This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer File: FHBxbI3YPk_rBfZUNDwSCna9s7k.cer (raw, json) Hash identifier: I/+1QXW0BWSIaWNXHbYehnDBk2uBEwbAesKt9sKEquE= Subject key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E413D46FE2C911985C7A203A63A13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216266 IP: 192.207.47.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:41:3d:46:fe:2c:91:19:85:c7:a2:03:a6:3a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:2d:7d:63:81:cb:93:a9:fa:7c:02:59:6d: d1:93:be:d0:7e:d5:ae:81:51:2f:1b:8a:bb:e7:c7: 5d:98:da:04:e2:12:44:71:c9:56:95:7d:26:48:29: d6:05:64:ef:79:4e:c4:71:a8:e4:0b:57:fa:99:18: 99:dd:af:b6:6a:8f:09:2d:a6:55:d4:b1:bf:ba:fc: cd:2e:4e:f0:16:e1:b7:fd:46:51:00:94:14:20:8f: 56:23:a7:24:42:b7:5a:f7:db:d5:8e:50:50:96:ed: 58:ce:66:47:79:c2:fd:34:e6:04:db:a3:58:35:88: 9b:55:77:81:09:50:97:d8:bd:1b:aa:01:55:69:db: c9:02:23:ff:ed:30:eb:88:55:43:03:1b:24:a9:da: 63:18:6e:27:69:29:e2:3e:04:68:16:6d:81:b0:d9: 04:2c:2d:0e:bd:77:c3:ef:fe:b9:ce:e6:17:c4:d1: 8d:7b:30:73:b6:29:12:3f:49:6f:f7:09:37:e6:4c: 58:12:cd:d0:76:ca:01:6e:e4:0e:10:f9:1b:8e:ed: a4:9b:63:2e:b2:5b:3e:36:1d:b3:f0:09:ca:34:02: 05:0c:00:75:98:3a:77:2a:2e:ed:59:8a:aa:cd:10: 9e:1e:f8:80:bc:d1:c5:02:4b:55:7f:28:e8:38:fc: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.207.47.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216266 Signature Algorithm: sha256WithRSAEncryption 12:3a:d3:05:65:ae:29:3b:9b:f4:b1:84:2e:d8:a2:15:36:06: 47:50:33:f1:ab:0d:9b:54:c7:c4:12:3e:91:d3:3f:a4:ba:09: 0d:e7:dd:1b:55:b1:e9:bd:d5:cc:83:4b:c9:31:89:1e:1e:44: f8:85:59:64:cf:23:f3:31:bc:47:aa:3d:c9:9d:5d:47:47:95: df:6d:86:d4:39:7e:1d:19:22:ed:81:30:fb:4e:3e:c0:e6:22: e0:4d:a1:30:96:cc:5b:de:9c:2a:b0:48:22:6c:9a:e4:10:2c: 79:ab:8e:d0:e0:7e:ab:07:2c:ee:21:3d:13:7c:fe:f4:e8:d2: 9d:01:31:a1:ef:f0:a1:40:d9:18:41:9c:6b:ac:91:30:6d:d4: 2e:87:79:7c:b1:5a:0e:0c:c9:e1:4d:63:37:19:d6:23:18:bc: c7:78:5e:7b:33:5f:17:db:fd:c5:ca:de:e1:2e:13:85:6e:59: 89:ed:26:41:04:14:36:45:6a:b7:d4:9b:24:d8:a2:ef:e9:1a: 60:35:7c:32:da:8f:8b:e8:02:ef:78:d3:01:30:03:ef:2c:7c: ca:5d:ca:dc:f2:b4:7a:c5:14:69:1b:68:3f:72:cc:b9:2a:82: bd:21:af:0a:b5:06:52:b2:1d:21:65:f8:e0:b3:f0:ef:73:55: 22:23:61:aa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fkE9Rv4skRmFx6IDpjoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDcwNzE2YzhkZDgzZTRmZWIwNWY2NTQzNDNjMTIwYTc2YmRiM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt4tfWOBy5Op+nwCWW3Rk77QftWu gVEvG4q758ddmNoE4hJEcclWlX0mSCnWBWTveU7EcajkC1f6mRiZ3a+2ao8JLaZV 1LG/uvzNLk7wFuG3/UZRAJQUII9WI6ckQrda99vVjlBQlu1YzmZHecL9NOYE26NY NYibVXeBCVCX2L0bqgFVadvJAiP/7TDriFVDAxskqdpjGG4naSniPgRoFm2BsNkE LC0OvXfD7/65zuYXxNGNezBztikSP0lv9wk35kxYEs3QdsoBbuQOEPkbju2km2Mu sls+Nh2z8AnKNAIFDAB1mDp3Ki7tWYqqzRCeHviAvNHFAktVfyjoOPzMzQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzhiOWU0 Zi1kMTNlLTQyNTEtOWQxOC02YTIzOGJhMTc5Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvOGI5ZTRm LWQxM2UtNDI1MS05ZDE4LTZhMjM4YmExNzljZC8xL0ZIQnhiSTNZUGtfckJmWlVO RHdTQ25hOXM3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwM8vMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNMyjANBgkqhkiG9w0BAQsFAAOCAQEAEjrTBWWuKTub9LGELtiiFTYGR1Az8asN m1THxBI+kdM/pLoJDefdG1Wx6b3VzINLyTGJHh5E+IVZZM8j8zG8R6o9yZ1dR0eV 322G1Dl+HRki7YEw+04+wOYi4E2hMJbMW96cKrBIImya5BAseauO0OB+qwcs7iE9 E3z+9OjSnQExoe/woUDZGEGca6yRMG3ULod5fLFaDgzJ4U1jNxnWIxi8x3heezNf F9v9xcre4S4ThW5Zie0mQQQUNkVqt9SbJNii7+kaYDV8MtqPi+gC73jTATAD7yx8 yl3K3PK0esUUaRtoP3LMuSqCvSGvCrUGUrIdIWX44LPw73NVIiNhqg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:40 2026 by rpki-client