This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer File: fRXP7bmuq0K_isWyTLGu7CpmCUM.cer (raw, json) Hash identifier: 2qhLxiBLmUjNc/VSci066bLrMT0S9HleQ5XQM9CHRoI= Subject key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBAF38B1953AE6D59D8CCED633A393 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12390 AS: 206509 IP: 5.198.0.0/17 IP: 77.86.0.0/17 IP: 83.100.128.0/17 IP: 87.102.0.0/17 IP: 94.72.192.0/18 IP: 159.253.64.0/20 IP: 178.78.64.0/18 IP: 185.188.232.0/22 IP: 194.207.0.0/16 IP: 212.50.160.0/19 IP: 213.249.128.0/17 IP: 2a00:4900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:af:38:b1:95:3a:e6:d5:9d:8c:ce:d6:33:a3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:a2:fb:cf:b8:23:c8:ec:18:cd:0a:89:64: 38:ec:59:f7:8e:0e:73:f2:9d:cb:69:44:8e:a8:3d: 87:66:bb:36:c2:d9:9f:a9:d5:18:8e:76:28:85:c8: 92:7f:96:39:37:78:84:55:5d:bb:65:73:4a:bb:5a: b1:ea:d3:72:d3:e3:d8:9e:d0:0e:33:64:50:04:f4: 3b:f2:82:6a:06:85:f9:fb:2f:1c:d7:f3:46:de:e4: e6:73:ec:a6:01:53:83:60:ac:d2:62:8f:cf:80:bd: 74:93:dd:4b:40:bf:bd:0b:0a:44:04:8a:14:0c:e1: 58:88:8d:bf:e8:b3:7c:b1:07:6d:4e:76:e4:3c:7c: 8c:c1:1d:ac:c9:05:06:f4:03:f1:7e:82:7b:24:db: c9:9b:0d:c0:dd:7e:ab:12:cf:af:d5:69:d1:dd:a3: 87:94:26:6f:b5:13:5b:08:fa:ba:6e:a5:49:ce:53: 36:b4:09:2e:ae:b5:0a:75:d7:53:57:6a:ec:f9:df: 40:49:31:eb:5a:27:08:13:69:e4:aa:67:4b:db:d1: db:69:ab:1a:53:8d:1b:cd:72:29:8e:21:46:89:d4: 40:7c:e9:4c:d4:1c:fc:eb:7b:a9:35:97:18:d6:31: b9:b0:0f:fb:7c:64:c2:69:07:0b:6f:e3:3e:34:3c: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.198.0.0/17 77.86.0.0/17 83.100.128.0/17 87.102.0.0/17 94.72.192.0/18 159.253.64.0/20 178.78.64.0/18 185.188.232.0/22 194.207.0.0/16 212.50.160.0/19 213.249.128.0/17 IPv6: 2a00:4900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12390 206509 Signature Algorithm: sha256WithRSAEncryption 39:be:64:60:40:ae:87:08:95:ca:b7:fb:c8:10:cd:10:76:bf: 3c:fb:5f:90:4a:09:0a:86:85:c9:a7:f4:1d:a8:39:6c:f7:e4: bf:2a:5d:6e:c5:14:fd:9b:7f:ec:c4:21:9a:7f:8f:53:a4:fa: d3:3a:0f:30:18:78:45:6e:b8:a1:e7:f7:66:4c:7e:bd:ec:e2: 19:fa:20:ad:3c:a7:fa:b6:49:17:67:0c:52:bf:17:37:26:1e: 94:c3:28:51:88:7d:8c:ec:ca:1b:ca:82:c8:80:74:96:54:8b: 4f:24:ff:a6:03:b5:f6:84:5a:95:02:d2:48:84:0b:be:c6:f7: 50:1c:61:91:bd:bf:f2:42:7e:3c:cd:82:11:db:b8:41:3e:82: c0:c1:78:1e:a3:6d:18:0d:bd:6c:df:f3:68:50:6d:df:7e:95: 73:fc:0a:28:eb:67:17:da:b1:c4:5b:d9:52:c9:e6:f6:64:a4: 2a:14:16:bc:25:d5:ef:87:76:3b:2b:93:1e:d3:5a:2a:be:6d: 5a:54:f2:5b:79:b4:a8:ce:b0:72:33:33:ff:f3:06:6e:c0:8a: 63:0f:35:76:23:62:07:9a:cb:f0:24:ad:3d:27:4b:69:fd:33: c9:e6:06:7a:bd:18:92:a4:08:e5:c0:5b:36:1c:5b:b3:dd:f0: 50:8f:65:6e -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt56684sZU65tWdjM7WM6OTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDE1Y2ZlZGI5YWVhYjQyYmY4YWM1YjI0Y2IxYWVlYzJhNjYwOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsWi+8+4I8jsGM0KiWQ47Fn3jg5z 8p3LaUSOqD2HZrs2wtmfqdUYjnYohciSf5Y5N3iEVV27ZXNKu1qx6tNy0+PYntAO M2RQBPQ78oJqBoX5+y8c1/NG3uTmc+ymAVODYKzSYo/PgL10k91LQL+9CwpEBIoU DOFYiI2/6LN8sQdtTnbkPHyMwR2syQUG9APxfoJ7JNvJmw3A3X6rEs+v1WnR3aOH lCZvtRNbCPq6bqVJzlM2tAkurrUKdddTV2rs+d9ASTHrWicIE2nkqmdL29Hbaasa U40bzXIpjiFGidRAfOlM1Bz863upNZcY1jG5sA/7fGTCaQcLb+M+NDxxMQIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFH0Vz+25rqtCv4rFskyxruwqZglDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2FkNmI3 My0wZThjLTRhNDUtYjZiYi00MjI4MWY1NTE4YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYWQ2Yjcz LTBlOGMtNGE0NS1iNmJiLTQyMjgxZjU1MThhOS8xL2ZSWFA3Ym11cTBLX2lzV3lU TEd1N0NwbUNVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDBHBAIAATBBAwQHBcYAAwQHTVYAAwQHU2SAAwQHV2YAAwQGXkjA AwQEn/1AAwQGsk5AAwQCubzoAwMAws8DBAXUMqADBAfV+YAwDQQCAAIwBwMFAyoA SQAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICMGYCAwMmrTANBgkqhkiG9w0BAQsF AAOCAQEAOb5kYECuhwiVyrf7yBDNEHa/PPtfkEoJCoaFyaf0Hag5bPfkvypdbsUU /Zt/7MQhmn+PU6T60zoPMBh4RW64oef3Zkx+veziGfogrTyn+rZJF2cMUr8XNyYe lMMoUYh9jOzKG8qCyIB0llSLTyT/pgO19oRalQLSSIQLvsb3UBxhkb2/8kJ+PM2C Edu4QT6CwMF4HqNtGA29bN/zaFBt336Vc/wKKOtnF9qxxFvZUsnm9mSkKhQWvCXV 74d2OyuTHtNaKr5tWlTyW3m0qM6wcjMz//MGbsCKYw81diNiB5rL8CStPSdLaf0z yeYGer0YkqQI5cBbNhxbs93wUI9lbg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:13 2026 by rpki-client