This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer File: fzXVrkF_Re6FBdds6qGzTEWDlKA.cer (raw, json) Hash identifier: JKHwFu1kZtp3TNwIJ7IL+yOruu3I88hwoyJ92reIj1A= Subject key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB86A2CA5A7DEF3700A8F7378ADC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50554 IP: 89.106.160.0/21 IP: 139.28.112.0/22 IP: 185.3.176.0/22 IP: 2a00:1bc8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b8:6a:2c:a5:a7:de:f3:70:0a:8f:73:78:ad:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:bc:a5:4c:54:1f:a3:ba:c9:49:88:6e:fb: b0:16:08:40:e7:bc:82:ba:1f:d3:93:a0:44:4d:4e: 3b:a2:83:53:4e:08:ff:79:d6:2b:65:6d:80:c8:5d: eb:b0:86:2d:99:1f:18:25:76:82:5b:cc:b0:17:aa: d5:01:e8:c3:83:5a:50:de:32:eb:e4:47:ca:71:3b: 7d:a3:5a:20:4d:db:3e:1b:c9:3c:79:ea:95:78:dd: ee:3d:ed:1d:76:8c:ab:97:5b:11:7f:dc:71:7d:aa: d0:da:54:c5:30:eb:13:27:c1:ce:e7:a4:c2:93:5b: 46:14:e1:fc:b6:5b:ac:5f:87:25:d9:19:94:1f:56: b2:f8:31:f0:0d:b9:2d:0e:69:5f:2f:8f:2a:b7:80: 5e:02:6f:76:f2:47:f1:d5:fc:f3:27:d6:4a:c1:28: 32:30:6f:50:8e:11:62:70:88:75:74:6a:8b:26:a6: fa:44:1f:88:69:20:24:03:b3:76:f7:f1:de:41:b1: 67:a2:98:e4:fd:d0:74:f7:c7:21:86:94:b9:6a:c7: 4a:38:8a:9c:e9:0b:6b:07:b8:bb:41:35:ed:5a:93: 96:ce:51:d3:47:7b:4f:0a:cd:2b:f9:21:1a:4e:4c: e7:55:14:5b:50:9f:4f:1e:9d:28:d2:bd:67:e2:2e: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.160.0/21 139.28.112.0/22 185.3.176.0/22 IPv6: 2a00:1bc8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50554 Signature Algorithm: sha256WithRSAEncryption 8b:67:c3:fc:4a:26:11:76:7c:67:0c:97:95:b1:18:5d:99:71: f8:97:60:af:3a:7c:c9:63:45:1b:5b:bd:49:1b:f5:e0:da:41: 27:44:62:5b:5b:99:0b:b6:9c:ff:4a:7a:2d:7b:3e:61:02:a5: 10:a1:46:85:a5:c5:94:0a:95:40:f4:3f:ce:a4:b1:36:74:64: 96:5c:7b:55:9d:59:ec:df:f7:7a:75:b5:f8:5f:2d:03:08:98: 01:e7:13:ad:48:24:3c:23:f7:75:1d:53:f3:98:94:b3:83:7b: 09:b2:f4:70:67:ee:09:d4:97:92:34:09:d3:fe:12:39:ee:5b: af:b9:9b:59:5a:2a:9a:49:fd:e4:60:ae:df:7e:07:aa:17:41: 7a:ce:06:88:af:d9:06:c1:7f:6f:b8:5e:b6:ca:17:35:0d:d6: 4c:d5:f6:c1:20:73:07:bb:7d:53:37:ef:a9:e8:3c:f4:78:b5: 31:4e:85:c6:52:a0:25:ac:ff:79:42:a0:7c:4c:00:5b:5f:5e: d0:21:ce:fc:6a:87:25:f3:96:53:7f:39:a0:95:21:57:2a:c6: c9:2c:48:1f:fa:d2:7d:93:97:a5:4b:0b:2a:eb:cc:24:08:4c: 22:71:b2:8f:a5:c0:b7:48:e0:52:8a:5c:fc:cf:c3:74:40:0d: b5:46:ab:a2 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yrhqLKWn3vNwCo9zeK3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjM1ZDVhZTQxN2Y0NWVlODUwNWQ3NmNlYWExYjM0YzQ1ODM5NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiq8pUxUH6O6yUmIbvuwFghA57yC uh/Tk6BETU47ooNTTgj/edYrZW2AyF3rsIYtmR8YJXaCW8ywF6rVAejDg1pQ3jLr 5EfKcTt9o1ogTds+G8k8eeqVeN3uPe0ddoyrl1sRf9xxfarQ2lTFMOsTJ8HO56TC k1tGFOH8tlusX4cl2RmUH1ay+DHwDbktDmlfL48qt4BeAm928kfx1fzzJ9ZKwSgy MG9QjhFicIh1dGqLJqb6RB+IaSAkA7N29/HeQbFnopjk/dB098chhpS5asdKOIqc 6QtrB7i7QTXtWpOWzlHTR3tPCs0r+SEaTkznVRRbUJ9PHp0o0r1n4i5MZwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFH811a5Bf0XuhQXXbOqhs0xFg5SgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2M1NDY3 Yi0zOTYyLTRiNzQtYWUwZC0zNDQ3M2JjOTFkODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYzU0Njdi LTM5NjItNGI3NC1hZTBkLTM0NDczYmM5MWQ4MC8xL2Z6WFZya0ZfUmU2RkJkZHM2 cUd6VEVXRGxLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDWWqgAwQCixxwAwQCuQOwMA0EAgACMAcDBQMq ABvIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFejANBgkqhkiG9w0BAQsFAAOC AQEAi2fD/EomEXZ8ZwyXlbEYXZlx+Jdgrzp8yWNFG1u9SRv14NpBJ0RiW1uZC7ac /0p6LXs+YQKlEKFGhaXFlAqVQPQ/zqSxNnRkllx7VZ1Z7N/3enW1+F8tAwiYAecT rUgkPCP3dR1T85iUs4N7CbL0cGfuCdSXkjQJ0/4SOe5br7mbWVoqmkn95GCu334H qhdBes4GiK/ZBsF/b7hetsoXNQ3WTNX2wSBzB7t9Uzfvqeg89Hi1MU6FxlKgJaz/ eUKgfEwAW19e0CHO/GqHJfOWU385oJUhVyrGySxIH/rSfZOXpUsLKuvMJAhMInGy j6XAt0jgUopc/M/DdEANtUarog== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:52 2026 by rpki-client