This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer (raw, json) Hash identifier: MR0YqS9JU5xoTyeL7PCn0z7mRhohvv5DVDm1w4vzb/U= Subject key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1393C66374718B31D83964EB2984F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21050 IP: 62.215.0.0/16 IP: 83.96.0.0/17 IP: 89.203.0.0/17 IP: 178.61.0.0/16 IP: 185.95.4.0 -- 185.95.6.255 IP: 2a02:c08::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:93:c6:63:74:71:8b:31:d8:39:64:eb:29:84:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ffa042114301368b4069abd68a1efbac47fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:84:1a:02:12:c7:87:83:80:6d:94:17:83: 49:45:80:99:34:94:7f:43:a8:5e:8c:88:f2:08:0b: 25:fa:34:b4:a9:04:c1:35:2b:40:72:1f:e9:bd:6a: 9b:56:78:25:2e:d5:e5:be:48:25:74:2b:8a:0a:63: 6b:bc:3b:0c:64:dd:71:76:d6:50:c6:b9:2e:15:c7: 8c:85:75:a3:a3:59:b1:40:4a:77:66:f5:c9:9d:cc: be:87:89:43:37:9f:ae:83:1f:62:fb:ac:6d:1b:2c: 7f:a6:83:b4:c6:8a:8c:00:72:0f:6b:cb:86:73:a1: 08:35:59:8a:fd:3a:2d:a4:b2:a4:24:07:ff:be:2b: c7:d6:e3:6d:d2:0d:0b:5d:ca:a1:51:55:d3:97:49: a5:c8:0f:94:22:25:c7:c9:47:59:da:c0:b6:a6:77: ff:25:fb:b1:fb:33:52:8b:79:af:cc:c7:71:d6:22: 64:0c:44:2e:72:71:2f:56:ff:7b:4f:d5:43:39:3e: ae:ef:0c:94:bd:08:5c:3a:28:04:3b:a6:e7:a1:66: 71:60:ea:ed:27:91:93:ab:65:00:44:36:77:27:3e: 82:ca:26:30:85:25:5a:4a:77:97:21:77:0a:05:52: b9:01:34:83:a0:36:bc:28:f8:24:3c:f2:57:77:1d: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.215.0.0/16 83.96.0.0/17 89.203.0.0/17 178.61.0.0/16 185.95.4.0-185.95.6.255 IPv6: 2a02:c08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21050 Signature Algorithm: sha256WithRSAEncryption a8:52:4f:dd:d1:f0:51:ae:c1:6c:54:12:bd:5a:e1:c6:c2:4c: 7b:be:d2:67:ee:63:28:e0:9e:bb:d4:d1:12:27:9e:c6:25:63: ee:c1:49:ad:d0:27:7b:f1:f9:81:26:0d:38:1f:7a:24:a9:f5: e9:e1:5f:d9:29:3f:7b:75:c5:21:f4:da:91:ce:ee:21:12:33: 7f:a5:a5:c9:86:85:07:8b:61:b6:3f:9b:d6:88:cc:d5:e1:1c: 8f:ca:af:b3:c6:19:e7:91:62:f3:0a:9a:5a:b3:5d:98:ca:e0: 2d:8b:be:9c:bd:4e:f7:3d:f2:8b:3c:1b:c9:d0:44:46:23:5e: 1f:31:44:a8:a4:27:9b:38:d2:f0:1b:2d:99:ed:0d:db:5c:a9: be:40:bc:aa:f7:39:c5:75:f7:fe:f9:44:64:80:33:62:1a:35: 32:01:06:23:43:52:b4:82:23:c4:c3:6b:6e:ee:98:70:fc:d8: 88:7f:ba:b5:f0:12:0d:b4:5a:cc:fb:c4:86:05:7e:5f:2f:fd: 75:d3:51:92:d1:3e:3f:cb:0b:f2:41:44:26:c5:ab:da:d4:22: 25:af:b5:32:a1:65:f2:c3:8b:8d:ec:99:cc:26:03:1b:49:47: a9:ad:3e:1f:b5:68:4c:9e:30:93:ce:5f:06:ee:82:ff:80:3c: 17:ae:32:8a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/E5PGY3RxizHYOWTrKYT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWZmYTA0MjExNDMwMTM2OGI0MDY5YWJkNjhhMWVmYmFjNDdmZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2aEGgISx4eDgG2UF4NJRYCZNJR/ Q6hejIjyCAsl+jS0qQTBNStAch/pvWqbVnglLtXlvkgldCuKCmNrvDsMZN1xdtZQ xrkuFceMhXWjo1mxQEp3ZvXJncy+h4lDN5+ugx9i+6xtGyx/poO0xoqMAHIPa8uG c6EINVmK/TotpLKkJAf/vivH1uNt0g0LXcqhUVXTl0mlyA+UIiXHyUdZ2sC2pnf/ Jfux+zNSi3mvzMdx1iJkDEQucnEvVv97T9VDOT6u7wyUvQhcOigEO6bnoWZxYOrt J5GTq2UARDZ3Jz6CyiYwhSVaSneXIXcKBVK5ATSDoDa8KPgkPPJXdx0QqQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFBX/oEIRQwE2i0Bpq9aKHvusR/3OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzE0OWJj NS01MWFhLTRlN2ItOGYwMy1iNzNhMzZkOTM5YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMTQ5YmM1 LTUxYWEtNGU3Yi04ZjAzLWI3M2EzNmQ5MzliMi8xL0ZmLWdRaEZEQVRhTFFHbXIx b29lLTZ4SF9jNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwMAPtcDBAdTYAADBAdZywADAwCyPTAMAwQCuV8E AwQAuV8GMA0EAgACMAcDBQAqAgwIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlI6 MA0GCSqGSIb3DQEBCwUAA4IBAQCoUk/d0fBRrsFsVBK9WuHGwkx7vtJn7mMo4J67 1NESJ57GJWPuwUmt0Cd78fmBJg04H3okqfXp4V/ZKT97dcUh9NqRzu4hEjN/paXJ hoUHi2G2P5vWiMzV4RyPyq+zxhnnkWLzCppas12YyuAti76cvU73PfKLPBvJ0ERG I14fMUSopCebONLwGy2Z7Q3bXKm+QLyq9znFdff++URkgDNiGjUyAQYjQ1K0giPE w2tu7phw/NiIf7q18BINtFrM+8SGBX5fL/1101GS0T4/ywvyQUQmxava1CIlr7Uy oWXyw4uN7JnMJgMbSUeprT4ftWhMnjCTzl8G7oL/gDwXrjKK -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:36 2026 by rpki-client