This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer File: flHKwc4q_hlYsftqYjdxewtdSBA.cer (raw, json) Hash identifier: VaYRxOWOOEX6Tn7IZ9JEj24Zt5gMM4BaoCERlOdZCVU= Subject key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355FF175A91D564FE7A3CF0704BF78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.66.60.0/22 IP: 141.98.40.0/22 IP: 2a06:e940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5f:f1:75:a9:1d:56:4f:e7:a3:cf:07:04:bf:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:7a:ec:f6:a2:a2:96:1b:45:54:da:82:95: af:bb:fd:f7:62:22:8d:56:b9:af:4b:b6:a1:09:19: f4:4f:27:ff:b4:91:7c:93:94:7a:54:cd:65:3e:5a: 12:82:52:14:fb:db:cb:16:ff:0f:34:92:e8:4c:8c: da:a3:93:61:f9:bd:d5:61:6a:1c:21:b1:1c:0b:d7: 43:38:ef:91:39:c0:e1:47:8f:88:d0:fc:f2:9c:3f: 18:a0:28:aa:64:8e:79:49:52:5a:ab:e0:6c:55:b0: 16:9d:6f:72:32:57:04:14:8a:ef:4a:f8:b0:7c:3c: cc:aa:b1:a8:57:60:d7:fb:33:8c:b8:48:3e:f5:b4: c5:06:78:39:82:2a:8e:0e:c1:67:d7:35:e4:d7:33: f7:d5:a3:e6:6c:51:9c:b5:f8:77:56:40:46:a5:87: 2c:bb:ff:59:e6:96:6a:95:81:f2:90:a8:e1:20:bc: 39:73:cd:d0:9b:5f:43:7d:33:5f:a3:5a:45:26:73: 0d:0f:ba:68:b7:90:b2:1d:25:cc:1a:b8:fa:49:c7: b9:ba:6b:c2:9d:05:e8:e7:25:e3:40:78:0a:2b:45: 0e:d6:99:d7:4b:f7:8a:b2:e1:90:ab:cb:45:a4:b2: 48:57:22:ac:7a:d9:09:bc:7b:3b:3e:2d:ce:4c:0d: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.60.0/22 141.98.40.0/22 IPv6: 2a06:e940::/29 Signature Algorithm: sha256WithRSAEncryption 56:42:fa:65:eb:2b:fc:4e:5a:1b:52:89:aa:0e:28:a8:c8:70: 70:29:20:58:05:82:78:d9:51:f3:87:dc:5c:23:e7:6d:6b:24: 3c:e9:4b:08:c9:ce:7e:48:33:f0:14:de:02:75:65:68:85:47: a6:4b:5b:f4:c3:9c:64:2b:a2:27:f6:36:56:71:91:1a:dd:41: 04:84:f0:a0:73:41:7d:f6:bf:0c:9f:00:f4:61:83:79:f4:62: dc:37:7c:1d:b2:cb:d2:34:74:f9:5e:7c:2e:ba:0e:f3:23:9f: d7:a1:55:d6:f0:ef:c4:4e:6b:d6:94:ad:37:50:5f:6a:80:0d: ed:eb:b7:6e:fb:62:95:8e:7d:29:19:2f:88:13:b3:08:8b:b5: c8:51:66:94:52:c3:9b:1a:73:d8:c3:90:06:aa:14:39:ce:41: 55:63:fa:60:46:01:4d:87:27:bf:f1:8c:5e:45:71:dc:84:bf: 0d:7f:a6:b7:cd:c8:0d:d3:12:48:c9:1a:93:52:e2:1b:a5:84: bf:8c:e7:b2:e5:9b:0e:c4:e7:f5:d3:d6:8b:85:11:9a:5f:f9: 91:f3:c5:09:22:ee:61:26:73:a9:f2:66:d3:9a:6a:98:38:77: 48:0f:18:80:7f:13:36:15:88:18:6c:0a:19:eb:78:45:dd:0e: 0b:75:c9:09 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NV/xdakdVk/no88HBL94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTUxY2FjMWNlMmFmZTE5NThiMWZiNmE2MjM3NzE3YjBiNWQ0ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FF67PaiopYbRVTagpWvu/33YiKN VrmvS7ahCRn0Tyf/tJF8k5R6VM1lPloSglIU+9vLFv8PNJLoTIzao5Nh+b3VYWoc IbEcC9dDOO+ROcDhR4+I0PzynD8YoCiqZI55SVJaq+BsVbAWnW9yMlcEFIrvSviw fDzMqrGoV2DX+zOMuEg+9bTFBng5giqODsFn1zXk1zP31aPmbFGctfh3VkBGpYcs u/9Z5pZqlYHykKjhILw5c83Qm19DfTNfo1pFJnMND7pot5CyHSXMGrj6Sce5umvC nQXo5yXjQHgKK0UO1pnXS/eKsuGQq8tFpLJIVyKsetkJvHs7Pi3OTA3s6QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH5RysHOKv4ZWLH7amI3cXsLXUgQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg4MWI3 ZjA4LWRkOTQtNGNkMC1hYTM4LTg1MTJmMTUyYmQzMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgx YjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvN0U1MUNBQzFDRTJB RkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME Ai1CPAMEAo1iKDANBAIAAjAHAwUDKgbpQDANBgkqhkiG9w0BAQsFAAOCAQEAVkL6 Zesr/E5aG1KJqg4oqMhwcCkgWAWCeNlR84fcXCPnbWskPOlLCMnOfkgz8BTeAnVl aIVHpktb9MOcZCuiJ/Y2VnGRGt1BBITwoHNBffa/DJ8A9GGDefRi3Dd8HbLL0jR0 +V58LroO8yOf16FV1vDvxE5r1pStN1BfaoAN7eu3bvtilY59KRkviBOzCIu1yFFm lFLDmxpz2MOQBqoUOc5BVWP6YEYBTYcnv/GMXkVx3IS/DX+mt83IDdMSSMkak1Li G6WEv4znsuWbDsTn9dPWi4URml/5kfPFCSLuYSZzqfJm05pqmDh3SA8YgH8TNhWI GGwKGet4Rd0OC3XJCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:40 2026 by rpki-client