This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer File: FfiJ_tAIX8IbCPy7slLDEG35mqg.cer (raw, json) Hash identifier: 479sPb7M3cgjuYnM1YzDknlrNzQEMo82sVRcCrj0J1I= Subject key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759329E6E91F1ACCDADDEB196AB293B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208203 IP: 45.145.236.0/22 IP: 46.22.152.0/21 IP: 72.251.252.0/22 IP: 109.94.212.0/22 IP: 185.234.200.0/22 IP: 192.166.40.0/22 IP: 202.71.144.0/21 IP: 206.168.72.0/21 IP: 2a0f:ab00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:32:9e:6e:91:f1:ac:cd:ad:de:b1:96:ab:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:19:98:c6:2d:63:8b:4c:84:5e:0d:db:0d: e7:1a:88:16:9d:ef:5b:65:97:9e:fe:ba:c3:25:0d: ec:c8:ed:11:05:fd:e8:a0:6e:fe:a6:02:65:6f:2e: cd:38:a8:dd:45:61:c6:7e:31:f0:12:ab:e7:73:80: 7c:c6:fc:a8:5c:0f:55:7c:6f:3a:57:81:c6:c7:96: 94:3e:60:85:63:5f:0e:a8:33:ea:7b:a6:ad:e3:3b: 24:80:32:5f:c9:03:73:d1:bd:46:1a:1a:1a:14:7f: f1:11:c5:ec:8e:e9:de:a2:17:34:a5:8f:ea:b7:22: b0:38:a4:f2:a7:33:cd:0d:36:e8:e1:37:8d:93:cf: b0:1c:0b:14:4c:ae:07:b1:2d:84:c4:19:9e:71:1c: c5:3e:7b:1c:48:56:d0:bc:7d:71:b3:a2:b6:b9:9e: 27:50:f9:06:a0:7d:c2:cf:0a:1d:5e:38:be:8b:1f: 95:27:ce:bc:6b:0c:a8:57:ef:7f:70:bd:08:9e:7e: f8:37:7f:23:c0:3b:dd:a9:f0:ad:86:ac:a3:1e:4e: 0e:a4:b5:bf:5e:fe:43:5f:de:41:1d:c4:70:f9:ae: 22:2c:89:b7:5d:04:d2:0d:d3:10:51:60:ef:8b:4e: 43:03:1d:cb:af:04:19:2e:6f:d6:91:42:32:6b:3c: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.236.0/22 46.22.152.0/21 72.251.252.0/22 109.94.212.0/22 185.234.200.0/22 192.166.40.0/22 202.71.144.0/21 206.168.72.0/21 IPv6: 2a0f:ab00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208203 Signature Algorithm: sha256WithRSAEncryption 3c:53:0a:2b:7f:a0:5b:12:4b:e9:a4:e0:21:b7:89:28:90:58: 6e:3f:22:bc:8d:fd:16:19:e6:fa:c6:54:29:5c:72:9c:42:23: f5:a0:9c:19:0c:89:30:3f:bb:6c:7d:53:d5:4f:48:f6:86:db: ba:fc:c0:47:c3:59:08:b1:25:e3:55:7a:e9:f1:80:87:02:9f: 1d:ea:6e:b9:3b:5d:15:bd:d2:01:5f:12:cf:c7:92:52:0a:e0: 20:9a:53:b5:72:a8:b8:d4:25:0a:55:2f:2c:7a:9b:f2:e9:b3: fa:5d:d0:f9:e6:63:f1:df:36:be:a1:ec:71:91:c9:25:09:26: a3:75:0a:57:a6:72:d2:06:b3:ed:76:92:f1:29:8a:9e:a3:8b: cf:be:d8:b2:9d:7f:fc:e0:9e:e2:ea:ba:b6:c9:e6:cc:aa:b7: b6:25:b7:ef:57:89:89:73:e2:c3:c1:ca:fa:3c:6a:d5:5b:be: 8d:18:e3:0e:c2:2a:62:20:90:4d:0c:1d:24:22:65:11:ce:0f: dd:fd:bb:f5:12:25:ef:68:78:aa:14:30:1c:6b:9e:11:40:4b: 73:68:4a:03:6c:ac:30:29:f9:6e:d0:a1:58:36:a0:9f:7d:32: f2:1b:de:42:41:a2:8b:55:97:5b:e1:66:16:a9:5f:ad:e0:17: d0:2d:21:60 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt3WTKebpHxrM2t3rGWqyk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWY4ODlmZWQwMDg1ZmMyMWIwOGZjYmJiMjUyYzMxMDZkZjk5YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4ZmMYtY4tMhF4N2w3nGogWne9b ZZee/rrDJQ3syO0RBf3ooG7+pgJlby7NOKjdRWHGfjHwEqvnc4B8xvyoXA9VfG86 V4HGx5aUPmCFY18OqDPqe6at4zskgDJfyQNz0b1GGhoaFH/xEcXsjuneohc0pY/q tyKwOKTypzPNDTbo4TeNk8+wHAsUTK4HsS2ExBmecRzFPnscSFbQvH1xs6K2uZ4n UPkGoH3CzwodXji+ix+VJ868awyoV+9/cL0Inn74N38jwDvdqfCthqyjHk4OpLW/ Xv5DX95BHcRw+a4iLIm3XQTSDdMQUWDvi05DAx3LrwQZLm/WkUIyazzfQwIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFBX4if7QCF/CGwj8u7JSwxBt+ZqoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2Y5NTJm Yi05MzE4LTQ5YjYtYjk0Ni0xZTNhMTk1NDc4ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvZjk1MmZi LTkzMTgtNDliNi1iOTQ2LTFlM2ExOTU0NzhlMC8xL0ZmaUpfdEFJWDhJYkNQeTdz bExERUczNW1xZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCLZHsAwQDLhaYAwQCSPv8AwQCbV7UAwQCuerI AwQCwKYoAwQDykeQAwQDzqhIMA0EAgACMAcDBQMqD6sAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwMtSzANBgkqhkiG9w0BAQsFAAOCAQEAPFMKK3+gWxJL6aTgIbeJ KJBYbj8ivI39Fhnm+sZUKVxynEIj9aCcGQyJMD+7bH1T1U9I9obbuvzAR8NZCLEl 41V66fGAhwKfHepuuTtdFb3SAV8Sz8eSUgrgIJpTtXKouNQlClUvLHqb8umz+l3Q +eZj8d82vqHscZHJJQkmo3UKV6Zy0gaz7XaS8SmKnqOLz77Ysp1//OCe4uq6tsnm zKq3tiW371eJiXPiw8HK+jxq1Vu+jRjjDsIqYiCQTQwdJCJlEc4P3f279RIl72h4 qhQwHGueEUBLc2hKA2ysMCn5btChWDagn30y8hveQkGii1WXW+FmFqlfreAX0C0h YA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:06:21 2026 by rpki-client