This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer File: fzErCdH2kPJXAL1dzwfJGAxelmM.cer (raw, json) Hash identifier: XE0/FdfHEIDv/gd3478xdD6vflwcKasmmJnJVoHQH7Y= Subject key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB71FD5F6C2A63617D5981703D0A3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213679 IP: 2001:678:364::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:fd:5f:6c:2a:63:61:7d:59:81:70:3d:0a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:6e:2d:a1:30:8c:f5:52:cc:65:e8:6a:a2: b6:48:d6:71:b7:c7:7c:6d:67:d6:9c:9c:02:0a:69: 5e:c2:75:9c:86:d5:b9:f6:fc:75:e1:09:17:61:16: 26:9d:11:c0:ef:71:61:e0:4d:44:a2:a5:3f:b0:63: 92:a9:5d:0d:22:ac:a2:fa:73:05:9a:3a:73:81:4d: e0:2a:26:a3:e1:af:4d:d1:ae:bd:91:41:df:a9:1c: 87:0b:a4:ef:d2:b2:ce:b9:37:12:d2:8f:be:4c:e5: 5b:a2:13:25:2c:92:b9:63:2d:9d:3e:70:9f:51:6a: 81:c8:3b:d2:f0:20:37:d9:88:d9:5a:41:c7:bf:69: c7:13:75:17:f3:c2:ad:0b:bf:84:af:51:c1:29:f5: 2e:c8:65:29:81:90:9b:58:4b:cd:50:81:ab:fb:b8: 9a:2f:f9:ca:29:3c:24:8e:05:91:7a:f9:9f:5b:44: b6:2b:8a:68:3e:2a:35:82:4f:00:a6:09:4b:2e:5e: 3b:b2:78:43:11:f6:55:c6:d2:a3:fd:23:95:61:f9: 97:b4:ee:0c:d7:96:fb:4f:6d:a6:09:9e:15:c4:df: a3:6f:e5:68:b3:9d:dd:9f:d7:32:a6:9d:ce:78:68: 70:54:0d:c0:9e:f7:c4:65:d0:35:42:23:0e:7c:98: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:364::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213679 Signature Algorithm: sha256WithRSAEncryption 53:05:ff:ab:80:73:d9:6d:1d:df:30:5e:87:94:dd:3b:0a:71: d9:c3:13:b2:6d:a0:52:04:b9:c1:24:ba:c8:5c:1a:bc:98:db: 41:f1:9b:d8:55:ea:c4:a8:2b:1c:96:5b:66:5c:05:0f:31:0d: 3e:2c:78:91:59:33:51:4f:ca:61:f8:70:f9:24:4c:3c:81:4e: 4c:7c:35:b1:20:98:b4:a5:49:a8:07:fb:1c:fc:09:77:68:d1: 18:c8:6d:a5:12:53:ff:42:49:2b:dc:9a:64:52:29:41:10:e8: 74:c6:14:6c:a9:f2:30:a9:f0:3b:f4:84:6b:b1:d6:ed:69:43: e0:36:51:df:d8:7b:ad:9d:0f:3b:a0:f9:65:22:47:29:ab:a1: c8:80:e0:4b:97:53:72:ec:46:48:c0:d7:58:ab:34:3d:41:85: 70:bc:93:73:36:78:28:d7:96:a2:d9:c0:c1:30:6e:b1:68:10: 35:1a:f2:75:e9:f1:42:38:ab:d6:8d:1b:ee:a8:09:2a:d3:f6: 3e:b3:50:be:16:4b:49:a6:a3:82:bd:11:c1:5a:22:a8:d4:bc: a3:99:4d:0d:4b:28:a7:18:a1:7a:6a:bf:28:1f:b6:a8:b2:bf: bc:18:30:80:31:51:25:85:7b:0f:9c:49:9d:96:10:58:f3:96: 85:e0:e1:cf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt263H9X2wqY2F9WYFwPQo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjMxMmIwOWQxZjY5MGYyNTcwMGJkNWRjZjA3YzkxODBjNWU5NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1tuLaEwjPVSzGXoaqK2SNZxt8d8 bWfWnJwCCmlewnWchtW59vx14QkXYRYmnRHA73Fh4E1EoqU/sGOSqV0NIqyi+nMF mjpzgU3gKiaj4a9N0a69kUHfqRyHC6Tv0rLOuTcS0o++TOVbohMlLJK5Yy2dPnCf UWqByDvS8CA32YjZWkHHv2nHE3UX88KtC7+Er1HBKfUuyGUpgZCbWEvNUIGr+7ia L/nKKTwkjgWRevmfW0S2K4poPio1gk8ApglLLl47snhDEfZVxtKj/SOVYfmXtO4M 15b7T22mCZ4VxN+jb+Vos53dn9cypp3OeGhwVA3AnvfEZdA1QiMOfJg7DQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFH8xKwnR9pDyVwC9Xc8HyRgMXpZjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzI5ZGFj OS05YTE1LTQ2NjEtYWY3OC0xNTIyZTI5NjRmY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMjlkYWM5 LTlhMTUtNDY2MS1hZjc4LTE1MjJlMjk2NGZjZS8xL2Z6RXJDZEgya1BKWEFMMWR6 d2ZKR0F4ZWxtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeANkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNCrzANBgkqhkiG9w0BAQsFAAOCAQEAUwX/q4Bz2W0d3zBeh5TdOwpx2cMT sm2gUgS5wSS6yFwavJjbQfGb2FXqxKgrHJZbZlwFDzENPix4kVkzUU/KYfhw+SRM PIFOTHw1sSCYtKVJqAf7HPwJd2jRGMhtpRJT/0JJK9yaZFIpQRDodMYUbKnyMKnw O/SEa7HW7WlD4DZR39h7rZ0PO6D5ZSJHKauhyIDgS5dTcuxGSMDXWKs0PUGFcLyT czZ4KNeWotnAwTBusWgQNRrydenxQjir1o0b7qgJKtP2PrNQvhZLSaajgr0RwVoi qNS8o5lNDUsopxihemq/KB+2qLK/vBgwgDFRJYV7D5xJnZYQWPOWheDhzw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:07 2026 by rpki-client