This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer (raw, json) Hash identifier: +/7vM56PX3vy8iBnFgOv+WbAec53hsf/8w7Db0G9CM8= Subject key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37B7548C56EBC883A6A907E77D0000 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31574 IP: 194.242.108.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b7:54:8c:56:eb:c8:83:a6:a9:07:e7:7d:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cab39c6e0412235efc7877a9f737899313ed15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:37:41:5f:ac:6f:d8:fa:11:a3:82:72:72: c9:40:ac:fc:35:4a:68:c7:18:e5:49:73:73:5d:79: 14:ba:f8:d9:03:62:7d:b7:5b:41:bc:54:ea:fe:b1: 43:cd:43:37:24:3b:a3:da:77:50:52:46:65:65:b0: fc:62:78:60:3b:f3:1d:33:9e:a1:37:d6:53:cd:6b: 7e:24:c5:b0:b9:8f:11:9d:d7:61:cc:d5:26:e7:a9: 11:59:65:42:e9:0e:8a:f4:c4:87:ef:6f:e1:4d:f5: 06:96:c0:7c:cf:42:92:b4:05:f0:8a:94:cd:48:b1: c1:eb:fc:a5:89:55:50:80:6a:d1:fb:e4:43:55:ed: e8:43:b5:81:66:4c:cd:2e:f2:b4:2c:89:62:28:7d: 0f:65:35:03:de:1f:63:fc:e2:fb:f4:0a:50:42:5c: d7:a6:55:f8:bf:3e:ab:e4:1c:20:91:1d:68:cb:36: 85:eb:3c:77:65:3c:b5:b5:99:e9:71:cc:99:fd:f6: 10:ac:46:b4:ec:e2:c0:f6:77:c6:f4:6b:1a:dd:f6: f4:de:ab:fe:8b:fb:3c:87:62:49:dd:e6:73:1a:ae: be:88:2d:be:cc:9b:af:c2:ad:6a:f7:21:d6:22:34: 07:b9:bc:72:56:24:9a:bf:ad:38:f0:18:80:30:8c: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31574 Signature Algorithm: sha256WithRSAEncryption 6a:23:13:04:f9:70:13:d2:33:7b:b5:3a:5c:ad:9e:39:45:60: 95:1a:b1:0a:6e:91:53:e4:fb:53:67:8f:5b:84:0b:60:5f:43: 1f:d2:3f:02:7d:b7:d5:cb:06:6a:b2:09:6e:75:13:e2:19:21: 09:31:e5:eb:fc:0c:73:b6:13:c5:02:fa:c3:1b:13:fd:7c:25: 4a:c4:8d:77:57:71:ae:5e:75:13:c6:05:b3:1e:b9:ee:b1:5f: d6:26:26:94:2f:7f:dd:9d:03:8d:bb:eb:4c:a4:3c:55:0b:99: dc:a4:86:95:6a:78:dc:51:56:d5:13:40:61:df:4d:5d:b8:9f: 98:2f:66:a4:27:77:79:46:da:d3:50:48:2c:25:22:d7:2f:00: 54:fd:b6:75:01:eb:fd:11:90:06:ae:cf:de:04:62:c5:92:7e: d5:de:ba:e7:57:11:f3:3a:59:0c:b2:ee:8e:13:63:d9:eb:52: 82:6e:9e:b9:94:2e:42:07:80:20:48:57:01:66:f9:7f:7e:63: 7c:82:98:7d:15:a2:07:01:81:6e:cf:25:47:09:8d:35:4f:34: 95:6a:9d:3d:91:6b:1d:d1:a1:ad:31:82:7e:bb:0a:19:d0:8d: 24:1e:8f:9c:51:b4:7e:04:29:2a:34:22:10:d9:31:74:08:91: 18:ee:25:b1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+N7dUjFbryIOmqQfnfQAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FiMzljNmUwNDEyMjM1ZWZjNzg3N2E5ZjczNzg5OTMxM2VkMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30E3QV+sb9j6EaOCcnLJQKz8NUpo xxjlSXNzXXkUuvjZA2J9t1tBvFTq/rFDzUM3JDuj2ndQUkZlZbD8YnhgO/MdM56h N9ZTzWt+JMWwuY8RnddhzNUm56kRWWVC6Q6K9MSH72/hTfUGlsB8z0KStAXwipTN SLHB6/yliVVQgGrR++RDVe3oQ7WBZkzNLvK0LIliKH0PZTUD3h9j/OL79ApQQlzX plX4vz6r5BwgkR1oyzaF6zx3ZTy1tZnpccyZ/fYQrEa07OLA9nfG9Gsa3fb03qv+ i/s8h2JJ3eZzGq6+iC2+zJuvwq1q9yHWIjQHubxyViSav6048BiAMIxQRwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHyrOcbgQSI178eHep9zeJkxPtFeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2Y4OTE3 MC0xMzhlLTQ5OTktYWVmNy1jNDQwMjk4ZGZjNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZjg5MTcw LTEzOGUtNDk5OS1hZWY3LWM0NDAyOThkZmM1Yy8xL2ZLczV4dUJCSWpYdng0ZDZu M040bVRFLTBWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwvJsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AntWMA0GCSqGSIb3DQEBCwUAA4IBAQBqIxME+XAT0jN7tTpcrZ45RWCVGrEKbpFT 5PtTZ49bhAtgX0Mf0j8CfbfVywZqsgludRPiGSEJMeXr/AxzthPFAvrDGxP9fCVK xI13V3GuXnUTxgWzHrnusV/WJiaUL3/dnQONu+tMpDxVC5ncpIaVanjcUVbVE0Bh 301duJ+YL2akJ3d5RtrTUEgsJSLXLwBU/bZ1Aev9EZAGrs/eBGLFkn7V3rrnVxHz OlkMsu6OE2PZ61KCbp65lC5CB4AgSFcBZvl/fmN8gph9FaIHAYFuzyVHCY01TzSV ap09kWsd0aGtMYJ+uwoZ0I0kHo+cUbR+BCkqNCIQ2TF0CJEY7iWx -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:45 2026 by rpki-client