This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer File: FDI5ZR22qrG8tnMl94W17h9AJcs.cer (raw, json) Hash identifier: zYdWb/PrgqDZAg6H+Gt3hzbUFWMntGRwXklZsWsXHrw= Subject key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B356B0B9F0A3A9756E800BE170FA5B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42724 IP: 45.155.124.0/22 IP: 91.213.182.0/24 IP: 193.3.167.0/24 IP: 194.36.84.0/22 IP: 194.62.40.0/24 IP: 2a09:5b40::/29 IP: 2a10:2d40::/29 IP: 2a11:8200::/29 IP: 2a12:8000::/29 IP: 2a14:6900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6b:0b:9f:0a:3a:97:56:e8:00:be:17:0f:a5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:cd:51:e0:d1:b9:15:88:b9:a9:8b:b6:0a: 68:a8:1d:6d:5f:27:6e:86:d3:ef:5d:8b:ea:6f:c5: 4f:d2:8e:23:d9:24:e2:28:36:ff:ed:27:de:cd:af: bd:5d:90:e7:43:f5:c8:2e:44:6f:b0:4a:97:6c:30: 76:ae:4f:dc:76:54:7e:37:7c:94:f8:8f:7d:9b:67: 26:28:54:56:55:e6:b0:61:41:cb:bf:93:ac:8f:d0: c6:1d:f4:b5:a2:67:22:7f:90:b1:ad:3c:1f:ee:de: b7:65:48:37:c4:c4:27:15:b5:e4:94:43:9d:b2:af: 6e:1d:cb:ad:85:aa:81:45:6d:2c:ee:17:94:24:d9: 42:0c:55:0a:d3:1f:0f:45:31:51:0c:d7:56:3c:2a: e2:76:b3:8a:d3:a9:3c:af:6b:b6:d8:07:b2:e1:e9: 27:47:80:db:ed:5f:dd:c1:92:14:bf:1d:aa:bd:13: 3a:62:d2:be:bd:5e:1e:b4:28:d5:ac:4a:3a:0a:47: ac:ac:bd:59:30:6c:fb:63:7c:b3:44:a1:c4:2b:a1: 58:08:02:59:28:c4:a6:9d:fd:55:73:4e:de:9c:2c: 2a:8a:3c:ec:ac:21:f4:79:e3:71:bf:b2:2f:1b:b6: 10:8b:98:9d:5c:9b:fc:31:b1:e7:0a:ba:8d:a8:4e: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.124.0/22 91.213.182.0/24 193.3.167.0/24 194.36.84.0/22 194.62.40.0/24 IPv6: 2a09:5b40::/29 2a10:2d40::/29 2a11:8200::/29 2a12:8000::/29 2a14:6900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42724 Signature Algorithm: sha256WithRSAEncryption 94:b9:a1:10:41:c0:16:d3:8d:4c:b8:86:dd:d5:2a:ab:87:ca: 90:9e:db:2f:cc:82:aa:cf:6b:a6:05:7f:ed:09:fa:2a:d7:27: ea:34:e4:b7:dc:52:f1:d6:36:d4:f7:f2:43:e7:21:a6:77:61: 35:3d:ff:cc:57:6c:76:ec:c6:64:33:46:8b:ec:74:47:d6:30: 8c:02:32:b6:c2:10:cf:d4:69:84:21:d6:52:fd:42:83:f9:84: 62:0a:1d:47:63:e1:00:10:ba:3f:98:1f:00:6f:ef:12:ae:9c: 48:cd:50:8b:d9:96:07:8b:31:f7:92:d1:04:56:38:53:19:39: 7b:1f:02:2c:f9:5a:21:79:3c:ea:26:9c:bb:b9:79:73:74:04: 4c:44:ae:66:9e:66:9b:4b:1c:16:d1:44:a1:63:95:3c:67:dc: f4:33:dd:92:53:de:2b:78:95:d4:ae:ea:de:69:bd:03:97:f1: 56:01:fb:61:47:e4:47:2c:40:6f:58:40:62:e9:3c:fa:d0:2c: 5a:45:4e:5a:d2:e2:4c:e0:2e:17:cb:e4:bc:1b:67:28:32:97: 38:11:7e:f3:8f:f0:eb:2d:7c:93:fa:83:d6:56:82:69:f5:5c: ef:fe:a5:d2:a1:41:d0:a8:32:6a:07:03:73:fa:47:7f:11:1b: a9:e2:ed:24 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt7NWsLnwo6l1boAL4XD6W0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDMyMzk2NTFkYjZhYWIxYmNiNjczMjVmNzg1YjVlZTFmNDAyNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgzNUeDRuRWIuamLtgpoqB1tXydu htPvXYvqb8VP0o4j2STiKDb/7Sfeza+9XZDnQ/XILkRvsEqXbDB2rk/cdlR+N3yU +I99m2cmKFRWVeawYUHLv5Osj9DGHfS1omcif5CxrTwf7t63ZUg3xMQnFbXklEOd sq9uHcuthaqBRW0s7heUJNlCDFUK0x8PRTFRDNdWPCridrOK06k8r2u22Aey4ekn R4Db7V/dwZIUvx2qvRM6YtK+vV4etCjVrEo6CkesrL1ZMGz7Y3yzRKHEK6FYCAJZ KMSmnf1Vc07enCwqijzsrCH0eeNxv7IvG7YQi5idXJv8MbHnCrqNqE4ptwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFBQyOWUdtqqxvLZzJfeFte4fQCXLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzZmNDZk OS0zYWYwLTQyYWEtYjMzNC02ZWVjNzdkOWI5ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNmY0NmQ5 LTNhZjAtNDJhYS1iMzM0LTZlZWM3N2Q5Yjk4NS8xL0ZESTVaUjIycXJHOHRuTWw5 NFcxN2g5QUpjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTAkBAIAATAeAwQCLZt8AwQAW9W2AwQAwQOnAwQCwiRUAwQAwj4o MCkEAgACMCMDBQMqCVtAAwUDKhAtQAMFAyoRggADBQMqEoAAAwUDKhRpADAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMApuQwDQYJKoZIhvcNAQELBQADggEBAJS5oRBB wBbTjUy4ht3VKquHypCe2y/MgqrPa6YFf+0J+irXJ+o05LfcUvHWNtT38kPnIaZ3 YTU9/8xXbHbsxmQzRovsdEfWMIwCMrbCEM/UaYQh1lL9QoP5hGIKHUdj4QAQuj+Y HwBv7xKunEjNUIvZlgeLMfeS0QRWOFMZOXsfAiz5WiF5POomnLu5eXN0BExErmae ZptLHBbRRKFjlTxn3PQz3ZJT3it4ldSu6t5pvQOX8VYB+2FH5EcsQG9YQGLpPPrQ LFpFTlrS4kzgLhfL5LwbZygylzgRfvOP8OstfJP6g9ZWgmn1XO/+pdKhQdCoMmoH A3P6R38RG6ni7SQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:22 2026 by rpki-client