This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer File: FJgUGBkRK4RGwtSjER9TA48F2-k.cer (raw, json) Hash identifier: ZGd3LNCy3XW6aEDnhrChMInFNzqcMINfLqFaJK8Amio= Subject key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC16CD89601A2D587607532BCA2D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.91.112.0/22 IP: 2a05:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c1:6c:d8:96:01:a2:d5:87:60:75:32:bc:a2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:ff:49:ab:a7:d5:4e:e3:4f:d3:0e:d6:8f: 7e:0d:6e:69:fc:79:3b:a7:bd:9c:7a:8a:53:f4:00: f8:5b:a3:65:83:ea:01:92:49:ea:a6:c0:d3:4a:63: cc:54:6f:84:a2:b0:a6:71:04:78:16:e2:93:88:93: 32:db:33:44:fb:e5:89:fa:12:a0:e1:bc:d0:ed:ef: b2:8d:18:34:bd:a7:9e:5a:9b:00:9a:7a:7b:52:21: c2:60:e1:6b:82:6f:53:0e:89:88:c9:46:7d:3e:2f: be:68:a0:14:87:e7:43:5c:d9:17:92:d6:89:6b:d1: 54:7e:c8:e3:f8:3f:00:e0:1b:0e:77:c0:15:ce:ad: d7:2c:9f:10:99:1c:8f:9a:04:2e:46:ba:ec:c0:4e: dd:08:30:30:1b:72:c4:57:ff:60:41:5a:53:74:17: ac:28:55:61:35:e4:66:85:8a:bc:c8:46:33:63:2b: f2:2c:e7:ee:47:3b:d4:60:20:a4:41:ce:fa:cb:d8: 4e:ff:0c:cb:3d:77:f6:a4:f5:e2:9a:a8:72:f8:58: e7:d2:55:db:ff:86:b6:3d:14:31:7e:f2:8c:d8:70: 5d:44:8a:79:91:1b:2f:c5:a6:94:dd:98:9d:3b:8f: 0a:8e:9c:18:6b:c6:dc:05:81:b5:51:b0:c1:85:2f: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.112.0/22 IPv6: 2a05:ea80::/29 Signature Algorithm: sha256WithRSAEncryption 02:dc:fd:8a:d1:2f:8d:61:16:0a:e7:93:b8:26:a4:14:9a:cd: a2:4a:2b:38:d1:df:d7:22:0b:8b:f9:5c:ac:ca:3d:7b:06:13: e3:c8:2e:71:2f:92:2a:63:fa:e2:c9:e5:e2:03:c9:ab:64:c3: 8c:4c:50:c9:e2:42:c5:34:fa:b1:90:a6:3f:df:7f:85:e1:23: 10:7b:55:3c:b0:cb:ec:b9:f7:93:1b:ab:d6:6d:7c:8b:c3:cd: d2:c6:17:0d:f0:bb:d3:62:22:f8:e7:3e:1e:10:ec:2b:b0:1c: 7a:07:4a:45:25:91:ab:0e:d2:c2:c6:e2:6d:87:a8:e3:b9:d5: 53:1c:41:6b:ef:04:5b:15:95:af:49:67:35:72:97:73:49:27: 90:17:a1:66:1b:d8:d0:9c:eb:e8:80:3f:77:ca:48:6c:82:16: a5:f5:fa:66:20:9d:06:03:3e:12:1c:e7:bd:f9:e7:c3:ba:9f: db:9f:a3:21:4e:c2:52:7b:ce:40:ab:41:58:1c:97:45:55:b5: 5e:4a:90:20:d1:5c:f8:7c:60:56:e8:20:c9:d6:68:58:fb:e0: fd:44:29:e6:64:9b:d6:1d:d2:31:e7:68:1b:05:1c:8d:e2:57: b2:f8:2a:de:1f:37:19:98:53:98:28:e5:24:10:64:09:5c:7f: 3f:5a:6f:f2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26sFs2JYBotWHYHUyvKLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDk4MTQxODE5MTEyYjg0NDZjMmQ0YTMxMTFmNTMwMzhmMDVkYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7/Saun1U7jT9MO1o9+DW5p/Hk7 p72ceopT9AD4W6Nlg+oBkknqpsDTSmPMVG+EorCmcQR4FuKTiJMy2zNE++WJ+hKg 4bzQ7e+yjRg0vaeeWpsAmnp7UiHCYOFrgm9TDomIyUZ9Pi++aKAUh+dDXNkXktaJ a9FUfsjj+D8A4BsOd8AVzq3XLJ8QmRyPmgQuRrrswE7dCDAwG3LEV/9gQVpTdBes KFVhNeRmhYq8yEYzYyvyLOfuRzvUYCCkQc76y9hO/wzLPXf2pPXimqhy+Fjn0lXb /4a2PRQxfvKM2HBdRIp5kRsvxaaU3ZidO48KjpwYa8bcBYG1UbDBhS/f4wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBSYFBgZESuERsLUoxEfUwOPBdvpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI5MDY2 ZjVkLWVjYzEtNDkyNy05NWMxLWUxYThkZjhmOTg5Ny8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjkw NjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5ODk3LzAvMTQ5ODE0MTgxOTEx MkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME ArlbcDANBAIAAjAHAwUDKgXqgDANBgkqhkiG9w0BAQsFAAOCAQEAAtz9itEvjWEW CueTuCakFJrNokorONHf1yILi/lcrMo9ewYT48gucS+SKmP64snl4gPJq2TDjExQ yeJCxTT6sZCmP99/heEjEHtVPLDL7Ln3kxur1m18i8PN0sYXDfC702Ii+Oc+HhDs K7AcegdKRSWRqw7SwsbibYeo47nVUxxBa+8EWxWVr0lnNXKXc0knkBehZhvY0Jzr 6IA/d8pIbIIWpfX6ZiCdBgM+Ehznvfnnw7qf25+jIU7CUnvOQKtBWByXRVW1XkqQ INFc+HxgVuggydZoWPvg/UQp5mSb1h3SMedoGwUcjeJXsvgq3h83GZhTmCjlJBBk CVx/P1pv8g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:01 2026 by rpki-client