This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer File: F9LMnguBhrYLJwMTzZaCECLQS5U.cer (raw, json) Hash identifier: eVw3colK+eXWaKT+28brnvCzSzuCuzWtCYAcuYws0PM= Subject key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1549D1AFCEEB51CFA30899A5876352 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.130.100.0/24 IP: 212.125.140.0/23 IP: 2a14:2940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:d1:af:ce:eb:51:cf:a3:08:99:a5:87:63:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:75:d5:30:fe:2a:5c:61:38:b6:e1:5c:6b: 7b:f5:63:e7:37:ed:aa:1d:c6:a0:65:2e:32:81:f6: e8:d1:1d:01:ab:c1:6e:4f:10:02:c8:15:95:86:5e: c3:60:41:72:12:18:c7:db:03:8d:4f:9e:71:90:14: 23:e1:54:21:1d:f6:4f:29:af:89:60:93:74:aa:8e: d4:ac:12:2e:f4:d0:12:16:e4:80:49:c3:62:25:bb: a4:50:9a:3c:a9:03:8c:1a:3d:2f:2a:3f:44:59:fa: fe:20:9d:0c:57:c4:bf:2c:33:3a:b6:13:42:37:e1: 47:e8:2e:31:0e:e2:cc:01:23:70:85:5c:3b:e7:e1: ef:f3:0c:3e:4b:35:da:8a:dc:b5:b8:f7:6b:b7:23: f8:46:39:57:9f:3c:09:1f:e4:dd:fd:6a:18:35:c5: 8e:14:c8:7b:11:d7:10:c3:d4:22:c8:20:80:91:3d: 7d:78:59:16:da:e5:28:a3:06:0d:32:5a:c1:2b:95: 5b:1c:eb:fd:ad:01:cb:39:ab:23:57:48:06:2f:62: 5c:0d:da:c8:a3:2a:ab:ce:4b:ca:7e:f5:cd:2a:80: 72:72:f7:f0:3c:42:0d:17:83:97:40:4d:2d:30:6a: 77:35:df:31:5a:19:0e:4c:b3:08:7d:47:1a:fe:6e: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.100.0/24 212.125.140.0/23 IPv6: 2a14:2940::/29 Signature Algorithm: sha256WithRSAEncryption 3b:3d:07:ec:7a:34:7c:16:a5:9c:21:bc:d4:b2:e9:b3:06:c4: 3b:34:33:10:48:59:a9:35:08:c0:7f:de:cd:f7:4c:35:94:83: bd:19:92:82:39:9a:a0:5f:55:2e:18:5a:90:1b:45:02:59:1f: f5:08:d5:bc:12:38:fa:c9:55:62:a8:55:d5:79:19:b0:0d:d2: d5:68:c8:02:10:d2:47:7f:49:0b:83:d1:10:29:27:32:ba:3b: 75:cf:d3:25:91:98:15:54:ea:0c:40:a7:33:84:28:1c:ca:c2: 8c:fb:32:c7:a8:ac:1b:16:78:1b:4d:de:ed:ce:19:3e:c5:d2: ec:51:ce:6d:d0:a3:5f:49:7d:27:2b:d5:21:4f:94:e1:e0:58: ba:58:8d:37:fd:40:cc:a4:8d:bb:1a:8c:65:af:f1:eb:df:8c: fb:c7:5d:6d:59:fa:df:6a:ee:85:3d:bc:36:be:5f:04:f8:42: 14:32:5d:a2:cc:63:58:88:f2:f9:2a:a0:3b:13:64:48:97:49: 00:9d:48:c3:6d:81:fb:2f:3a:c5:7e:d5:a6:ea:b2:f9:bb:0b: 99:3e:c5:af:0d:4c:3f:6b:74:16:39:40:03:68:f7:85:07:05: 13:0a:91:d9:56:48:d9:fa:f2:c9:d7:ae:6b:d7:db:c5:e5:6f: 64:e1:f0:3b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/FUnRr87rUc+jCJmlh2NSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2QyY2M5ZTBiODE4NmI2MGIyNzAzMTNjZDk2ODIxMDIyZDA0Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5J11TD+KlxhOLbhXGt79WPnN+2q HcagZS4ygfbo0R0Bq8FuTxACyBWVhl7DYEFyEhjH2wONT55xkBQj4VQhHfZPKa+J YJN0qo7UrBIu9NASFuSAScNiJbukUJo8qQOMGj0vKj9EWfr+IJ0MV8S/LDM6thNC N+FH6C4xDuLMASNwhVw75+Hv8ww+SzXaity1uPdrtyP4RjlXnzwJH+Td/WoYNcWO FMh7EdcQw9QiyCCAkT19eFkW2uUoowYNMlrBK5VbHOv9rQHLOasjV0gGL2JcDdrI oyqrzkvKfvXNKoBycvfwPEINF4OXQE0tMGp3Nd8xWhkOTLMIfUca/m4iWwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFBfSzJ4LgYa2CycDE82WghAi0EuVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzBkMzhm OS1lMGMxLTQ2Y2MtOWEyMi1kZmJiNmVjMzQzMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvMGQzOGY5 LWUwYzEtNDZjYy05YTIyLWRmYmI2ZWMzNDMwZS8xL0Y5TE1uZ3VCaHJZTEp3TVR6 WmFDRUNMUVM1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuYJkAwQB1H2MMA0EAgACMAcDBQMqFClAMA0G CSqGSIb3DQEBCwUAA4IBAQA7PQfsejR8FqWcIbzUsumzBsQ7NDMQSFmpNQjAf97N 90w1lIO9GZKCOZqgX1UuGFqQG0UCWR/1CNW8Ejj6yVViqFXVeRmwDdLVaMgCENJH f0kLg9EQKScyujt1z9MlkZgVVOoMQKczhCgcysKM+zLHqKwbFngbTd7tzhk+xdLs Uc5t0KNfSX0nK9UhT5Th4Fi6WI03/UDMpI27Goxlr/Hr34z7x11tWfrfau6FPbw2 vl8E+EIUMl2izGNYiPL5KqA7E2RIl0kAnUjDbYH7LzrFftWm6rL5uwuZPsWvDUw/ a3QWOUADaPeFBwUTCpHZVkjZ+vLJ165r19vF5W9k4fA7 -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:57 2026 by rpki-client