This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer File: FkThypMSunm-VZ4RyOoJEAYN1I0.cer (raw, json) Hash identifier: Yv40vXQyhw46e7F7/PxTqiGumS6NCwDq4RY4Bwjjd/8= Subject key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C2246618B0307C0F6A976EE5B1685 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203130 IP: 185.144.36.0/22 IP: 193.134.216.0/21 IP: 193.247.203.0/24 IP: 2a07:3e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:22:46:61:8b:03:07:c0:f6:a9:76:ee:5b:16:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:d7:48:14:e2:90:a0:1e:0b:ed:52:d8:ad: a7:7a:3c:8b:c6:ed:c7:f8:9e:f2:0a:5c:2b:e6:52: 2a:dc:71:2f:6b:48:6d:22:2e:20:43:a1:d7:ef:4d: ac:8a:72:31:e8:e0:21:e5:0a:c1:6c:1e:8f:b2:fe: c6:b1:60:20:f3:7f:20:53:dd:6e:f0:2d:91:1e:36: 79:36:1c:fe:bf:7f:82:8e:2f:99:27:37:16:5c:49: 4f:5b:bd:8c:e5:67:5e:a8:59:4f:3c:43:0e:32:46: 09:8a:a2:ad:52:83:63:5e:c9:f7:26:64:97:6d:80: db:ec:27:20:2a:c4:e9:9a:f9:cf:e7:4b:d7:49:ea: 56:3f:7d:9b:b6:0e:73:e1:4d:3a:0e:6f:c1:34:65: 2e:65:fb:dc:5f:5e:fb:ab:09:f1:b5:c4:03:88:c2: 02:36:06:b7:49:23:01:ac:24:4b:5f:aa:69:e3:76: 95:76:52:a8:20:b8:6e:25:28:06:f0:37:07:5f:8c: af:05:22:56:b6:38:33:12:2b:71:5a:52:26:99:8f: 06:0a:70:39:f7:21:5e:c5:52:42:2a:fa:b1:4c:d2: c0:0a:b5:9d:2b:44:77:ce:7c:d2:d3:3d:ee:dd:1d: e1:fc:ed:a0:b3:a9:5c:69:53:d5:93:db:31:b7:23: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.36.0/22 193.134.216.0/21 193.247.203.0/24 IPv6: 2a07:3e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203130 Signature Algorithm: sha256WithRSAEncryption 33:70:e4:dc:f4:8a:95:58:0d:87:d9:a8:76:02:b5:00:04:78: a7:da:b6:46:a0:5d:e7:fd:ec:8f:5e:4d:2e:3e:de:c0:fc:aa: 32:c5:2d:a9:31:87:81:01:2b:ae:66:da:c9:4d:5e:ea:db:ab: 21:e4:e4:4d:87:50:0c:a9:9e:8b:9d:5f:7d:51:54:3e:ea:2f: 79:10:87:e9:7d:c4:82:9b:fe:b5:af:c5:24:d9:71:e1:eb:27: c3:f0:8a:f5:80:e6:97:ef:4f:12:ed:55:60:54:d8:db:1f:60: 7d:15:4a:6b:0a:5f:5a:e1:c9:1d:9d:02:dc:17:93:94:51:8b: 53:ca:a4:18:5c:ed:bd:7b:f3:03:fb:05:29:90:cc:a4:d7:1f: 70:97:6d:e0:79:9e:88:da:91:d2:7f:7b:dd:c2:20:a4:54:f2: be:29:08:cf:4b:fc:4d:ce:1a:f3:f1:28:d4:3c:7c:d7:70:1d: a6:ec:3c:8f:3b:5b:ea:14:c3:ac:8c:8e:2f:ea:59:f1:c3:ed: a1:4d:bb:05:49:fb:3d:54:07:7b:fa:39:86:b4:56:15:8f:dd: 81:6a:fb:1c:4d:0b:54:06:31:be:a9:82:a0:2b:c2:4e:a9:fd: d0:b3:41:f4:32:92:34:84:35:5f:66:c6:37:a8:22:b2:49:56: fb:9d:c3:8a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9XCJGYYsDB8D2qXbuWxaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjQ0ZTFjYTkzMTJiYTc5YmU1NTllMTFjOGVhMDkxMDA2MGRkNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M7XSBTikKAeC+1S2K2nejyLxu3H +J7yClwr5lIq3HEva0htIi4gQ6HX702sinIx6OAh5QrBbB6Psv7GsWAg838gU91u 8C2RHjZ5Nhz+v3+Cji+ZJzcWXElPW72M5WdeqFlPPEMOMkYJiqKtUoNjXsn3JmSX bYDb7CcgKsTpmvnP50vXSepWP32btg5z4U06Dm/BNGUuZfvcX177qwnxtcQDiMIC Nga3SSMBrCRLX6pp43aVdlKoILhuJSgG8DcHX4yvBSJWtjgzEitxWlImmY8GCnA5 9yFexVJCKvqxTNLACrWdK0R3znzS0z3u3R3h/O2gs6lcaVPVk9sxtyOIXQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFBZE4cqTErp5vlWeEcjqCRAGDdSNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzlkNmQ3 OS1lZWIxLTQ5MmEtYjYwMi01OGVlZmNkNjUyZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOWQ2ZDc5 LWVlYjEtNDkyYS1iNjAyLTU4ZWVmY2Q2NTJkOC8xL0ZrVGh5cE1TdW5tLVZaNFJ5 T29KRUFZTjFJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuZAkAwQDwYbYAwQAwffLMA0EAgACMAcDBQMq Bz4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZejANBgkqhkiG9w0BAQsFAAOC AQEAM3Dk3PSKlVgNh9modgK1AAR4p9q2RqBd5/3sj15NLj7ewPyqMsUtqTGHgQEr rmbayU1e6turIeTkTYdQDKmei51ffVFUPuoveRCH6X3Egpv+ta/FJNlx4esnw/CK 9YDml+9PEu1VYFTY2x9gfRVKawpfWuHJHZ0C3BeTlFGLU8qkGFztvXvzA/sFKZDM pNcfcJdt4HmeiNqR0n973cIgpFTyvikIz0v8Tc4a8/Eo1Dx813Adpuw8jztb6hTD rIyOL+pZ8cPtoU27BUn7PVQHe/o5hrRWFY/dgWr7HE0LVAYxvqmCoCvCTqn90LNB 9DKSNIQ1X2bGN6gisklW+53Dig== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:52 2026 by rpki-client