This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer (raw, json) Hash identifier: S3oNiJlJRr8O1EghLoVR+/hd4WzhE7CtkpQGNyonDLU= Subject key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910CB863D6033D317CB16630A85B2B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.67.4.0/22 IP: 2a03:22e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cb:86:3d:60:33:d3:17:cb:16:63:0a:85:b2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=146170cb906ef42d097c6402d83eec3d92677a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:36:14:10:20:df:f7:01:be:2e:3e:7c:5f:bc: 79:d9:a3:ee:15:b5:ec:c2:70:f5:41:d9:40:99:de: c6:91:81:c9:da:c9:76:c6:7e:9c:ec:92:22:58:84: 26:64:b4:a8:e6:42:c2:cc:de:72:a2:39:9a:bd:98: db:ba:0e:7a:0e:34:5e:3a:3e:51:fc:e6:4a:83:6a: 11:29:6b:ad:80:cd:db:1c:f8:e8:ff:8f:b3:4c:79: cc:53:58:b5:07:25:58:14:cf:9c:56:91:8c:81:07: e9:03:30:7f:75:1d:a8:e6:cd:bc:91:75:f8:a2:50: e8:ba:26:2b:ce:92:f9:c0:7e:50:2b:93:eb:8c:cf: 3a:51:e1:87:56:04:96:ea:02:dc:e5:ff:ba:79:09: f7:5d:8c:cd:a8:30:d1:04:43:8c:6f:4b:e9:1c:7b: bc:20:3e:ac:7f:b2:7a:42:e3:fd:2e:a7:83:6e:43: 1f:7a:7f:5f:15:d0:a4:bf:bb:18:4b:27:ad:4f:e2: 09:ed:95:f2:10:a1:93:7f:14:98:39:02:63:48:ad: 4a:76:14:94:1f:e7:03:50:3d:a6:b2:83:cf:99:3c: c6:32:c2:29:5f:ae:0f:28:74:a7:99:f5:f8:18:1a: 0a:4b:a1:a8:d2:f6:6a:33:4f:c9:0f:ee:bc:5c:10: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.4.0/22 IPv6: 2a03:22e0::/29 Signature Algorithm: sha256WithRSAEncryption 89:76:b8:d4:01:ff:4c:fd:c9:dc:f6:64:27:0e:5d:b8:33:06: 2e:3a:a8:ca:87:b9:e0:e8:de:73:89:43:25:ab:a0:02:60:9a: 35:88:e5:11:78:8d:66:1c:6f:03:fa:7f:7d:a1:44:0f:10:81: 5a:83:da:62:3d:97:ce:b6:aa:b5:e7:ac:b0:9e:96:f2:42:c8: a9:ab:7a:55:9d:6f:d5:94:a8:dd:13:66:f0:a1:30:e4:db:0d: c8:6f:29:f2:a6:89:fb:cb:b1:a3:b5:67:d2:c7:f5:57:bd:4d: 43:aa:3c:31:ca:ad:48:f3:0b:be:64:fe:a6:f4:40:98:4e:6d: 79:93:77:e1:64:99:56:f7:e7:3d:ed:0b:d7:b2:03:ba:17:40: f2:f4:59:a5:8b:33:26:f4:3c:7b:0e:f8:b2:50:78:67:0a:eb: a6:56:22:96:84:f7:f3:be:db:15:a6:f7:ae:9f:40:19:e5:7d: 75:c9:67:cf:54:27:03:85:aa:bc:0b:11:47:e8:fc:68:b6:85: a8:43:c1:a5:bc:d2:ec:4e:ad:28:0f:2a:b6:d3:36:bd:9a:d3: 16:2f:23:d7:ac:c3:29:7c:2a:fd:15:d9:55:08:7a:7e:62:c0: 45:5b:7e:4a:33:63:a1:6c:82:46:60:e6:12:66:f1:1c:a0:8d: 2f:48:6e:a5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EMuGPWAz0xfLFmMKhbKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDYxNzBjYjkwNmVmNDJkMDk3YzY0MDJkODNlZWMzZDkyNjc3YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjYUECDf9wG+Lj58X7x52aPuFbXs wnD1QdlAmd7GkYHJ2sl2xn6c7JIiWIQmZLSo5kLCzN5yojmavZjbug56DjReOj5R /OZKg2oRKWutgM3bHPjo/4+zTHnMU1i1ByVYFM+cVpGMgQfpAzB/dR2o5s28kXX4 olDouiYrzpL5wH5QK5PrjM86UeGHVgSW6gLc5f+6eQn3XYzNqDDRBEOMb0vpHHu8 ID6sf7J6QuP9LqeDbkMfen9fFdCkv7sYSyetT+IJ7ZXyEKGTfxSYOQJjSK1KdhSU H+cDUD2msoPPmTzGMsIpX64PKHSnmfX4GBoKS6Go0vZqM0/JD+68XBCZOwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBRhcMuQbvQtCXxkAtg+7D2SZ3poMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzcwMmE3 Mi0zMTEyLTRkOWYtYmJhOS04MDM0ZTJkMDVkMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNzAyYTcy LTMxMTItNGQ5Zi1iYmE5LTgwMzRlMmQwNWQzOS8xL0ZHRnd5NUJ1OUMwSmZHUUMy RDdzUFpKbmVtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUMEMA0EAgACMAcDBQMqAyLgMA0GCSqGSIb3 DQEBCwUAA4IBAQCJdrjUAf9M/cnc9mQnDl24MwYuOqjKh7ng6N5ziUMlq6ACYJo1 iOUReI1mHG8D+n99oUQPEIFag9piPZfOtqq156ywnpbyQsipq3pVnW/VlKjdE2bw oTDk2w3Ibynypon7y7GjtWfSx/VXvU1Dqjwxyq1I8wu+ZP6m9ECYTm15k3fhZJlW 9+c97QvXsgO6F0Dy9FmlizMm9Dx7DviyUHhnCuumViKWhPfzvtsVpveun0AZ5X11 yWfPVCcDhaq8CxFH6PxotoWoQ8GlvNLsTq0oDyq20za9mtMWLyPXrMMpfCr9FdlV CHp+YsBFW35KM2OhbIJGYOYSZvEcoI0vSG6l -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:10 2026 by rpki-client