This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer (raw, json) Hash identifier: uZJxxF8ANpgxJ2Jzh1haqlHmFQxjCGR8b2iQqnmUOhs= Subject key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B85DBE2428A17086835C1210F3EC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12903 IP: 91.188.192.0/22 IP: 193.218.113.0/24 IP: 194.29.208.0/21 IP: 217.68.208.0/20 IP: 2a02:268::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:85:db:e2:42:8a:17:08:68:35:c1:21:0f:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14da869ba03374a192c8e3bdce950a90027adcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:fb:70:69:dc:4d:e2:0c:73:cf:f3:6b:f6: e5:af:32:ff:83:2e:3f:5c:00:f5:1b:d2:10:1a:0c: 15:24:be:89:ba:f4:e9:63:d5:ef:a7:79:69:7a:6e: 4b:02:41:05:76:ae:1e:76:ab:30:16:2f:7c:31:fb: cc:e1:19:fc:f6:5c:dc:1d:b3:48:32:91:0b:97:a7: a2:9f:7f:bc:76:be:0a:14:26:ff:44:0d:24:64:87: 9c:16:b9:e5:52:ae:cb:93:43:ce:0a:48:61:1b:1f: 63:a9:cd:2a:f7:18:06:25:47:2d:1e:98:0e:27:80: 91:35:ce:ed:cd:f9:58:55:5a:0c:21:81:f4:a4:cd: 8d:f3:c0:6a:99:f0:d1:e5:8f:af:5a:45:34:76:e5: d0:b3:3f:a2:48:f8:86:7a:e3:33:a5:5b:66:50:95: 9a:bb:0d:e7:3e:ef:00:a4:eb:0f:f3:f2:79:f8:84: eb:ed:04:96:78:43:be:ab:35:ba:6e:0f:a0:6e:3f: 9b:48:7a:f7:cb:7b:5c:ff:55:0c:1f:51:7c:19:8b: ff:ac:e1:ad:b7:d5:f0:3a:9e:bd:82:93:9b:cb:18: 5f:11:08:01:82:a0:cd:ba:bb:84:dc:9c:2c:6c:39: bd:9b:b5:82:0a:12:04:c6:6f:16:09:2e:5c:c2:2f: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.192.0/22 193.218.113.0/24 194.29.208.0/21 217.68.208.0/20 IPv6: 2a02:268::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12903 Signature Algorithm: sha256WithRSAEncryption 17:ba:2f:96:e0:ac:89:f7:82:47:7a:6d:bc:13:00:c9:b6:22: 22:d8:64:ae:9f:7a:d6:0c:fc:40:24:8b:a8:d7:a4:1f:f5:48: d4:06:8b:b7:16:71:32:28:ef:6c:e5:b0:af:92:39:57:5d:75: c5:02:10:72:9f:b1:51:ba:4a:89:42:dc:23:e4:ec:04:d7:4d: b3:44:b8:e9:6b:b0:6b:a0:03:61:ee:39:a8:e1:ce:7c:e6:78: 5e:20:bb:18:2e:79:2a:fc:fd:1f:71:4a:71:eb:26:a5:c1:bb: bd:b5:66:16:8c:1a:d3:24:0b:e1:64:7b:80:41:16:d9:12:99: b7:4b:4c:7e:c4:82:08:b6:56:44:de:f6:ba:f6:82:5d:7b:9c: 02:77:95:63:3e:8c:32:62:7e:60:1f:59:93:84:34:70:4c:e9: c7:81:03:26:6a:46:b5:f5:02:89:06:cf:e9:b3:e2:8b:25:27: 2f:e4:67:1a:ec:0c:95:cb:ac:cd:ce:6e:49:5a:60:5a:c6:48: 3d:cc:48:95:9a:5a:60:b9:0f:d3:0f:5a:cf:e3:1f:e8:15:b6: 72:17:20:bd:5a:a4:31:bd:0d:5b:f3:8f:ab:ad:3f:20:5f:1b: 72:1c:6d:b2:15:8a:a4:c4:fb:c4:4d:76:04:61:89:09:35:09: 75:fe:79:45 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9W4Xb4kKKFwhoNcEhDz7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGRhODY5YmEwMzM3NGExOTJjOGUzYmRjZTk1MGE5MDAyN2FkY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/L7cGncTeIMc8/za/blrzL/gy4/ XAD1G9IQGgwVJL6JuvTpY9Xvp3lpem5LAkEFdq4edqswFi98MfvM4Rn89lzcHbNI MpELl6ein3+8dr4KFCb/RA0kZIecFrnlUq7Lk0POCkhhGx9jqc0q9xgGJUctHpgO J4CRNc7tzflYVVoMIYH0pM2N88BqmfDR5Y+vWkU0duXQsz+iSPiGeuMzpVtmUJWa uw3nPu8ApOsP8/J5+ITr7QSWeEO+qzW6bg+gbj+bSHr3y3tc/1UMH1F8GYv/rOGt t9XwOp69gpObyxhfEQgBgqDNuruE3JwsbDm9m7WCChIExm8WCS5cwi8UXwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFBTahpugM3Shksjjvc6VCpACetyvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzE4ZTVh OS0xMjNmLTQ4YWQtOTFjNS1mNjAwNzQ4MmZhOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMThlNWE5 LTEyM2YtNDhhZC05MWM1LWY2MDA3NDgyZmE5My8xL0ZOcUdtNkF6ZEtHU3lPTzl6 cFVLa0FKNjNLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCW7zAAwQAwdpxAwQDwh3QAwQE2UTQMA0EAgAC MAcDBQAqAgJoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjJnMA0GCSqGSIb3DQEB CwUAA4IBAQAXui+W4KyJ94JHem28EwDJtiIi2GSun3rWDPxAJIuo16Qf9UjUBou3 FnEyKO9s5bCvkjlXXXXFAhByn7FRukqJQtwj5OwE102zRLjpa7BroANh7jmo4c58 5nheILsYLnkq/P0fcUpx6yalwbu9tWYWjBrTJAvhZHuAQRbZEpm3S0x+xIIItlZE 3va69oJde5wCd5VjPowyYn5gH1mThDRwTOnHgQMmaka19QKJBs/ps+KLJScv5Gca 7AyVy6zNzm5JWmBaxkg9zEiVmlpguQ/TD1rP4x/oFbZyFyC9WqQxvQ1b84+rrT8g XxtyHG2yFYqkxPvETXYEYYkJNQl1/nlF -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:02 2026 by rpki-client