This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer File: fU--VZRwf9z5QCXqFVcaaMJNqas.cer (raw, json) Hash identifier: 7C+dJTFsE1QpNuO74MDMlAz1mBO7CxWEO9bN/Ku8KII= Subject key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C21B9F0A55AE991A53D29D215FE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197782 IP: 195.160.168.0/23 IP: 2001:67c:275c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c2:1b:9f:0a:55:ae:99:1a:53:d2:9d:21:5f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:f7:ed:f0:ba:07:6c:20:d9:b2:ca:dc:0e: 58:be:e5:93:6f:5f:71:74:85:d2:4b:e1:49:f9:5c: 6e:f7:0e:7d:d2:ee:8a:d2:18:70:ce:32:9e:9e:f0: 7b:7b:c6:34:46:27:32:79:32:d9:7f:34:9b:1b:6f: 70:9e:2d:14:e1:80:ae:fb:71:2a:57:ca:84:2e:fc: 82:b8:97:bf:3b:15:69:35:48:25:4a:da:29:e6:80: 4c:24:5f:f6:45:78:2a:56:fb:dd:c1:69:ee:8c:ad: d4:63:5f:e4:60:b3:fd:fb:98:4c:33:21:9e:ac:b4: c0:76:2d:a8:c2:fa:74:9d:2f:3d:0b:2c:9b:3d:f0: f4:36:f7:07:fe:f5:c2:c3:b8:02:54:88:e7:3c:31: 38:b6:6c:e6:6c:9f:1b:8c:d2:46:a8:b5:21:78:be: 9c:cb:d8:40:35:d1:8c:7d:4a:7a:f9:91:06:b9:df: d5:d6:7c:cb:56:41:c2:e4:bf:15:03:05:9b:b1:f6: 49:5d:f6:88:41:df:bb:9f:3b:06:28:8d:91:68:cc: 35:9d:c2:d9:de:7e:a1:36:d1:4e:ae:62:5b:98:27: 1c:b6:bb:f5:cf:67:f1:1c:3c:ca:d5:69:b1:bc:79: 52:2c:8f:14:15:a1:5a:66:4b:c5:ed:d3:a1:e2:fd: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.168.0/23 IPv6: 2001:67c:275c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197782 Signature Algorithm: sha256WithRSAEncryption 42:cf:ba:9c:bd:d9:c3:f2:53:0e:87:85:11:db:01:87:85:bf: db:2b:38:aa:be:31:41:05:d5:86:47:cd:a8:4b:63:0d:a4:1a: 4e:62:b2:c6:ad:11:67:6e:b6:07:2c:e0:ce:bb:02:55:06:c3: c0:bd:91:07:28:a6:e3:29:59:8e:30:2f:85:2e:61:f7:98:53: 59:25:71:b9:58:c0:4d:75:01:a5:8f:10:79:27:de:46:b1:e1: b0:29:c4:e7:bc:b0:41:88:ff:c7:55:39:af:f8:e8:c6:d7:7b: c3:2f:05:db:c1:df:3f:67:ee:ca:82:ce:6c:cf:ac:41:02:40: 4e:08:9f:cd:61:6a:50:9d:a8:27:e7:ec:98:ce:b0:0c:8e:c0: 2c:22:36:a3:e4:1c:44:d9:73:dd:1a:ed:db:db:09:53:0c:1b: 3f:b3:0d:ff:f7:2b:f3:91:38:5e:a0:f5:38:34:0a:d4:5c:01: cf:62:9a:44:51:f7:04:a9:b4:e1:d3:08:c3:98:c2:c0:40:89: c5:bb:a2:45:0c:7f:de:5e:f9:8b:4a:47:c2:f1:57:8a:73:dc: 97:68:7b:af:a9:a6:99:2b:ef:02:a4:f0:fc:53:aa:f5:11:f0: 9d:d3:c9:60:5b:fe:25:ed:ff:cb:fe:9e:7b:2d:13:8e:8b:d5: 38:4f:8c:68 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5EMIbnwpVrpkaU9KdIV/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDRmYmU1NTk0NzA3ZmRjZjk0MDI1ZWExNTU3MWE2OGMyNGRhOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2b37fC6B2wg2bLK3A5YvuWTb19x dIXSS+FJ+Vxu9w590u6K0hhwzjKenvB7e8Y0RicyeTLZfzSbG29wni0U4YCu+3Eq V8qELvyCuJe/OxVpNUglStop5oBMJF/2RXgqVvvdwWnujK3UY1/kYLP9+5hMMyGe rLTAdi2owvp0nS89CyybPfD0NvcH/vXCw7gCVIjnPDE4tmzmbJ8bjNJGqLUheL6c y9hANdGMfUp6+ZEGud/V1nzLVkHC5L8VAwWbsfZJXfaIQd+7nzsGKI2RaMw1ncLZ 3n6hNtFOrmJbmCcctrv1z2fxHDzK1WmxvHlSLI8UFaFaZkvF7dOh4v3wrQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFH1PvlWUcH/c+UAl6hVXGmjCTamrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2JmN2Ji Yi02YjEyLTQ3NGMtOTNiYy03YzczMDU5Mjc4ZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYmY3YmJi LTZiMTItNDc0Yy05M2JjLTdjNzMwNTkyNzhlZi8xL2ZVLS1WWlJ3Zjl6NVFDWHFG VmNhYU1KTnFhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw6CoMA8EAgACMAkDBwAgAQZ8J1wwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwSWMA0GCSqGSIb3DQEBCwUAA4IBAQBCz7qcvdnD 8lMOh4UR2wGHhb/bKziqvjFBBdWGR82oS2MNpBpOYrLGrRFnbrYHLODOuwJVBsPA vZEHKKbjKVmOMC+FLmH3mFNZJXG5WMBNdQGljxB5J95GseGwKcTnvLBBiP/HVTmv +OjG13vDLwXbwd8/Z+7Kgs5sz6xBAkBOCJ/NYWpQnagn5+yYzrAMjsAsIjaj5BxE 2XPdGu3b2wlTDBs/sw3/9yvzkTheoPU4NArUXAHPYppEUfcEqbTh0wjDmMLAQInF u6JFDH/eXvmLSkfC8VeKc9yXaHuvqaaZK+8CpPD8U6r1EfCd08lgW/4l7f/L/p57 LROOi9U4T4xo -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:02 2026 by rpki-client