This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer File: FW8E_FyodTFasLhUtkUGsJyZjpo.cer (raw, json) Hash identifier: jAnMV2kCB13dzIT2x7zLScvUr/ks6VuxBL6rhgsyx7Y= Subject key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA7961C54463318719E9721AF8E4AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.234.0/24 IP: 193.23.113.0/24 IP: 2001:678:668::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:79:61:c5:44:63:31:87:19:e9:72:1a:f8:e4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=156f04fc5ca875315ab0b854b64506b09c998e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:e0:05:9d:1b:ad:df:bc:35:6a:2c:86:91: 63:b2:5b:c4:97:d2:64:ce:d8:0c:c1:71:6c:71:95: 7c:ae:47:b3:75:19:a5:a0:c6:17:29:03:1c:4c:04: 2f:29:31:d9:f4:12:8b:e9:6f:4e:3c:c0:4e:c1:9c: 0c:f9:59:83:cb:38:05:3b:84:71:24:12:8d:ea:65: 4e:7f:8b:3e:d1:12:1e:5e:86:14:e3:a9:57:de:84: a2:e8:bf:ad:60:c2:9c:b1:7f:34:26:8a:d7:28:d9: 7e:9d:21:25:9a:75:62:76:42:49:62:9c:67:d5:25: 16:ea:c1:de:c3:f6:d9:8d:97:c9:fb:2e:d3:23:1a: 6f:88:bd:ac:fd:15:30:57:2c:4e:d3:be:c8:42:36: b2:87:bc:7c:31:a0:e9:db:50:03:ca:6e:80:26:de: 53:39:56:d5:45:3f:d1:0d:e4:3d:19:1f:32:d5:36: 4c:ae:cb:cc:36:7d:2b:0c:0f:6a:0a:28:82:e9:ca: fc:ad:ba:98:54:42:3d:a0:10:e5:54:01:1f:66:ec: 9c:94:db:d5:ae:a5:bd:f8:69:58:2c:02:17:f0:3c: 6a:86:c5:fe:25:58:20:7a:1a:89:42:5c:87:24:de: 4a:9c:ca:b2:df:93:09:05:08:dd:2d:9d:96:a7:ea: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.234.0/24 193.23.113.0/24 IPv6: 2001:678:668::/48 Signature Algorithm: sha256WithRSAEncryption aa:3b:7a:cb:7b:ca:0f:77:8d:92:48:e3:b1:8f:2c:86:15:29: 18:36:88:89:5d:66:54:97:38:ba:2d:c2:77:3b:de:b6:16:0e: ca:d7:69:27:af:31:eb:f2:31:21:1a:e5:dd:ea:e9:a0:a5:12: 52:30:72:b9:a2:9d:5c:3b:2f:2a:ac:a6:35:89:df:e2:34:38: 2d:9b:05:58:83:23:de:ce:d8:f1:26:6b:7b:2d:27:f3:3b:17: fe:88:31:fb:3d:10:f1:23:70:df:62:61:bc:97:20:1f:41:bf: e4:7f:6c:1a:d3:9b:5f:ed:55:92:2b:b6:92:21:a9:8c:6a:a2: 8d:fd:7f:39:92:71:2c:59:7f:59:da:70:c0:04:d2:a4:ff:7c: f9:68:f2:ba:c8:37:15:d6:46:0d:be:e0:ad:29:d2:62:f3:70: 85:96:4e:fb:9e:ca:a9:1c:8a:df:8d:81:46:02:bc:06:cd:e8: 53:d7:dd:68:69:e9:63:08:43:f6:08:1e:6c:d8:17:81:e0:cc: 88:6e:d8:c5:b3:9e:8f:2e:c5:5a:04:5c:65:73:68:a9:b3:4a: a8:0b:4e:42:8a:b5:e8:df:2c:75:f0:af:84:83:1f:9e:8c:cb: 2b:15:ed:ef:7f:8e:7c:44:97:bd:e5:af:ea:40:bc:3e:94:b9: 0e:af:ca:c8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt9ynlhxURjMYcZ6XIa+OSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTZmMDRmYzVjYTg3NTMxNWFiMGI4NTRiNjQ1MDZiMDljOTk4ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5vgBZ0brd+8NWoshpFjslvEl9Jk ztgMwXFscZV8rkezdRmloMYXKQMcTAQvKTHZ9BKL6W9OPMBOwZwM+VmDyzgFO4Rx JBKN6mVOf4s+0RIeXoYU46lX3oSi6L+tYMKcsX80JorXKNl+nSElmnVidkJJYpxn 1SUW6sHew/bZjZfJ+y7TIxpviL2s/RUwVyxO077IQjayh7x8MaDp21ADym6AJt5T OVbVRT/RDeQ9GR8y1TZMrsvMNn0rDA9qCiiC6cr8rbqYVEI9oBDlVAEfZuyclNvV rqW9+GlYLAIX8DxqhsX+JVggehqJQlyHJN5KnMqy35MJBQjdLZ2Wp+qE3wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBVvBPxcqHUxWrC4VLZFBrCcmY6aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2Y3MTBj ZS00NDBmLTQwNWYtYWM1MC1hYTk0Mjk5NGZjNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvZjcxMGNl LTQ0MGYtNDA1Zi1hYzUwLWFhOTQyOTk0ZmM2MC8xL0ZXOEVfRnlvZFRGYXNMaFV0 a1VHc0p5Wmpwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAW8bqAwQAwRdxMA8EAgACMAkDBwAgAQZ4Bmgw DQYJKoZIhvcNAQELBQADggEBAKo7est7yg93jZJI47GPLIYVKRg2iIldZlSXOLot wnc73rYWDsrXaSevMevyMSEa5d3q6aClElIwcrminVw7LyqspjWJ3+I0OC2bBViD I97O2PEma3stJ/M7F/6IMfs9EPEjcN9iYbyXIB9Bv+R/bBrTm1/tVZIrtpIhqYxq oo39fzmScSxZf1nacMAE0qT/fPlo8rrINxXWRg2+4K0p0mLzcIWWTvueyqkcit+N gUYCvAbN6FPX3Whp6WMIQ/YIHmzYF4HgzIhu2MWzno8uxVoEXGVzaKmzSqgLTkKK tejfLHXwr4SDH56MyysV7e9/jnxEl73lr+pAvD6UuQ6vysg= -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:48 2026 by rpki-client