This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer File: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer (raw, json) Hash identifier: V6wuT5W9kpTPHO6rSop44rWAr4GzKfRDJI5xv+dFOek= Subject key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7D6D906E02F17D72D3030D356307C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41139 AS: 198818 AS: 212522 IP: 45.148.216.0/22 IP: 178.132.64.0/21 IP: 193.138.31.0/24 IP: 2001:7f8:56::/48 IP: 2a03:2380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:d9:06:e0:2f:17:d7:2d:30:30:d3:56:30:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1662cfd26eccf289757399cc99c17d1cb4357535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:00:be:a8:14:cc:fc:0a:9a:ad:4c:8c:db: 07:0a:c7:96:01:dd:68:48:6b:bb:71:c4:7a:6f:dc: 9e:af:a8:7d:e6:77:69:17:06:fe:91:15:c8:c6:2e: 03:e8:0e:6b:4e:83:4b:f6:7b:0c:35:70:57:93:57: dc:e3:85:0c:70:79:be:4f:e4:db:15:00:4d:45:d7: da:3b:31:d8:f3:b7:6f:50:86:2c:8e:f7:5c:5a:7c: 7f:72:ca:af:3e:e2:4e:fd:2d:0f:33:d8:0e:0d:59: 36:85:8f:8f:6f:f6:9d:d1:e5:30:2b:08:96:04:0f: bd:71:00:1a:11:b7:d1:35:9c:d9:9d:62:6e:2e:ca: cd:6c:33:98:27:0d:86:d5:31:68:ee:d7:67:0b:bc: 3c:7c:1b:28:9f:e8:1d:d4:da:2b:44:94:89:1c:21: ce:d6:ed:e2:a3:02:af:80:0a:01:c9:6c:80:e5:26: 40:54:05:ae:15:8d:61:82:d9:84:8c:46:5e:e9:0f: b1:d3:19:ef:fb:ac:18:50:c4:3f:cd:80:3e:ad:a2: 62:aa:8e:1d:12:85:f7:ab:81:01:11:57:8c:1b:2e: da:ec:46:67:f7:53:71:07:86:5f:07:bf:8d:32:27: 45:e0:25:2a:20:af:43:22:0b:a0:15:81:7f:1b:28: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.216.0/22 178.132.64.0/21 193.138.31.0/24 IPv6: 2001:7f8:56::/48 2a03:2380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41139 198818 212522 Signature Algorithm: sha256WithRSAEncryption 5b:08:0c:6e:47:3b:eb:a9:55:1d:46:65:05:ea:8e:e9:c2:94: fc:80:4b:50:c1:6b:d0:31:68:24:38:3c:a1:c5:ce:60:57:15: e2:02:f8:65:76:6a:97:21:ba:72:74:fc:c8:1c:f0:61:c4:c6: 76:a4:43:dd:46:8e:0f:d4:99:36:80:e9:0a:5e:bf:ad:c1:3c: 53:b2:d1:09:12:55:37:dc:ca:45:83:f9:b4:79:2f:da:1f:cd: f7:63:be:a2:df:3a:51:6e:29:05:72:40:b6:94:fd:3a:e2:b4: a7:7c:26:97:8d:be:ad:4f:7a:26:12:01:2f:89:e3:0d:c4:8e: 29:90:8d:00:d5:56:03:c5:83:27:94:27:10:6c:f7:ea:b1:73: 08:d9:c3:6c:39:e4:34:55:88:1c:a3:96:72:f5:4c:90:18:a0: 0e:51:5f:ed:dc:39:f3:6d:55:a8:54:7f:05:13:41:5f:bc:21: b7:a6:84:15:f0:d3:6b:06:46:f9:6d:c0:fc:83:e5:51:d2:6c: 61:80:5b:37:d6:dc:19:af:b6:38:d3:b1:79:de:2a:60:51:3b: d2:3d:43:d1:6e:60:93:a1:c8:f2:4b:57:a1:39:97:f3:82:a6: eb:70:6b:f5:46:72:6c:ee:aa:f2:40:8e:b9:eb:5b:4f:e5:cd: 28:58:0c:5e -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt6x9bZBuAvF9ctMDDTVjB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjYyY2ZkMjZlY2NmMjg5NzU3Mzk5Y2M5OWMxN2QxY2I0MzU3NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WsAvqgUzPwKmq1MjNsHCseWAd1o SGu7ccR6b9yer6h95ndpFwb+kRXIxi4D6A5rToNL9nsMNXBXk1fc44UMcHm+T+Tb FQBNRdfaOzHY87dvUIYsjvdcWnx/csqvPuJO/S0PM9gODVk2hY+Pb/ad0eUwKwiW BA+9cQAaEbfRNZzZnWJuLsrNbDOYJw2G1TFo7tdnC7w8fBson+gd1NorRJSJHCHO 1u3iowKvgAoByWyA5SZAVAWuFY1hgtmEjEZe6Q+x0xnv+6wYUMQ/zYA+raJiqo4d EoX3q4EBEVeMGy7a7EZn91NxB4ZfB7+NMidF4CUqIK9DIgugFYF/GyiD/wIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFBZiz9JuzPKJdXOZzJnBfRy0NXU1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzViOTg3 OC0yMDgwLTQzNTQtOTU5Mi1iNzIzMTk0MWZjM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNWI5ODc4 LTIwODAtNDM1NC05NTkyLWI3MjMxOTQxZmMzYS8xL0ZtTFAwbTdNOG9sMWM1bk1t Y0Y5SExRMWRUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQCLZTYAwQDsoRAAwQAwYofMBYEAgACMBADBwAg AQf4AFYDBQAqAyOAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCgswIDAwiiAgMD PiowDQYJKoZIhvcNAQELBQADggEBAFsIDG5HO+upVR1GZQXqjunClPyAS1DBa9Ax aCQ4PKHFzmBXFeIC+GV2apchunJ0/Mgc8GHExnakQ91Gjg/UmTaA6Qpev63BPFOy 0QkSVTfcykWD+bR5L9ofzfdjvqLfOlFuKQVyQLaU/TritKd8JpeNvq1PeiYSAS+J 4w3EjimQjQDVVgPFgyeUJxBs9+qxcwjZw2w55DRViByjlnL1TJAYoA5RX+3cOfNt VahUfwUTQV+8IbemhBXw02sGRvltwPyD5VHSbGGAWzfW3BmvtjjTsXneKmBRO9I9 Q9FuYJOhyPJLV6E5l/OCputwa/VGcmzuqvJAjrnrW0/lzShYDF4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:09 2026 by rpki-client