This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer File: FgRPZYu8kicHhfe7ByrJNolfSTM.cer (raw, json) Hash identifier: sfr6cuhHfA2WWnyQ97giDoDMP+oCk4dyKdSu17vW74c= Subject key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7EC354AAAA0EAF5C9F541AB8A22A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211588 IP: 2a0f:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:c3:54:aa:aa:0e:af:5c:9f:54:1a:b8:a2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16044f658bbc92270785f7bb072ac936895f4933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:52:40:a3:e8:b8:73:a9:56:b4:48:4e:da: e2:0f:fc:f9:9b:7d:c3:89:78:ff:e5:5a:86:84:d2: 77:b1:3c:9d:e9:66:39:51:99:a8:a9:2c:8c:67:37: 6e:10:48:d4:78:64:81:52:4b:ca:18:8d:ec:61:0b: 79:4b:08:11:e4:8f:b9:02:b8:f5:e4:a2:8e:33:67: de:fc:c2:8e:ab:26:b4:51:39:5a:cc:d9:7f:9d:22: 05:a5:4f:d9:d9:a8:27:4d:d0:19:08:5e:df:bc:3e: 5b:ad:84:65:dc:d1:44:fc:36:d6:dc:40:c1:c4:c8: c2:44:85:05:81:44:41:b4:e0:63:ea:a4:b7:a0:b3: b8:59:f6:d6:e3:25:cf:c8:53:74:da:fb:19:87:78: 4d:30:83:da:02:0a:2e:1e:29:2b:a2:79:79:0a:c1: 4d:20:f0:5a:4d:72:af:3a:47:48:39:62:99:36:db: c1:01:d8:9e:33:25:6a:41:fa:75:4f:92:9e:e1:77: 20:4c:c3:d7:e9:e8:03:02:ed:c6:06:6a:96:20:13: fc:ec:2a:a1:22:a8:92:15:52:6d:a4:d4:53:e2:1f: 5e:26:6a:13:4b:27:5c:96:ab:cb:05:f2:6a:6e:11: c7:76:e0:e7:8c:22:ac:d9:33:d2:23:61:4e:02:2f: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ff40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211588 Signature Algorithm: sha256WithRSAEncryption 71:3a:de:7e:3d:39:53:85:aa:02:aa:ba:1c:cb:9f:24:e2:a0: 78:fa:c2:f8:f4:3e:d3:9e:2a:dd:1e:91:39:42:87:67:c7:c5: 82:74:14:df:5c:7c:c6:3c:21:85:17:fd:31:b3:3d:fa:66:26: 30:a9:85:5a:44:3f:fa:04:3d:18:74:e9:3f:a3:0b:9f:7d:40: b3:87:2a:12:67:71:ad:ca:56:1c:df:23:f2:a1:8a:54:af:c3: 7d:6f:b4:17:da:a6:99:6e:bc:f4:3a:a1:a5:13:c3:90:09:f9: fc:90:15:6c:38:7e:95:16:bc:09:e4:99:95:a0:f2:0c:99:e4: 03:13:f2:c4:7b:d2:7a:b2:a3:04:a6:e3:bb:58:84:c2:9c:e5: 3f:9c:5e:f5:35:7f:8c:04:f5:d9:3e:e8:23:5c:ea:4f:54:fe: ea:0b:7a:5a:fe:4d:a2:c3:db:bc:3e:a1:70:2f:23:77:19:c5: b7:74:ec:1d:c2:5a:cd:6c:fa:52:72:a7:57:32:05:b0:af:1c: 70:80:73:51:12:dd:66:9e:eb:10:56:95:a5:e3:f2:94:c7:ca: 31:51:32:67:13:a3:cd:68:9c:67:3b:8b:ee:a7:c5:c0:62:60: 97:22:58:3b:5f:44:91:08:29:f2:9d:b5:d5:4a:b1:6a:f0:d7: a2:12:14:34 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt2637DVKqqDq9cn1QauKIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjA0NGY2NThiYmM5MjI3MDc4NWY3YmIwNzJhYzkzNjg5NWY0OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rJSQKPouHOpVrRITtriD/z5m33D iXj/5VqGhNJ3sTyd6WY5UZmoqSyMZzduEEjUeGSBUkvKGI3sYQt5SwgR5I+5Arj1 5KKOM2fe/MKOqya0UTlazNl/nSIFpU/Z2agnTdAZCF7fvD5brYRl3NFE/DbW3EDB xMjCRIUFgURBtOBj6qS3oLO4WfbW4yXPyFN02vsZh3hNMIPaAgouHikronl5CsFN IPBaTXKvOkdIOWKZNtvBAdieMyVqQfp1T5Ke4XcgTMPX6egDAu3GBmqWIBP87Cqh IqiSFVJtpNRT4h9eJmoTSydclqvLBfJqbhHHduDnjCKs2TPSI2FOAi8keQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBYET2WLvJInB4X3uwcqyTaJX0kzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2RiNTAz Yy1kNjU0LTRiNDYtOWI4Yi04MjJiMjU1NTM4ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGI1MDNj LWQ2NTQtNGI0Ni05YjhiLTgyMmIyNTU1MzhmZS8xL0ZnUlBaWXU4a2ljSGhmZTdC eXJKTm9sZlNUTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg//QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDOoQwDQYJKoZIhvcNAQELBQADggEBAHE63n49OVOFqgKquhzLnyTioHj6wvj0 PtOeKt0ekTlCh2fHxYJ0FN9cfMY8IYUX/TGzPfpmJjCphVpEP/oEPRh06T+jC599 QLOHKhJnca3KVhzfI/KhilSvw31vtBfappluvPQ6oaUTw5AJ+fyQFWw4fpUWvAnk mZWg8gyZ5AMT8sR70nqyowSm47tYhMKc5T+cXvU1f4wE9dk+6CNc6k9U/uoLelr+ TaLD27w+oXAvI3cZxbd07B3CWs1s+lJyp1cyBbCvHHCAc1ES3Wae6xBWlaXj8pTH yjFRMmcTo81onGc7i+6nxcBiYJciWDtfRJEIKfKdtdVKsWrw16ISFDQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:52 2026 by rpki-client