This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer (raw, json) Hash identifier: Cq5TygOuFodip6AGg7t113JGjvtQC8iqZDom9VXYTtY= Subject key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD545E1D63865D4826492E15ABBF5A206 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 08:01:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49619 IP: 87.192.192.0/21 IP: 185.245.246.0/23 IP: 185.247.60.0/24 IP: 185.252.128.0/22 IP: 194.61.81.0/24 IP: 195.28.20.0/24 IP: 2a0c:2740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:45:e1:d6:38:65:d4:82:64:92:e1:5a:bb:f5:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 08:01:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1594f00471e248abe394d521e96cba9630d8520e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:a7:85:0d:5a:ae:24:51:22:b5:18:23:21: 34:d0:2f:1b:45:e8:da:cc:a7:eb:ee:4d:02:d6:11: 0b:48:ff:0b:13:cb:61:23:a2:4c:85:72:b7:b6:69: 68:66:48:7a:81:04:9d:82:a1:58:b9:ca:1c:49:be: d5:76:82:96:27:99:8f:f4:34:d7:2d:f0:7a:8c:fd: 31:66:05:ff:2d:54:1e:ea:ec:01:d9:2e:85:9f:3b: b1:06:2e:95:12:fd:a0:72:dd:ac:27:3f:76:f2:13: 6e:b9:88:28:9d:41:68:5c:99:92:ec:ae:83:23:bf: 5b:68:7d:c4:e2:8a:c6:a3:e2:5b:40:24:ad:91:e2: 50:94:a4:a7:37:45:73:38:78:e8:de:39:67:82:88: 94:37:82:e7:1d:5a:ab:a7:72:ec:35:f5:fb:89:37: 81:4b:99:a0:2d:6e:c9:88:00:6b:5d:18:66:68:2f: d5:2a:88:c0:35:1b:e2:43:9f:5b:a7:ed:db:38:ba: d5:7b:e7:c1:ff:c8:23:ac:05:ea:53:88:93:88:5a: f5:38:09:c8:b2:a6:8f:c3:2f:bd:3a:e7:ec:9c:cb: d8:75:ac:db:7f:37:c1:c9:8b:51:5f:22:9a:1f:11: 3b:ed:1c:4a:2f:86:e9:5b:18:d2:e4:f4:28:87:2d: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.192.192.0/21 185.245.246.0/23 185.247.60.0/24 185.252.128.0/22 194.61.81.0/24 195.28.20.0/24 IPv6: 2a0c:2740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49619 Signature Algorithm: sha256WithRSAEncryption 61:2b:32:17:2c:95:5e:65:2d:d1:e7:7a:67:73:d3:9c:99:6a: 87:15:1e:17:0f:28:12:93:aa:a7:15:6e:cc:f1:a8:88:3e:2b: 92:d0:7a:15:4d:f3:23:0d:61:aa:ef:bb:66:7a:68:11:19:d6: 36:ea:7c:c1:dd:f3:9d:fd:69:4e:5c:34:60:9b:4b:3e:8a:cb: 3d:6d:e5:df:37:8f:e3:bf:9d:c2:0a:db:b4:1b:ca:09:eb:c9: 31:3d:a0:82:65:f0:77:0c:c6:41:3a:44:0e:0e:a2:0f:a9:b5: 75:ef:33:ae:29:14:2c:9c:a0:63:40:3d:bc:01:d0:31:09:ad: f6:a4:5d:69:d4:ba:13:a1:62:42:f4:8c:43:cb:58:43:8e:bd: b7:05:41:ee:87:95:1d:15:46:55:0e:55:b9:8e:63:cf:f0:49: 6a:15:d9:c6:06:66:b0:99:3c:43:2c:da:32:a2:7c:9d:9b:1a: 37:7a:d5:3b:73:02:00:e5:a4:ce:ea:57:00:02:53:83:1c:ea: bd:f6:dd:95:66:39:84:bf:6f:31:d7:e5:66:c6:56:75:08:a5: 47:59:42:48:3d:ea:2f:6c:c4:88:4e:fd:67:42:d0:d5:79:ee: b8:5f:11:91:19:55:b7:af:a8:eb:1c:56:ba:ff:36:03:11:5a: 54:5d:3f:f3 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZvVReHWOGXUgmSS4Vq79aIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MDgwMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTk0ZjAwNDcxZTI0OGFiZTM5NGQ1MjFlOTZjYmE5NjMwZDg1MjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYmnhQ1ariRRIrUYIyE00C8bReja zKfr7k0C1hELSP8LE8thI6JMhXK3tmloZkh6gQSdgqFYucocSb7VdoKWJ5mP9DTX LfB6jP0xZgX/LVQe6uwB2S6FnzuxBi6VEv2gct2sJz928hNuuYgonUFoXJmS7K6D I79baH3E4orGo+JbQCStkeJQlKSnN0VzOHjo3jlngoiUN4LnHVqrp3LsNfX7iTeB S5mgLW7JiABrXRhmaC/VKojANRviQ59bp+3bOLrVe+fB/8gjrAXqU4iTiFr1OAnI sqaPwy+9OufsnMvYdazbfzfByYtRXyKaHxE77RxKL4bpWxjS5PQohy1eVQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFBWU8ARx4kir45TVIelsupYw2FIOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzc5YTY0 ZS0wNjlmLTQ5OWQtYTYzMS04Y2Q0MmNlZGUyMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNzlhNjRl LTA2OWYtNDk5ZC1hNjMxLThjZDQyY2VkZTIyMC8xL0ZaVHdCSEhpU0t2amxOVWg2 V3k2bGpEWVVnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDV8DAAwQBufX2AwQAufc8AwQCufyAAwQAwj1R AwQAwxwUMA0EAgACMAcDBQMqDCdAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDB 0zANBgkqhkiG9w0BAQsFAAOCAQEAYSsyFyyVXmUt0ed6Z3PTnJlqhxUeFw8oEpOq pxVuzPGoiD4rktB6FU3zIw1hqu+7ZnpoERnWNup8wd3znf1pTlw0YJtLPorLPW3l 3zeP47+dwgrbtBvKCevJMT2ggmXwdwzGQTpEDg6iD6m1de8zrikULJygY0A9vAHQ MQmt9qRdadS6E6FiQvSMQ8tYQ469twVB7oeVHRVGVQ5VuY5jz/BJahXZxgZmsJk8 QyzaMqJ8nZsaN3rVO3MCAOWkzupXAAJTgxzqvfbdlWY5hL9vMdflZsZWdQilR1lC SD3qL2zEiE79Z0LQ1XnuuF8RkRlVt6+o6xxWuv82AxFaVF0/8w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:51 2026 by rpki-client