This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer File: fPxZzhNuPpOobeVfBdSaWeFcu78.cer (raw, json) Hash identifier: ss2Z2AJzO8UgQ2NHBcMBCvFPRpwYYSdiWquw2Wi1xB4= Subject key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8DD0F43215CA397AF4463DCC7859 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204266 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:d0:f4:32:15:ca:39:7a:f4:46:3d:cc:78:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:b5:84:67:da:ca:65:30:22:6f:58:f2:58: 98:1f:bf:c0:54:df:d2:3d:4f:46:88:54:b1:b7:4b: 28:e2:ed:f5:61:cb:37:00:91:ff:6a:88:fd:26:79: 20:d7:4a:e0:8d:8c:c3:c9:ae:14:60:d7:2f:47:11: 05:3d:41:6c:27:21:41:d5:a7:3a:f6:4f:e9:38:1d: e0:e3:d0:3f:6f:25:15:8f:35:b8:a4:88:07:21:66: 04:96:37:f0:b3:d1:e4:7c:fb:42:21:d7:79:7a:2c: 22:34:54:c4:5f:07:02:d1:c7:e9:8e:22:0b:1a:05: 61:72:12:6b:3f:94:66:dd:df:3d:d4:4e:5e:22:6e: 37:86:18:e9:cd:e8:b0:19:f7:29:c7:77:8c:3a:c9: f2:5a:84:ad:bb:74:d8:73:d9:21:f3:96:16:f3:b5: cd:3f:81:fe:45:72:ca:f7:2b:b8:8e:92:59:30:08: 75:3a:70:44:bc:c4:e0:98:7f:4c:5c:cf:d2:1c:e7: 77:02:3f:8c:66:e3:14:94:86:f0:9d:b1:9c:dc:17: 69:63:0e:8a:1c:b1:4f:ac:cf:65:ec:ea:a8:e3:e0: ae:52:31:f0:db:d6:e9:6e:c0:0e:a7:78:33:fc:9b: 8a:2e:3f:42:52:f1:a2:ca:f7:16:6c:ab:23:98:c2: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204266 Signature Algorithm: sha256WithRSAEncryption 75:0f:bd:44:bb:65:54:b2:c3:0b:8f:b3:c5:90:39:e6:66:39: 62:d6:6d:47:cb:ae:fe:47:17:35:11:8b:62:92:f5:59:eb:58: f0:4a:6e:7b:43:fb:44:57:c2:21:71:75:ad:a7:fa:c0:d9:51: fc:21:a9:1d:fd:76:4b:37:76:91:59:10:3a:0a:e6:71:bf:6d: cc:aa:05:ee:6a:04:68:d6:33:26:07:4e:8e:2d:5b:e6:c3:97: 9c:af:f1:1f:f5:3f:64:d0:c5:55:62:c9:31:9a:b2:71:14:68: 9e:8b:54:4b:f1:e5:c0:ad:f9:96:39:4d:c4:67:e7:44:f2:5e: c2:8d:1a:e9:dc:f0:d9:5a:59:9c:c9:07:38:29:f7:9b:71:01: a2:3c:df:06:0e:ce:e3:c1:87:96:56:3e:c7:a9:e7:b9:da:e5: 01:04:76:9a:75:cf:83:6f:a1:9a:de:3f:4e:a3:5b:f9:2a:c1: d2:5e:f9:34:6f:e5:7e:28:92:11:2b:ee:df:3e:d3:89:f2:10: 38:12:7a:e9:6c:17:db:17:4b:b6:c2:fb:22:c3:a6:79:85:8c: d1:22:0c:a5:98:96:51:e9:f8:42:6d:bb:aa:a4:2d:76:1d:fe: 27:13:a5:d7:38:5b:c8:22:e1:51:7f:b2:c8:94:78:3b:f5:d0: b8:cb:3e:ce -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6W43Q9DIVyjl69EY9zHhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2ZjNTljZTEzNmUzZTkzYTg2ZGU1NWYwNWQ0OWE1OWUxNWNiYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3m1hGfaymUwIm9Y8liYH7/AVN/S PU9GiFSxt0so4u31Ycs3AJH/aoj9Jnkg10rgjYzDya4UYNcvRxEFPUFsJyFB1ac6 9k/pOB3g49A/byUVjzW4pIgHIWYEljfws9HkfPtCIdd5eiwiNFTEXwcC0cfpjiIL GgVhchJrP5Rm3d891E5eIm43hhjpzeiwGfcpx3eMOsnyWoStu3TYc9kh85YW87XN P4H+RXLK9yu4jpJZMAh1OnBEvMTgmH9MXM/SHOd3Aj+MZuMUlIbwnbGc3BdpYw6K HLFPrM9l7Oqo4+CuUjHw29bpbsAOp3gz/JuKLj9CUvGiyvcWbKsjmMKRPwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzFhY2Qz Zi02ZjIyLTQzMWMtYTAzYy04MDg5NWY4OGY1ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMWFjZDNm LTZmMjItNDMxYy1hMDNjLTgwODk1Zjg4ZjVkNS8xL2ZQeFp6aE51UHBPb2JlVmZC ZFNhV2VGY3U3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMd6jANBgkqhkiG9w0BAQsFAAOCAQEAdQ+9RLtlVLLD C4+zxZA55mY5YtZtR8uu/kcXNRGLYpL1WetY8Epue0P7RFfCIXF1raf6wNlR/CGp Hf12Szd2kVkQOgrmcb9tzKoF7moEaNYzJgdOji1b5sOXnK/xH/U/ZNDFVWLJMZqy cRRonotUS/HlwK35ljlNxGfnRPJewo0a6dzw2VpZnMkHOCn3m3EBojzfBg7O48GH llY+x6nnudrlAQR2mnXPg2+hmt4/TqNb+SrB0l75NG/lfiiSESvu3z7TifIQOBJ6 6WwX2xdLtsL7IsOmeYWM0SIMpZiWUen4Qm27qqQtdh3+JxOl1zhbyCLhUX+yyJR4 O/XQuMs+zg== -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:42 2026 by rpki-client