This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer (raw, json) Hash identifier: xhgvQRojvZIS1VUACPp4Tyh8jxz0l8RVvQ26InPwnR4= Subject key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6998E063D38D8E0A2BF629074E607 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201233 IP: 217.18.85.0/24 IP: 2a12:e640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:8e:06:3d:38:d8:e0:a2:bf:62:90:74:e6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2b:7b:81:14:e1:c6:ef:55:f8:72:ae:cd:f2: f2:45:e1:92:35:c4:f3:0c:aa:6d:7c:73:57:d1:c6: 5b:00:e3:63:41:ef:02:41:59:8b:98:d6:70:79:78: 64:b7:dd:96:d6:83:11:8f:9f:e3:c9:af:b3:e7:ad: 03:45:e1:2c:9f:f0:b3:b7:cb:82:d0:6f:ee:fc:19: 89:06:fe:e8:79:42:ec:e9:78:07:3d:70:87:96:de: 00:f6:b9:1b:6c:dc:8c:44:4b:aa:a6:d1:b5:a4:c7: 6e:d7:34:e4:90:05:a9:83:d6:52:12:25:c1:8d:d2: d1:5a:2e:8b:b2:99:96:d5:ff:f3:9d:de:29:c1:32: 6d:b8:a7:35:1d:70:f5:d8:22:6b:53:75:a6:e4:1f: 95:f6:0f:c5:de:e1:38:93:9b:53:70:02:ad:a8:4e: e8:6c:7f:6b:bb:22:ce:ad:6b:25:cb:2b:c4:2b:08: d0:09:e8:d5:3c:10:d8:ad:82:2b:c3:72:91:52:a6: 2c:01:82:b5:ca:16:ac:63:ff:78:4a:5d:49:79:ed: b3:1b:69:78:27:d2:ca:e5:59:15:64:e6:20:a0:2a: 7d:5d:af:b3:c1:d1:b4:99:b3:9a:f4:eb:89:b0:28: e4:19:ea:25:bd:ed:39:83:58:e7:af:5a:02:5a:96: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.85.0/24 IPv6: 2a12:e640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201233 Signature Algorithm: sha256WithRSAEncryption 52:60:94:53:d4:fe:0e:ad:d5:e3:fc:08:ca:7d:a7:34:df:40: 50:17:40:df:38:93:12:a2:42:82:e2:a9:80:1f:6b:77:2a:49: 5f:1a:dc:b0:0c:fb:24:f6:6e:d8:97:bb:75:e5:c0:d9:64:95: 06:f7:b1:2b:c3:3b:25:55:35:99:4f:b3:8e:4e:01:1c:25:6e: 38:82:bc:20:46:0e:00:3f:b8:d1:1c:33:7b:9e:71:90:aa:73: 7e:0a:1f:11:df:c5:e7:67:cb:54:26:54:8e:71:74:90:f0:2e: 6b:4c:f0:07:d6:67:8a:56:5e:a1:a8:83:2a:bf:43:63:91:05: 3c:26:97:33:f6:90:ee:b0:79:ab:75:34:9c:df:3c:d6:18:c9: 01:00:d5:9f:8f:0a:3e:fa:34:ea:0a:92:59:c7:d5:c6:dc:d2: 5b:cc:5b:8d:f0:d0:b9:0b:07:2e:c4:58:08:95:5e:c4:e6:2d: f6:79:13:b8:57:06:46:7a:f9:13:19:55:4c:00:c5:91:73:b7: a5:fc:eb:47:db:76:fa:c4:14:3c:c6:e3:f0:70:25:3b:c9:ff: c3:92:2b:4c:d4:aa:a8:93:0d:74:44:e0:34:ce:cf:fd:af:3e: 35:28:c5:f9:d1:b6:58:1d:e1:1c:e4:e7:53:1a:99:f3:60:d4: fd:11:66:52 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xpmOBj042OCiv2KQdOYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2RjNDBjM2RiZGY4MTlkNzQxM2U3NzJiZDg3NTgxNGM3ZWFmNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yt7gRThxu9V+HKuzfLyReGSNcTz DKptfHNX0cZbAONjQe8CQVmLmNZweXhkt92W1oMRj5/jya+z560DReEsn/Czt8uC 0G/u/BmJBv7oeULs6XgHPXCHlt4A9rkbbNyMREuqptG1pMdu1zTkkAWpg9ZSEiXB jdLRWi6LspmW1f/znd4pwTJtuKc1HXD12CJrU3Wm5B+V9g/F3uE4k5tTcAKtqE7o bH9ruyLOrWslyyvEKwjQCejVPBDYrYIrw3KRUqYsAYK1yhasY/94Sl1Jee2zG2l4 J9LK5VkVZOYgoCp9Xa+zwdG0mbOa9OuJsCjkGeolve05g1jnr1oCWpb+8wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHzcQMPb34GddBPncr2HWBTH6vVeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzJlNTQz ZC00ZWY3LTRlODUtODY3YS05OWYyMDA0NjU5ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMmU1NDNk LTRlZjctNGU4NS04NjdhLTk5ZjIwMDQ2NTlkMS8xL2ZOeEF3OXZmZ1oxMEUtZHl2 WWRZRk1mcTlWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2RJVMA0EAgACMAcDBQMqEuZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSETANBgkqhkiG9w0BAQsFAAOCAQEAUmCUU9T+Dq3V 4/wIyn2nNN9AUBdA3ziTEqJCguKpgB9rdypJXxrcsAz7JPZu2Je7deXA2WSVBvex K8M7JVU1mU+zjk4BHCVuOIK8IEYOAD+40Rwze55xkKpzfgofEd/F52fLVCZUjnF0 kPAua0zwB9ZnilZeoaiDKr9DY5EFPCaXM/aQ7rB5q3U0nN881hjJAQDVn48KPvo0 6gqSWcfVxtzSW8xbjfDQuQsHLsRYCJVexOYt9nkTuFcGRnr5ExlVTADFkXO3pfzr R9t2+sQUPMbj8HAlO8n/w5IrTNSqqJMNdETgNM7P/a8+NSjF+dG2WB3hHOTnUxqZ 82DU/RFmUg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:46 2026 by rpki-client