This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer File: rFxTEhWE19himH8m_3vtWuE4FqE.cer (raw, json) Hash identifier: Wz6c45f2W9YEjlIfeBoNUSms3DXp7ZMnFWypKXH2S6s= Subject key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105A274C60710160C02D01C139C859 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212735 IP: 193.189.102.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5a:27:4c:60:71:01:60:c0:2d:01:c1:39:c8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:63:d3:6e:b1:e5:c9:8d:e5:f6:9f:0f:a5: b8:43:a0:40:7c:01:23:63:5a:03:5f:70:7f:35:06: b8:47:c5:1b:74:01:a2:cf:e1:66:73:ad:99:ae:b1: 14:b7:4e:fd:2c:7b:d5:14:54:bf:14:57:37:49:01: 86:26:e7:ca:d1:25:27:e0:70:2d:1b:ca:4b:fb:6a: 67:d6:d3:82:52:c3:45:70:11:e7:86:7e:1b:26:78: a6:5f:ec:d7:c8:ec:9c:f2:a0:a3:37:51:eb:a5:e4: 2f:4f:13:2c:c9:ec:ec:19:17:8e:78:ef:25:23:d2: e2:d3:c5:ce:cf:6b:2d:09:d8:3c:05:22:4a:c3:c4: 93:21:dd:3b:25:6a:2c:2b:22:75:4e:2e:c3:ac:cd: 6f:84:67:f7:57:e4:50:fd:69:8b:5c:e1:80:22:eb: 68:90:c3:c4:fb:7c:e2:f0:29:fd:b1:ca:42:0a:e2: 9b:e6:11:e5:70:6d:ab:c0:0b:b8:af:bf:23:19:de: 7a:7c:f4:90:df:4c:18:b2:60:98:a4:1d:47:1b:15: bc:5b:ec:e0:97:8f:c1:54:49:da:ce:a9:83:6e:21: 49:c7:a5:37:6a:4b:56:80:3d:91:95:0b:41:5b:2a: 9f:cf:16:96:7a:50:11:45:5b:55:7b:68:a3:75:82: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.102.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212735 Signature Algorithm: sha256WithRSAEncryption 3f:ac:bc:aa:fd:fc:86:6f:71:5e:24:9c:49:74:07:41:54:96: 47:c0:69:d3:e9:4b:a1:4f:4c:fd:73:6f:1b:e4:22:6c:32:79: 7f:bd:b4:57:69:a1:a6:6d:6c:82:42:66:fb:e9:aa:d1:32:d8: 90:c3:0c:17:1e:1f:09:5a:bc:38:f2:74:fa:95:b8:0f:ea:e6: 6e:98:05:c5:d8:db:21:6c:bd:10:67:b8:07:ae:6f:15:dc:f0: 01:eb:22:3a:c0:6e:ad:ae:5d:5f:79:29:b0:eb:87:c5:48:d0: 3f:fa:1a:f9:5f:d2:cb:15:ed:42:87:bf:a2:61:50:89:68:a5: 94:63:30:f7:15:5d:d7:b6:a5:dd:ef:2f:e7:4e:5f:ab:c4:df: 83:5c:22:d2:1a:c5:05:1d:e1:0e:99:e3:db:d3:ad:2f:99:37: 91:e7:87:b6:17:72:a0:da:f1:4d:ec:dc:5f:9e:0a:69:f7:e1: cb:14:49:94:a8:a3:3f:e6:4c:52:55:93:14:ea:b4:0c:6a:b8: 7a:57:51:fa:10:63:62:2b:2d:93:e9:eb:37:cc:cc:44:36:f0: b7:5a:8d:90:8a:10:f4:cb:7f:76:ce:fd:24:c5:a1:24:db:89: a7:2d:d0:85:5a:d2:1a:0d:87:53:d0:d1:37:22:53:8f:c6:f1: ef:a3:c7:19 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EFonTGBxAWDALQHBOchZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVjNTMxMjE1ODRkN2Q4NjI5ODdmMjZmZjdiZWQ1YWUxMzgxNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtupj026x5cmN5fafD6W4Q6BAfAEj Y1oDX3B/NQa4R8UbdAGiz+Fmc62ZrrEUt079LHvVFFS/FFc3SQGGJufK0SUn4HAt G8pL+2pn1tOCUsNFcBHnhn4bJnimX+zXyOyc8qCjN1HrpeQvTxMsyezsGReOeO8l I9Li08XOz2stCdg8BSJKw8STId07JWosKyJ1Ti7DrM1vhGf3V+RQ/WmLXOGAIuto kMPE+3zi8Cn9scpCCuKb5hHlcG2rwAu4r78jGd56fPSQ30wYsmCYpB1HGxW8W+zg l4/BVEnazqmDbiFJx6U3aktWgD2RlQtBWyqfzxaWelARRVtVe2ijdYIWhQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKxcUxIVhNfYYph/Jv977VrhOBahMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzEwN2Zk ZC1kMmE1LTQ1MGMtYjAzMS0yNWJmMjUwMTg0ODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMTA3ZmRk LWQyYTUtNDUwYy1iMDMxLTI1YmYyNTAxODQ4OS8xL3JGeFRFaFdFMTloaW1IOG1f M3Z0V3VFNEZxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwb1mMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+/zANBgkqhkiG9w0BAQsFAAOCAQEAP6y8qv38hm9xXiScSXQHQVSWR8Bp0+lL oU9M/XNvG+QibDJ5f720V2mhpm1sgkJm++mq0TLYkMMMFx4fCVq8OPJ0+pW4D+rm bpgFxdjbIWy9EGe4B65vFdzwAesiOsBura5dX3kpsOuHxUjQP/oa+V/SyxXtQoe/ omFQiWillGMw9xVd17al3e8v505fq8Tfg1wi0hrFBR3hDpnj29OtL5k3keeHthdy oNrxTezcX54KaffhyxRJlKijP+ZMUlWTFOq0DGq4eldR+hBjYistk+nrN8zMRDbw t1qNkIoQ9Mt/ds79JMWhJNuJpy3QhVrSGg2HU9DRNyJTj8bx76PHGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:10 2026 by rpki-client