This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer File: FERkZscdJGWMi29-rlMF_r0XpLo.cer (raw, json) Hash identifier: f8bTguJ+wNBSs96CK4O4MASA2AZYLTlc9cLkcsPOSO0= Subject key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351DDE4FA0FD52DB7006E3646989AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35704 AS: 213741 IP: 80.245.144.0/20 IP: 2a09:1480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1d:de:4f:a0:fd:52:db:70:06:e3:64:69:89:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14446466c71d24658c8b6f7eae5305febd17a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:57:31:0f:d2:d1:65:c8:f6:62:79:b7:5e: fc:b3:8b:15:3d:cc:3b:9f:84:92:09:fd:71:ef:47: 20:83:73:aa:31:ed:7f:f5:3f:0a:15:f5:b1:e2:2e: d3:f4:35:05:ad:d8:90:b9:2d:60:12:31:60:da:d9: 4c:f2:db:81:4f:1f:ad:d5:21:7a:23:fe:39:8c:50: bf:b3:0f:01:17:c1:42:e8:e4:9f:2b:da:f5:a0:d5: 2e:79:27:ff:7c:80:b5:3b:98:da:3c:5b:8f:52:89: 20:3c:8b:74:d9:03:99:61:3a:66:15:12:bc:15:b4: 84:a9:31:e8:8e:bc:5a:b7:9e:f6:ff:a2:dc:f8:d1: db:24:aa:62:ac:56:d8:e4:3c:92:7d:e2:5c:9a:71: e8:80:97:ac:76:e5:9b:80:14:61:62:d2:7e:c7:7d: 64:78:86:c6:b9:8b:36:53:1a:9a:04:c7:e5:72:08: 42:08:a5:6c:d3:37:06:97:65:aa:3c:83:05:4a:26: 59:65:79:d8:c4:75:2c:4a:d2:0e:6b:d3:33:d0:da: d9:3a:ea:67:18:3f:3a:2a:7b:f5:de:57:12:d6:a2: b7:06:40:10:18:4c:d0:02:35:34:a4:43:aa:fc:3a: cd:15:2f:a5:54:13:2c:5a:93:5c:f6:30:64:08:ae: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.144.0/20 IPv6: 2a09:1480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35704 213741 Signature Algorithm: sha256WithRSAEncryption 28:a8:b9:f5:73:ea:13:df:fa:20:2f:e7:6c:f4:65:7a:4b:3f: d2:4e:75:14:1e:c8:c0:f8:a3:67:62:b3:e3:b3:bc:8f:9d:8d: 02:81:b9:5f:ff:9c:41:45:dc:3c:ba:fc:94:79:ea:82:a0:f3: 39:78:5f:87:56:ad:e3:00:e3:f9:e0:4a:da:75:9c:5d:5a:d1: c3:0c:21:e1:02:d4:75:f4:74:23:c0:30:3d:57:40:b3:32:ef: 2e:dc:d6:2d:1e:e3:6b:e4:9a:93:c8:97:eb:2f:46:99:d4:f8: 06:e4:83:26:4a:7a:7a:38:41:88:29:6b:30:8a:df:9c:7f:ee: b9:3f:9e:30:79:aa:20:95:0d:a1:4c:1d:de:d4:d3:04:fa:fd: 14:a3:80:38:23:3f:c1:4b:34:64:1f:70:5f:9a:44:ca:08:56: b9:09:dc:52:4a:17:78:f7:b0:76:7f:f8:3a:a4:fe:9d:df:dd: 07:be:3a:12:20:15:6d:e8:fd:9e:d6:bb:d8:0e:7f:51:fa:13: 86:d7:27:e5:46:aa:6f:84:13:b6:fa:08:ea:e4:5c:35:15:04: 74:06:00:c5:37:f9:99:64:19:66:eb:e3:d1:c2:2f:8a:4c:f3: 64:da:5b:91:86:30:4a:5c:06:3e:35:65:1c:03:ed:12:65:a2: 1a:ac:1e:92 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NR3eT6D9UttwBuNkaYmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDQ0NjQ2NmM3MWQyNDY1OGM4YjZmN2VhZTUzMDVmZWJkMTdhNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/9XMQ/S0WXI9mJ5t178s4sVPcw7 n4SSCf1x70cgg3OqMe1/9T8KFfWx4i7T9DUFrdiQuS1gEjFg2tlM8tuBTx+t1SF6 I/45jFC/sw8BF8FC6OSfK9r1oNUueSf/fIC1O5jaPFuPUokgPIt02QOZYTpmFRK8 FbSEqTHojrxat572/6Lc+NHbJKpirFbY5DySfeJcmnHogJesduWbgBRhYtJ+x31k eIbGuYs2UxqaBMflcghCCKVs0zcGl2WqPIMFSiZZZXnYxHUsStIOa9Mz0NrZOupn GD86Knv13lcS1qK3BkAQGEzQAjU0pEOq/DrNFS+lVBMsWpNc9jBkCK6ynQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFBREZGbHHSRljItvfq5TBf69F6S6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzU2NmZi My1hNjQxLTRkMTktYTU4ZS02NDBlMDc1YmY4N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvNTY2ZmIz LWE2NDEtNGQxOS1hNThlLTY0MGUwNzViZjg3Zi8xL0ZFUmtac2NkSkdXTWkyOS1y bE1GX3IwWHBMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUPWQMA0EAgACMAcDBQMqCRSAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwCLeAIDA0LtMA0GCSqGSIb3DQEBCwUAA4IBAQAoqLn1 c+oT3/ogL+ds9GV6Sz/STnUUHsjA+KNnYrPjs7yPnY0Cgblf/5xBRdw8uvyUeeqC oPM5eF+HVq3jAOP54EradZxdWtHDDCHhAtR19HQjwDA9V0CzMu8u3NYtHuNr5JqT yJfrL0aZ1PgG5IMmSnp6OEGIKWswit+cf+65P54weaoglQ2hTB3e1NME+v0Uo4A4 Iz/BSzRkH3BfmkTKCFa5CdxSShd497B2f/g6pP6d390HvjoSIBVt6P2e1rvYDn9R +hOG1yflRqpvhBO2+gjq5Fw1FQR0BgDFN/mZZBlm6+PRwi+KTPNk2luRhjBKXAY+ NWUcA+0SZaIarB6S -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:22 2026 by rpki-client