This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer File: fySblURiBoP5SziKdVGmimST7RI.cer (raw, json) Hash identifier: s3lZLSIU/y7xCjAX2AbsCCooxJ8XycZ8vV4HK3QkZlY= Subject key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127F872B33BEF584A90FBE646B3D9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213665 IP: 2a14:ee00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7f:87:2b:33:be:f5:84:a9:0f:be:64:6b:3d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f249b9544620683f94b388a7551a68a6493ed12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:72:50:69:9f:80:9b:c0:00:70:cf:39:76: b4:bb:b0:68:3c:6c:a7:24:3a:c8:ae:74:87:ad:8b: 62:25:7d:44:40:2c:5b:67:e4:c6:aa:d2:e2:35:e1: 7e:ef:9e:31:29:b1:87:b3:b0:a4:f7:b3:6f:22:03: f5:9b:59:eb:5b:77:d0:cf:47:ab:70:bf:a9:65:12: f5:0a:6b:92:68:d9:7f:03:f0:9b:1d:d7:81:f1:71: fa:be:76:4d:e0:ab:4b:73:14:05:a9:ae:90:93:60: 87:ce:bd:54:f5:be:1d:e3:b2:91:f5:ef:7c:91:d8: 82:bd:e0:a3:6f:b3:cd:0c:6f:b4:97:9e:23:af:5d: 0a:0a:ca:40:0b:93:ce:b9:a3:03:8a:a4:69:11:56: b2:b2:2d:31:ce:8b:20:33:48:a1:c2:8e:cb:06:6a: 18:60:de:76:a9:10:7b:c4:ac:fc:af:e6:13:d4:47: 5d:ef:6b:55:7e:79:07:25:da:8b:0a:35:09:27:5a: 0e:a2:02:19:ba:b6:30:d1:d1:9c:cb:85:62:b6:11: 96:d7:3c:7f:d7:1c:da:02:60:d7:f7:00:c2:14:77: 70:0e:07:c4:06:99:79:99:f7:1e:b7:dc:d6:32:49: e4:a4:47:24:bf:7c:cd:e8:a3:e1:a2:fb:be:21:b0: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ee00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213665 Signature Algorithm: sha256WithRSAEncryption 2d:4c:7f:94:cd:c8:10:b2:1a:85:36:a8:1f:0f:b8:1d:e7:87: 38:21:5e:b5:ee:ac:f4:95:a5:dc:79:ed:17:d0:8a:b9:a5:50: 42:3c:27:ad:08:2e:96:e2:14:ea:d0:1b:ff:87:07:3a:c3:77: eb:9a:41:2e:64:45:25:15:40:55:bd:a0:18:65:64:90:f1:ae: 01:fa:0e:38:92:8f:6a:a0:5f:fd:53:2e:78:8a:1d:32:37:19: 2e:6c:f2:1b:6e:4c:70:de:22:42:73:8a:89:25:03:e1:6e:8c: 4b:95:b8:ba:cf:bd:bf:92:8b:d7:3a:a3:af:c0:ff:df:d3:fd: c1:74:24:c0:9a:89:5b:7f:43:13:2f:59:82:89:68:3b:00:ad: 7b:25:18:dd:d7:e6:e5:9d:03:03:66:ed:89:88:fc:38:88:fc: b5:1b:55:43:7f:b3:75:50:97:66:46:ca:69:15:85:51:3f:ab: 13:7d:44:fa:54:67:96:da:22:30:3b:a5:ac:5a:7f:f5:db:c2: 56:34:28:91:0a:9d:8e:d6:ec:a5:04:a3:d8:e9:90:7c:be:cb: ba:c1:15:f4:08:f6:9f:1d:5e:3c:6a:44:55:8b:5c:e9:bd:e5: bf:4c:36:0d:22:2c:cf:a1:5c:fb:1c:2d:0b:ae:26:fd:26:33: 18:38:0f:05 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8En+HKzO+9YSpD75kaz2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjI0OWI5NTQ0NjIwNjgzZjk0YjM4OGE3NTUxYTY4YTY0OTNlZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KVyUGmfgJvAAHDPOXa0u7BoPGyn JDrIrnSHrYtiJX1EQCxbZ+TGqtLiNeF+754xKbGHs7Ck97NvIgP1m1nrW3fQz0er cL+pZRL1CmuSaNl/A/CbHdeB8XH6vnZN4KtLcxQFqa6Qk2CHzr1U9b4d47KR9e98 kdiCveCjb7PNDG+0l54jr10KCspAC5POuaMDiqRpEVaysi0xzosgM0ihwo7LBmoY YN52qRB7xKz8r+YT1Edd72tVfnkHJdqLCjUJJ1oOogIZurYw0dGcy4VithGW1zx/ 1xzaAmDX9wDCFHdwDgfEBpl5mfcet9zWMknkpEckv3zN6KPhovu+IbBXMQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFH8km5VEYgaD+Us4inVRpopkk+0SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzdhYTA0 ZS00ODA3LTQ5ODgtOTEwMy04NDIzOTdlMzA2NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvN2FhMDRl LTQ4MDctNDk4OC05MTAzLTg0MjM5N2UzMDY0My8xL2Z5U2JsVVJpQm9QNVN6aUtk VkdtaW1TVDdSSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTuADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQqEwDQYJKoZIhvcNAQELBQADggEBAC1Mf5TNyBCyGoU2qB8PuB3nhzghXrXu rPSVpdx57RfQirmlUEI8J60ILpbiFOrQG/+HBzrDd+uaQS5kRSUVQFW9oBhlZJDx rgH6DjiSj2qgX/1TLniKHTI3GS5s8htuTHDeIkJzioklA+FujEuVuLrPvb+Si9c6 o6/A/9/T/cF0JMCaiVt/QxMvWYKJaDsArXslGN3X5uWdAwNm7YmI/DiI/LUbVUN/ s3VQl2ZGymkVhVE/qxN9RPpUZ5baIjA7paxaf/XbwlY0KJEKnY7W7KUEo9jpkHy+ y7rBFfQI9p8dXjxqRFWLXOm95b9MNg0iLM+hXPscLQuuJv0mMxg4DwU= -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:07 2026 by rpki-client