9:7a:48:7d:b5:0e:43:3b:80:0d:69:10: 0a:42:f8:03:e9:3e:91:9f:57:2b:76:95:ba:51:f5: 05:03:55:61:48:9a:ab:1f:18:34:9f:94:6d:d8:28: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.255.112.0/20 185.84.116.0/22 185.132.188.0/23 IPv6: 2a02:5100::/32 2a05:a4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39144 41397 Signature Algorithm: sha256WithRSAEncryption 7e:6a:95:92:7f:5b:b2:c0:e2:f5:c2:41:e8:ba:05:7f:f0:65: d9:1b:4d:dc:ba:b4:d2:2d:c7:2d:6a:2a:e5:6a:2b:4e:1d:b7: ad:b1:6d:00:ce:c8:8d:b9:de:da:5e:fd:ac:f3:4e:df:ee:8b: b2:4d:75:1d:39:15:64:36:89:3b:1d:72:44:62:fa:2e:77:98: cd:c9:35:33:e8:f2:4a:15:c8:88:0c:f2:ed:00:72:af:a6:84: 55:2b:b5:30:54:df:19:97:ba:d8:c2:15:93:75:47:18:b1:ed: 8b:44:fa:b7:f5:e1:e6:7a:b3:75:d6:a7:2c:b1:cd:5d:bf:1c: 95:b1:f7:bf:66:e4:38:36:95:53:91:23:2e:a1:ac:5c:13:55: f9:7f:ce:2d:b6:fb:85:3b:01:ab:22:ca:cf:12:d0:89:00:fc: f6:2e:dc:75:a2:1d:51:3d:c2:1c:7b:3c:2b:21:2e:0e:8b:e2: d0:ac:13:3c:9d:da:87:d7:7c:b5:fc:59:74:97:36:08:5a:cc: 15:1a:ee:12:bd:5e:f9:c6:12:23:be:45:81:07:4a:d3:96:ad: 79:fb:12:97:89:94:22:d2:7d:d7:f6:0d:56:03:d3:cd:2d:c8: ce:b6:03:54:b3:3e:04:be:80:34:3b:30:5a:64:ce:46:5b:d6: 21:79:f4:30 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8EeQiQIN+552ae+DBw5d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU1ZTA1MzNlZmFhNTYyNGY1MzhiOTJlZDFhOTczZmVmZjg5NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xnmZG6E1ryHP4muWWY3IgkS4GIR 8Yy4Oo+qCDDCNR3UYVPy0Bf+1cpvhWKUlE9SEYPwWelb2gzm9dPNiO+3byTSrMxQ MBMN6IHNAwV/rkZuFYzgjszcjz5VHmFPFeVllZ1OU3xpBp0bXbi3Q8FkFxu8UWYJ S5JnhUn1QyZSCO82erhcnzlEFyuUsakmeGdbtQO1lrpE/da4OXi8y7PONop1b5C3 4mZkI1FeUaiDDbhyfZ0uTvSRrOnHoPrifasVSV5NZ+oPl+0FWuaxL1lTvlBkcZap ekh9tQ5DO4ANaRAKQvgD6T6Rn1crdpW6UfUFA1VhSJqrHxg0n5Rt2ChRIwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFPxV4FM++qViT1OLku0alz/v+JdRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzVlNzUz ZC1jMzNkLTQ3YTMtOGU4Mi1hNTI4NjJiNDQ1NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNWU3NTNk LWMzM2QtNDdhMy04ZTgyLWE1Mjg2MmI0NDU2My8xL19GWGdVejc2cFdKUFU0dVM3 UnFYUC1fNGwxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQEUP9wAwQCuVR0AwQBuYS8MBQEAgACMA4DBQAq AlEAAwUDKgWkwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAmOgCAwChtTANBgkq hkiG9w0BAQsFAAOCAQEAfmqVkn9bssDi9cJB6LoFf/Bl2RtN3Lq00i3HLWoq5Wor Th23rbFtAM7Ijbne2l79rPNO3+6Lsk11HTkVZDaJOx1yRGL6LneYzck1M+jyShXI iAzy7QByr6aEVSu1MFTfGZe62MIVk3VHGLHti0T6t/Xh5nqzddanLLHNXb8clbH3 v2bkODaVU5EjLqGsXBNV+X/OLbb7hTsBqyLKzxLQiQD89i7cdaIdUT3CHHs8KyEu Dovi0KwTPJ3ah9d8tfxZdJc2CFrMFRruEr1e+cYSI75FgQdK05atefsSl4mUItJ9 1/YNVgPTzS3IzrYDVLM+BL6ANDswWmTORlvWIXn0MA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:41 2026 by rpki-client