This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer File: fCOA12SpYR3-L7wM4MxASW7B6D4.cer (raw, json) Hash identifier: TXR5lG9mf4mEQ9855xoerX5iOfywtOGMJENRVJDkAX4= Subject key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B01650EEF9CBC908C4846190CC6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60703 IP: 185.26.220.0/22 IP: 2a04:3a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b0:16:50:ee:f9:cb:c9:08:c4:84:61:90:cc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:44:83:80:af:4f:2c:1b:d1:ec:2e:5f:2d: db:5e:41:fa:eb:81:a6:62:a0:8f:6f:c8:4c:33:c1: ac:be:4b:ec:47:49:ae:12:03:bd:03:da:12:a0:5a: 68:5d:e5:27:c9:ec:84:65:37:3f:1b:0f:64:ce:8a: 40:66:4d:2c:76:b7:9c:09:66:50:dc:4c:6b:64:4b: dc:0b:ea:1a:32:7a:29:e8:8f:6a:bb:69:b1:fc:27: 84:c3:82:49:b9:c6:5a:e1:a4:ec:12:ec:71:82:7e: b3:b4:cb:0f:40:bd:b0:55:db:29:6b:fc:59:95:7d: e7:a4:1e:09:f2:a7:02:5d:b9:60:8b:71:5e:fa:b9: 6f:b6:10:9c:b5:50:5a:02:17:ef:99:5d:e3:92:0e: c5:f3:7f:ab:22:1d:5c:fb:3f:25:3f:7e:6d:31:3b: 74:44:55:45:a3:da:15:77:35:10:d2:bc:a7:b9:55: 76:ce:b1:27:d8:ea:df:90:49:d0:20:9f:27:32:8c: 51:4a:53:4c:8c:8d:11:21:6c:e9:a6:1b:78:fe:91: 6d:5c:e8:ee:11:0d:e0:27:31:e8:26:1a:4a:93:18: 3b:19:48:e1:64:2b:f4:15:50:bc:09:e1:de:de:8a: dc:54:2e:bc:5e:ca:39:a2:2e:ef:41:33:05:7a:e9: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.220.0/22 IPv6: 2a04:3a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60703 Signature Algorithm: sha256WithRSAEncryption 06:1f:11:ec:df:1d:f9:a8:73:12:f5:1b:f0:5e:f2:dc:aa:97: 3d:6d:82:ab:a8:71:47:f8:fc:70:ff:ca:d5:6e:36:97:3b:99: 15:a7:f7:42:32:c7:8d:98:66:e8:31:ad:b3:33:98:e2:dc:d3: f8:ee:7b:4a:33:0c:e2:43:5e:be:7c:a6:20:9a:f9:30:13:7a: e6:b9:95:52:9f:f2:c5:3e:d5:bd:31:f1:70:7b:1f:cb:84:4d: e4:4e:0e:c4:32:34:0c:bc:30:1b:ec:e4:de:3e:b3:cf:78:41: 36:80:e8:e9:78:37:9c:13:ed:bf:b2:5a:83:6c:9e:01:d2:16: 2a:17:8e:5a:ae:05:17:bd:44:9b:b8:fd:df:29:b8:e7:d4:d9: 7f:0e:7b:5a:c3:a5:46:cc:2c:c9:6f:1d:d1:05:fa:97:6e:39: 4f:fc:e5:d3:2d:28:ab:ce:98:91:ee:9b:77:8e:8f:d8:db:d3: 19:b6:ef:39:54:9c:13:69:73:24:17:26:70:33:4c:42:5a:3e: 93:23:1e:46:29:d4:8b:23:04:b2:c0:57:9a:cc:04:54:54:24: 6c:25:76:e2:dd:40:71:d4:e4:57:15:c0:f6:53:51:77:5d:a6: 7c:cc:4d:79:d9:18:51:1e:8e:f1:96:98:78:41:b5:d8:a7:2e: 1f:d3:81:3a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yLAWUO75y8kIxIRhkMxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzIzODBkNzY0YTk2MTFkZmUyZmJjMGNlMGNjNDA0OTZlYzFlODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVZEg4CvTywb0ewuXy3bXkH664Gm YqCPb8hMM8GsvkvsR0muEgO9A9oSoFpoXeUnyeyEZTc/Gw9kzopAZk0sdrecCWZQ 3ExrZEvcC+oaMnop6I9qu2mx/CeEw4JJucZa4aTsEuxxgn6ztMsPQL2wVdspa/xZ lX3npB4J8qcCXblgi3Fe+rlvthCctVBaAhfvmV3jkg7F83+rIh1c+z8lP35tMTt0 RFVFo9oVdzUQ0rynuVV2zrEn2OrfkEnQIJ8nMoxRSlNMjI0RIWzppht4/pFtXOju EQ3gJzHoJhpKkxg7GUjhZCv0FVC8CeHe3orcVC68Xso5oi7vQTMFeul5fwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHwjgNdkqWEd/i+8DODMQEluweg+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzg1ZmE4 NC01ZDk5LTRhYTgtODc1My01ZDhjYTYzNjgxYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvODVmYTg0 LTVkOTktNGFhOC04NzUzLTVkOGNhNjM2ODFhZC8xL2ZDT0ExMlNwWVIzLUw3d000 TXhBU1c3QjZENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRrcMA0EAgACMAcDBQMqBDoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtHzANBgkqhkiG9w0BAQsFAAOCAQEABh8R7N8d+ahz EvUb8F7y3KqXPW2Cq6hxR/j8cP/K1W42lzuZFaf3QjLHjZhm6DGtszOY4tzT+O57 SjMM4kNevnymIJr5MBN65rmVUp/yxT7VvTHxcHsfy4RN5E4OxDI0DLwwG+zk3j6z z3hBNoDo6Xg3nBPtv7Jag2yeAdIWKheOWq4FF71Em7j93ym459TZfw57WsOlRsws yW8d0QX6l245T/zl0y0oq86Yke6bd46P2NvTGbbvOVScE2lzJBcmcDNMQlo+kyMe RinUiyMEssBXmswEVFQkbCV24t1AcdTkVxXA9lNRd12mfMxNedkYUR6O8ZaYeEG1 2KcuH9OBOg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:53 2026 by rpki-client