This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer File: fcVVNSMj28woe4fg1qSBSmOrvUY.cer (raw, json) Hash identifier: SHcUSL2/7OPh0y4vtSNgx5N/6/V1MuBb/GrIUwwb1GA= Subject key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4DD7A6D95A97408688EA8069BE86B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216036 IP: 185.203.64.0/24 IP: 2a13:e680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dd:7a:6d:95:a9:74:08:68:8e:a8:06:9b:e8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:f8:cd:11:da:d0:2f:69:7b:93:0d:72:03: 48:56:90:af:e8:20:e2:8c:dd:aa:ad:6e:60:83:cc: 6f:86:b6:de:31:a9:66:58:4e:08:19:73:47:b9:1f: d6:03:36:1b:b0:20:81:c0:b9:39:96:bc:b1:8e:f6: 14:e7:a1:67:93:2b:ab:40:b7:1c:d4:fa:9d:e2:e2: 87:cc:1f:78:a9:fa:7e:ac:bf:6b:44:95:c8:68:b0: be:11:be:a7:df:ae:85:f4:e1:5f:68:56:36:22:4c: 68:65:0a:34:a6:49:fc:89:05:84:6d:7c:0b:db:ba: 72:e2:8a:67:d8:a5:45:31:d7:0f:a7:41:41:2d:63: 53:e0:2c:35:7f:f0:99:f3:0b:c2:38:d9:81:2d:0f: 3d:dc:a5:54:a2:2e:0d:2b:64:e0:22:01:40:57:e7: 22:5f:26:13:79:d1:3d:96:e4:0b:38:9d:bc:f2:14: 9f:2b:c1:36:be:66:8d:1b:62:ad:2d:71:4a:19:35: 08:cf:29:b4:92:2e:2c:66:53:35:d3:e7:ce:ef:6b: c1:23:65:c9:b5:0e:83:30:59:4a:b5:49:a1:66:bf: bd:a3:ee:0f:c2:ec:15:31:6f:8d:72:03:8e:0d:4c: 3c:0a:62:e0:eb:ca:10:26:30:e9:c4:85:cb:15:23: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.64.0/24 IPv6: 2a13:e680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216036 Signature Algorithm: sha256WithRSAEncryption 04:44:20:1f:9f:39:a5:e1:f0:eb:c5:aa:cb:55:f7:3a:44:a7: 68:62:39:a6:6f:cb:33:b5:6f:e8:7b:2d:5f:2c:99:85:46:66: 84:23:2d:83:fb:83:7f:b8:33:ff:25:81:60:fd:4b:ec:18:b1: 24:d4:72:39:b6:ba:4f:9a:ac:97:7b:bd:58:91:08:2d:8c:61: 27:d5:93:ee:84:83:68:57:77:79:94:54:03:62:70:a7:d8:20: 9d:8b:65:13:a0:06:6a:85:3a:b6:b8:c0:46:32:ce:ab:d0:1c: 4f:10:f4:ff:17:12:c1:8a:2d:ff:ab:b5:d4:e2:2c:12:2d:cf: 79:bf:53:1b:bd:a2:4c:f5:b2:3c:97:8a:30:46:6e:4b:7f:14: b5:37:ca:60:93:0b:d9:b9:f4:d1:a5:31:74:4c:fd:c9:04:c3: 4c:97:2e:d6:17:17:74:51:3c:90:ba:f0:f2:51:d9:8e:a8:7e: b0:d0:f8:2c:f8:d8:33:4a:90:88:98:38:10:5f:ac:c4:84:dd: 1f:dc:14:2d:8a:a1:a7:50:fe:89:7b:17:6c:70:84:72:05:da: a7:5f:22:a3:65:ec:1f:bd:ec:71:81:63:3c:59:35:1b:22:c4: 37:4d:15:ba:f5:84:cc:cd:8c:c8:64:b4:8b:5d:53:71:67:51: f1:40:3f:11 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pN16bZWpdAhojqgGm+hrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGM1NTUzNTIzMjNkYmNjMjg3Yjg3ZTBkNmE0ODE0YTYzYWJiZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIr4zRHa0C9pe5MNcgNIVpCv6CDi jN2qrW5gg8xvhrbeMalmWE4IGXNHuR/WAzYbsCCBwLk5lryxjvYU56FnkyurQLcc 1Pqd4uKHzB94qfp+rL9rRJXIaLC+Eb6n366F9OFfaFY2IkxoZQo0pkn8iQWEbXwL 27py4opn2KVFMdcPp0FBLWNT4Cw1f/CZ8wvCONmBLQ893KVUoi4NK2TgIgFAV+ci XyYTedE9luQLOJ288hSfK8E2vmaNG2KtLXFKGTUIzym0ki4sZlM10+fO72vBI2XJ tQ6DMFlKtUmhZr+9o+4PwuwVMW+NcgOODUw8CmLg68oQJjDpxIXLFSMfBwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH3FVTUjI9vMKHuH4NakgUpjq71GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzdhMWFl ZS02NzFiLTRmMzktYjRkZC0yMTJhOWYzMTA2MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvN2ExYWVl LTY3MWItNGYzOS1iNGRkLTIxMmE5ZjMxMDYyMi8xL2ZjVlZOU01qMjh3b2U0Zmcx cVNCU21PcnZVWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuctAMA0EAgACMAcDBQMqE+aAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNL5DANBgkqhkiG9w0BAQsFAAOCAQEABEQgH585peHw 68Wqy1X3OkSnaGI5pm/LM7Vv6HstXyyZhUZmhCMtg/uDf7gz/yWBYP1L7BixJNRy Oba6T5qsl3u9WJEILYxhJ9WT7oSDaFd3eZRUA2Jwp9ggnYtlE6AGaoU6trjARjLO q9AcTxD0/xcSwYot/6u11OIsEi3Peb9TG72iTPWyPJeKMEZuS38UtTfKYJML2bn0 0aUxdEz9yQTDTJcu1hcXdFE8kLrw8lHZjqh+sND4LPjYM0qQiJg4EF+sxITdH9wU LYqhp1D+iXsXbHCEcgXap18io2XsH73scYFjPFk1GyLEN00VuvWEzM2MyGS0i11T cWdR8UA/EQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:27:20 2026 by rpki-client