This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer File: FQKvcT425SxxhmyKnr2s89him2g.cer (raw, json) Hash identifier: 4Lcpxh0D/y7L0jGGrPeWkZtvvvrAbBby63O+6eT0rzI= Subject key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B815FE4FB8B1903DCC4A03299802 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.102.0.0/16 IP: 193.84.68.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b8:15:fe:4f:b8:b1:90:3d:cc:4a:03:29:98:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:7b:76:46:d0:6f:d5:21:c4:4f:fe:90:d8: a3:b3:82:c1:4c:4d:5f:0d:22:4c:d3:32:d3:a5:9d: 1e:27:a7:c6:2d:6d:48:96:6f:7f:6f:f9:50:69:8d: cf:32:46:44:95:df:89:45:0a:b1:24:98:44:c5:63: bf:7c:7c:93:61:2c:55:81:89:93:f6:45:6e:e9:a2: 84:c3:07:8a:3a:c2:aa:a6:09:73:a5:93:e7:e8:c8: f4:40:f1:4a:c6:24:0d:b8:52:5f:02:dd:9e:9a:81: 15:78:48:ce:c7:44:38:6b:c3:3a:75:28:3d:bd:8b: 69:32:2e:bd:58:55:28:da:79:42:a8:46:ff:67:99: a5:51:52:5d:aa:e5:59:93:dc:d5:4a:82:fa:d0:e0: af:77:36:57:46:90:60:97:44:10:12:a4:c3:94:71: 02:76:4a:cd:39:97:33:6a:f0:ff:b0:3f:be:3f:23: a0:5f:10:fe:4e:ee:a6:6e:61:42:4d:74:bc:18:44: 7d:37:5b:78:27:eb:f4:a7:ba:d5:3b:b3:50:d4:bd: cb:37:ca:3c:5f:ce:c4:7e:52:73:2f:7c:2a:72:dc: ed:f7:6b:59:86:59:94:82:4b:cb:77:0d:46:c2:b7: 2a:ff:61:5b:b2:3e:6f:44:53:6e:b1:f6:a9:49:82: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.102.0.0/16 193.84.68.0/24 Signature Algorithm: sha256WithRSAEncryption 02:df:26:bf:6f:5c:c6:e6:3f:84:8d:c5:47:73:f7:ce:92:ef: da:5c:03:f4:a5:57:86:02:30:8c:f3:da:1f:08:eb:85:78:c1: 76:c1:4e:78:a5:7c:7c:9a:fd:88:6a:e0:14:87:7c:80:ae:df: 9b:ee:b3:97:cb:6f:af:9c:60:0c:f2:83:22:03:58:8e:0c:30: 41:7e:d0:e6:6c:2c:21:3c:45:8d:00:91:8c:c3:8e:40:05:a4: b4:dd:7f:3c:30:61:fa:6c:14:6a:0d:79:df:9d:93:50:18:a6: dd:0a:b1:63:34:a4:28:4a:ac:39:90:e1:13:20:85:e7:0e:0b: 70:7f:e0:b6:2f:fa:f7:a9:4d:e4:c2:8e:67:46:12:e9:1f:6e: d4:cf:4a:07:f4:37:26:4a:57:38:82:cc:c7:79:9c:53:67:21: 0a:6a:2f:98:46:87:06:c3:c1:4b:e5:20:9f:52:a0:8e:4e:f0: 33:51:51:5b:c9:ce:45:64:15:83:43:59:da:78:0e:86:c8:1d: d9:c1:e0:27:96:bd:0e:b5:32:03:76:ff:41:0d:88:5f:4a:6e: 03:0e:97:1a:f6:dc:91:4d:1e:6d:fd:de:d6:38:42:b0:8c:3a: 86:6a:18:69:27:e3:90:c6:f0:ff:14:14:6b:f7:e8:73:34:63: 65:48:24:3a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt/FbgV/k+4sZA9zEoDKZgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTAyYWY3MTNlMzZlNTJjNzE4NjZjOGE5ZWJkYWNmM2Q4NjI5YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT97dkbQb9UhxE/+kNijs4LBTE1f DSJM0zLTpZ0eJ6fGLW1Ilm9/b/lQaY3PMkZEld+JRQqxJJhExWO/fHyTYSxVgYmT 9kVu6aKEwweKOsKqpglzpZPn6Mj0QPFKxiQNuFJfAt2emoEVeEjOx0Q4a8M6dSg9 vYtpMi69WFUo2nlCqEb/Z5mlUVJdquVZk9zVSoL60OCvdzZXRpBgl0QQEqTDlHEC dkrNOZczavD/sD++PyOgXxD+Tu6mbmFCTXS8GER9N1t4J+v0p7rVO7NQ1L3LN8o8 X87EflJzL3wqctzt92tZhlmUgkvLdw1Gwrcq/2Fbsj5vRFNusfapSYI74wIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFBUCr3E+NuUscYZsip69rPPYYptoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzlkY2My NS01YjBhLTRjM2UtOTE0OS01YTgyMzBlNzY0M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOWRjYzI1 LTViMGEtNGMzZS05MTQ5LTVhODIzMGU3NjQzYS8xL0ZRS3ZjVDQyNVN4eGhteUtu cjJzODloaW0yZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAkmYDBADBVEQwDQYJKoZIhvcNAQELBQADggEB AALfJr9vXMbmP4SNxUdz986S79pcA/SlV4YCMIzz2h8I64V4wXbBTnilfHya/Yhq 4BSHfICu35vus5fLb6+cYAzygyIDWI4MMEF+0OZsLCE8RY0AkYzDjkAFpLTdfzww YfpsFGoNed+dk1AYpt0KsWM0pChKrDmQ4RMghecOC3B/4LYv+vepTeTCjmdGEukf btTPSgf0NyZKVziCzMd5nFNnIQpqL5hGhwbDwUvlIJ9SoI5O8DNRUVvJzkVkFYND Wdp4DobIHdnB4CeWvQ61MgN2/0ENiF9KbgMOlxr23JFNHm393tY4QrCMOoZqGGkn 45DG8P8UFGv36HM0Y2VIJDo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:20 2026 by rpki-client