This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer (raw, json) Hash identifier: DOnzayFFcWoGoqf3P/MBfF0Lzz98fo7zTReqoIyK3AU= Subject key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA3455F64CFBF6CF8E7F5A67FD26E1875 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 09 Jan 2026 14:59:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.57.72.0/22 IP: 2a07:2700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:45:5f:64:cf:bf:6c:f8:e7:f5:a6:7f:d2:6e:18:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 9 14:59:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:8e:56:a4:1b:62:6b:5f:ca:8a:28:90:66: d3:52:bf:b8:81:b0:82:a8:b7:d6:9e:15:4b:b8:d7: bf:44:37:dd:46:63:bf:3c:d0:3c:16:69:5f:7e:a9: 57:b5:4f:17:02:27:e5:8b:63:b4:13:de:d5:e9:86: 92:30:fc:76:04:12:43:b5:cb:f8:98:14:55:ec:a9: 3d:f2:d7:e3:f4:c0:39:f9:b4:9f:e6:2a:4d:ff:3a: a9:27:88:86:12:bd:d2:72:3b:e7:e3:a2:13:c0:47: 36:58:b3:93:7b:87:ac:41:f2:ce:76:fc:26:a9:aa: cc:c3:d7:2b:b6:92:dc:9e:e8:ff:ab:66:ad:a2:90: 5c:c0:1f:f8:78:9b:87:0f:00:0b:f2:d5:f4:05:9b: c7:0c:2e:6b:3d:d3:ba:22:fb:6d:c6:fa:a7:bb:92: aa:42:d8:06:07:73:0c:df:0c:59:9b:a0:bf:45:02: 42:da:a8:b6:81:56:42:8a:2a:3c:ba:62:0c:bf:eb: ee:99:08:31:27:81:de:51:62:8c:93:6d:e8:d7:a5: 01:1e:38:66:7d:5b:1c:3d:ac:46:22:0d:0a:e3:e5: cd:8f:ba:0b:47:ef:b1:3c:da:26:de:01:ad:4c:b6: d2:57:2e:cd:a7:7c:47:24:dc:4a:4b:99:1b:51:97: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.72.0/22 IPv6: 2a07:2700::/29 Signature Algorithm: sha256WithRSAEncryption 66:8e:84:c9:3c:a5:b6:8e:be:e4:2f:0e:3b:14:17:64:01:71: ac:5a:e8:b2:42:45:94:88:0f:01:85:e3:e0:95:a9:da:38:bb: 59:f4:a6:d6:46:d0:1e:c4:1c:56:79:3e:4d:ac:1f:1c:f0:bf: 2d:e8:13:62:7d:62:1f:dc:ce:fa:8f:ec:15:24:51:b1:39:e9: 36:70:83:bb:5f:00:4b:54:a1:28:71:82:09:de:fe:b8:40:fc: 20:11:cd:cb:05:d3:8b:54:0a:10:e1:ef:2e:25:f9:f0:19:94: 32:7e:30:4a:d3:05:a8:5a:3a:21:16:bf:17:f6:26:8d:bf:6a: 01:6e:49:82:1a:dd:85:3f:54:15:e1:c4:7f:52:6d:b3:2f:56: 05:71:10:61:7e:b3:1c:72:5e:36:02:39:3d:4f:1e:e7:47:e2: 92:f2:a4:30:bf:41:50:fc:cf:8a:fb:f9:ac:3b:a2:41:88:09: db:7f:09:93:f3:e4:24:7a:38:c9:46:9b:d6:13:f5:30:8f:31: b9:33:c6:82:bc:a0:80:51:23:74:2f:f2:da:78:41:7f:7f:ad: c7:44:e5:6f:13:4e:b5:08:b5:ec:e1:3d:8a:33:ef:1d:ac:97: a9:a6:94:66:bb:06:e7:9f:bb:83:8d:de:f1:d0:d9:a8:6f:a8: af:e4:1f:aa -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZujRV9kz79s+Of1pn/Sbhh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA5MTQ1OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM2MTBkMjE1ZDM4OTEzNDJiYzMyODcyYTUwZjRkMGNmYTlkYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNGOVqQbYmtfyoookGbTUr+4gbCC qLfWnhVLuNe/RDfdRmO/PNA8FmlffqlXtU8XAifli2O0E97V6YaSMPx2BBJDtcv4 mBRV7Kk98tfj9MA5+bSf5ipN/zqpJ4iGEr3Scjvn46ITwEc2WLOTe4esQfLOdvwm qarMw9crtpLcnuj/q2atopBcwB/4eJuHDwAL8tX0BZvHDC5rPdO6Ivttxvqnu5Kq QtgGB3MM3wxZm6C/RQJC2qi2gVZCiio8umIMv+vumQgxJ4HeUWKMk23o16UBHjhm fVscPaxGIg0K4+XNj7oLR++xPNom3gGtTLbSVy7Np3xHJNxKS5kbUZcLZQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFH7GENIV04kTQrwyhypQ9NDPqdyfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzIyOTEx Yy1jZTUxLTQzOGItODZjZi1lODU2NjEzZDJiMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMjI5MTFj LWNlNTEtNDM4Yi04NmNmLWU4NTY2MTNkMmIxMC8xL2ZzWVEwaFhUaVJOQ3ZES0hL bEQwME0tcDNKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjlIMA0EAgACMAcDBQMqBycAMA0GCSqGSIb3 DQEBCwUAA4IBAQBmjoTJPKW2jr7kLw47FBdkAXGsWuiyQkWUiA8BhePglanaOLtZ 9KbWRtAexBxWeT5NrB8c8L8t6BNifWIf3M76j+wVJFGxOek2cIO7XwBLVKEocYIJ 3v64QPwgEc3LBdOLVAoQ4e8uJfnwGZQyfjBK0wWoWjohFr8X9iaNv2oBbkmCGt2F P1QV4cR/Um2zL1YFcRBhfrMccl42Ajk9Tx7nR+KS8qQwv0FQ/M+K+/msO6JBiAnb fwmT8+QkejjJRpvWE/UwjzG5M8aCvKCAUSN0L/LaeEF/f63HROVvE061CLXs4T2K M+8drJepppRmuwbnn7uDjd7x0Nmob6iv5B+q -----END CERTIFICATE-----Generated at Mon Jan 12 02:00:18 2026 by rpki-client