This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer File: FNQhCjRMmZST5hz53XNWd9OLwF0.cer (raw, json) Hash identifier: RIwhYoCsszNjnCqXnnI4HaSS1yqFX6DulZ7QFzXD8c8= Subject key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353D33466E992820D0CE7CA7F6ECA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212935 IP: 91.203.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3d:33:46:6e:99:28:20:d0:ce:7c:a7:f6:ec:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14d4210a344c999493e61cf9dd735677d38bc05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:69:d8:9e:ac:21:70:3e:18:f5:fd:13:14: 10:14:3e:39:67:3d:bd:81:a1:c5:ed:7c:76:be:4f: 71:bd:70:96:b5:f4:d0:6a:4e:4e:ac:64:69:e6:8a: ee:f2:33:0c:aa:1a:1c:67:29:c3:be:14:11:0b:ba: c0:a7:b5:c5:bc:59:c4:1a:47:e6:8e:d0:54:3c:7a: e1:1a:c6:e2:62:2d:38:f4:e0:4c:4f:f4:b2:e7:00: 7f:c9:bc:8e:e8:ee:a5:ae:38:f8:12:70:2b:e5:ae: 34:9a:56:93:aa:2d:39:61:ed:86:53:4b:cf:36:0a: 46:71:b7:f9:b6:14:65:40:f3:85:83:5d:af:95:c9: ce:dd:2f:f9:82:c2:6c:37:85:a3:52:47:30:0d:ce: 59:28:6a:41:79:c0:51:a3:57:a1:1b:8c:bc:39:7a: d5:29:a3:c9:ef:90:a6:26:aa:e4:b5:49:30:5a:16: 91:fa:ca:b5:25:e3:12:f6:29:43:d9:85:86:9e:38: e5:5d:98:ad:2c:5b:3e:54:23:24:be:eb:6a:6e:05: 9a:87:82:15:c5:d2:e0:6e:71:ea:a3:29:1e:99:3a: b8:b2:a7:5f:fb:6a:6f:4c:16:93:66:2d:58:21:de: f1:53:87:14:5b:05:fa:be:5f:70:1d:b4:e9:e1:d7: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212935 Signature Algorithm: sha256WithRSAEncryption 04:3f:8d:4f:b5:e6:33:4a:c0:31:ea:b9:3a:aa:3a:34:91:c8: 72:d6:7f:86:c5:7d:27:b9:70:6f:3d:ba:55:d5:b0:9b:1a:5a: a8:26:8f:89:7d:ff:37:03:36:e3:50:59:39:56:96:8d:b3:0d: 94:30:db:0a:6d:2d:8a:91:b9:0a:27:30:36:86:d6:38:d2:e3: 26:7c:a2:72:bc:78:1d:a7:f2:32:3b:e1:b0:da:26:d8:14:6b: 79:ba:42:14:b5:08:31:46:4a:18:23:20:2f:a3:4f:5b:e8:e2: 03:66:bf:12:41:92:2a:2e:5f:97:70:11:1f:45:dd:fb:a2:a2: bc:75:0d:c1:53:a5:fe:6f:c7:55:55:19:51:52:d3:9a:50:83: 9d:96:0b:a8:92:5a:3e:13:c3:8a:c9:14:e5:22:3f:c7:04:ae: 77:69:98:10:bc:32:27:88:0a:f0:7f:2f:e6:c3:06:ee:e3:5c: 74:41:d7:8c:9d:a4:22:0f:a5:05:79:eb:e6:b0:57:17:01:f5: a3:f1:3a:b3:dc:de:92:15:be:f5:1e:cb:b1:dc:86:6b:48:b2: 55:7f:4f:77:7c:f5:90:28:f1:2a:90:ca:08:4a:83:09:eb:2f: 0c:16:e3:f3:f7:a8:df:18:e3:d5:d4:64:cb:5b:73:d3:2c:c4: 40:cc:2e:d8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NT0zRm6ZKCDQznyn9uyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGQ0MjEwYTM0NGM5OTk0OTNlNjFjZjlkZDczNTY3N2QzOGJjMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmlp2J6sIXA+GPX9ExQQFD45Zz29 gaHF7Xx2vk9xvXCWtfTQak5OrGRp5oru8jMMqhocZynDvhQRC7rAp7XFvFnEGkfm jtBUPHrhGsbiYi049OBMT/Sy5wB/ybyO6O6lrjj4EnAr5a40mlaTqi05Ye2GU0vP NgpGcbf5thRlQPOFg12vlcnO3S/5gsJsN4WjUkcwDc5ZKGpBecBRo1ehG4y8OXrV KaPJ75CmJqrktUkwWhaR+sq1JeMS9ilD2YWGnjjlXZitLFs+VCMkvutqbgWah4IV xdLgbnHqoykemTq4sqdf+2pvTBaTZi1YId7xU4cUWwX6vl9wHbTp4dd9HQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2MzZWY1 NC02N2ZhLTQ5MzktYjY1OC0zODU0NGMyYTg3YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYzNlZjU0 LTY3ZmEtNDkzOS1iNjU4LTM4NTQ0YzJhODdiYi8xL0ZOUWhDalJNbVpTVDVoejUz WE5XZDlPTHdGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8seMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM/xzANBgkqhkiG9w0BAQsFAAOCAQEABD+NT7XmM0rAMeq5Oqo6NJHIctZ/hsV9 J7lwbz26VdWwmxpaqCaPiX3/NwM241BZOVaWjbMNlDDbCm0tipG5CicwNobWONLj Jnyicrx4HafyMjvhsNom2BRrebpCFLUIMUZKGCMgL6NPW+jiA2a/EkGSKi5fl3AR H0Xd+6KivHUNwVOl/m/HVVUZUVLTmlCDnZYLqJJaPhPDiskU5SI/xwSud2mYELwy J4gK8H8v5sMG7uNcdEHXjJ2kIg+lBXnr5rBXFwH1o/E6s9zekhW+9R7LsdyGa0iy VX9Pd3z1kCjxKpDKCEqDCesvDBbj8/eo3xjj1dRky1tz0yzEQMwu2A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:47 2026 by rpki-client