This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer (raw, json) Hash identifier: DcK0NUbl8vE0GePOjh4S6GWtlYYQooAnPLHqjve4ZpU= Subject key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9E4D12B3883CE5AD87ED7AEF2F89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210732 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:4d:12:b3:88:3c:e5:ad:87:ed:7a:ef:2f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:b9:88:a4:3c:b0:62:10:03:a4:0a:cd:3f: d3:2c:b7:c6:8b:a7:56:37:4c:e0:a8:f1:48:4f:02: 44:b6:35:34:36:f9:a2:fd:a0:36:dc:13:85:c8:3c: 04:ea:fe:cb:a3:5d:aa:04:84:f1:a4:78:c2:91:34: d0:38:23:a4:c2:40:6e:80:76:ee:91:dd:bf:f4:a8: 69:1a:9b:6c:5a:e7:68:63:d9:7d:c2:69:ce:56:2f: 9e:17:92:78:98:3e:b3:29:88:4d:a8:b7:14:72:87: df:9c:ff:f3:5c:7d:1a:af:0a:18:a6:26:af:d0:17: 3e:00:02:32:4c:df:4c:aa:f1:23:d4:a8:e1:80:44: 95:3a:4f:5a:b5:32:58:de:2c:e1:06:44:01:3a:5d: d0:7e:7b:f8:01:75:d5:d0:76:7f:fb:89:e8:0b:c8: 30:5a:29:58:47:ea:53:97:fc:b6:df:6a:59:82:61: d2:7a:f9:ce:02:e2:17:ec:22:69:27:b4:60:58:0c: c2:88:d1:75:61:bd:1a:75:6b:36:32:93:81:73:44: 8f:5a:b8:02:71:f9:49:5c:82:e5:b5:ea:e7:44:80: cc:b1:67:d7:dd:29:af:c5:0f:fb:b6:cc:b6:e9:0d: 03:ec:23:7c:75:f3:49:64:dd:1e:1e:2e:e3:a8:94: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210732 Signature Algorithm: sha256WithRSAEncryption 4f:d5:9e:6e:f4:34:35:40:c3:22:e9:80:a0:c3:c2:e9:9c:e0: b2:13:43:f7:45:56:43:f7:f0:e4:b0:10:9a:12:f3:82:48:4f: 11:6e:b4:93:72:cc:75:00:e6:cc:da:80:64:ff:fe:9a:e2:35: 5c:8f:dd:5e:7d:ed:28:1b:34:05:c3:90:5c:e2:04:9e:93:6b: b3:e5:7e:eb:53:ba:f0:e8:25:1c:0f:61:1f:c5:df:c9:5e:25: 0a:17:4b:59:0d:ea:a6:5f:c8:29:38:7a:d9:30:a7:6b:07:cb: 03:85:79:0a:ed:b0:22:02:f3:c5:0b:3e:b3:b6:da:c5:d0:d1: cd:7d:a6:df:2f:38:b4:3c:bf:cd:c9:f7:47:be:95:f1:e9:b4: 98:a2:08:91:a9:85:47:28:3f:f5:7b:5a:f4:c5:ee:8c:7a:e5: 9b:c4:d0:0b:a5:d4:c8:7b:d5:77:cc:8c:0d:28:41:70:d9:db: 84:10:46:62:64:f7:47:ee:fa:72:ef:2f:93:ee:6f:5b:2d:e0: 18:57:03:17:8f:f1:76:7c:f7:84:7d:b0:45:3f:f5:31:02:8a: 9b:5d:76:c4:0b:86:53:f8:d4:30:85:29:46:9b:60:f0:78:71: 6a:61:6f:88:02:30:fa:8b:df:1e:b7:c0:cf:4f:f9:cc:06:41: ac:a9:ec:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt2655NErOIPOWth+167y+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ1ZmJmZmQ2MmZlMjRlMjYzMzkxOTNhZDlhNmMzMThiNWRiYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+5iKQ8sGIQA6QKzT/TLLfGi6dW N0zgqPFITwJEtjU0Nvmi/aA23BOFyDwE6v7Lo12qBITxpHjCkTTQOCOkwkBugHbu kd2/9KhpGptsWudoY9l9wmnOVi+eF5J4mD6zKYhNqLcUcoffnP/zXH0arwoYpiav 0Bc+AAIyTN9MqvEj1KjhgESVOk9atTJY3izhBkQBOl3Qfnv4AXXV0HZ/+4noC8gw WilYR+pTl/y232pZgmHSevnOAuIX7CJpJ7RgWAzCiNF1Yb0adWs2MpOBc0SPWrgC cflJXILlternRIDMsWfX3SmvxQ/7tsy26Q0D7CN8dfNJZN0eHi7jqJTTCwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH1F+//WL+JOJjORk62abDGLXbskMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2IyOTUz YS1kOTg3LTQ2YjAtYmVhMy04N2E2MmUwZmM0OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYjI5NTNh LWQ5ODctNDZiMC1iZWEzLTg3YTYyZTBmYzQ4Yy8xL2ZVWDdfOVl2NGs0bU01R1Ry WnBzTVl0ZHV5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3LDANBgkqhkiG9w0BAQsFAAOCAQEAT9WebvQ0NUDD IumAoMPC6ZzgshND90VWQ/fw5LAQmhLzgkhPEW60k3LMdQDmzNqAZP/+muI1XI/d Xn3tKBs0BcOQXOIEnpNrs+V+61O68OglHA9hH8XfyV4lChdLWQ3qpl/IKTh62TCn awfLA4V5Cu2wIgLzxQs+s7baxdDRzX2m3y84tDy/zcn3R76V8em0mKIIkamFRyg/ 9Xta9MXujHrlm8TQC6XUyHvVd8yMDShBcNnbhBBGYmT3R+76cu8vk+5vWy3gGFcD F4/xdnz3hH2wRT/1MQKKm112xAuGU/jUMIUpRptg8HhxamFviAIw+ovfHrfAz0/5 zAZBrKnsvg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:16 2026 by rpki-client