This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer File: Fni0n5riXx4SdTSxkVBErH0NnnM.cer (raw, json) Hash identifier: Sl6OKvPYovC/Jltub3IuFhFLMFjRYTvbB6f/3WjlgcM= Subject key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E37A45EDAD69848456F101A93E34 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.78.52.0/22 IP: 185.226.80.0/22 IP: 193.37.52.0/22 IP: 193.38.240.0/22 IP: 194.26.176.0/22 IP: 194.55.80.0/22 IP: 194.93.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e3:7a:45:ed:ad:69:84:84:56:f1:01:a9:3e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:ba:d4:36:f8:c5:70:5d:71:93:b8:9a:2b: 78:60:0f:c8:ff:67:29:59:15:5d:9a:d0:91:fc:b8: 73:12:86:83:f6:90:e1:4b:c5:ef:64:35:65:a2:0c: 43:46:0b:81:87:da:2e:48:5c:df:7b:ed:01:83:18: ec:fc:c0:d5:8b:96:92:dd:2e:d3:60:02:2a:11:a4: 0e:ef:9a:b4:64:5a:14:28:59:bb:34:46:60:0b:39: a1:0d:67:1b:dc:d9:4a:ee:67:c7:3b:93:c3:53:7b: 4a:a7:b6:d6:2f:4d:4b:61:b9:f4:d6:a7:61:9e:f5: 68:b9:88:74:34:ed:c5:c1:89:e9:3c:3b:47:d4:2f: 9a:53:ed:49:08:85:67:6b:07:56:22:01:10:6d:f8: a8:79:03:73:84:7f:08:17:42:ca:12:56:db:80:d0: 50:d0:9d:0e:05:1f:c2:60:8c:92:ab:92:78:33:15: 2d:99:ef:b3:c6:b3:55:a1:fc:89:0a:2c:70:21:02: 3d:31:49:8d:be:cf:cc:91:4c:5c:01:c5:68:34:9d: ad:ba:76:76:5c:1d:9c:af:bb:63:4b:0a:62:57:66: 2c:e3:6f:d6:b5:86:4e:3b:f0:42:83:bc:fd:76:1b: 54:a5:f4:d9:99:0a:40:82:31:91:c9:00:63:dd:e8: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.52.0/22 185.226.80.0/22 193.37.52.0/22 193.38.240.0/22 194.26.176.0/22 194.55.80.0/22 194.93.36.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:e1:f4:1e:95:98:2b:57:16:ff:4e:0e:9d:aa:35:6a:14:92: 9f:4d:95:f5:46:48:c8:4a:57:bd:29:ca:07:9c:d9:5a:d9:9a: 6c:a8:24:f4:29:d6:02:ac:60:3d:8f:54:49:8d:ca:1a:4d:8f: c7:8c:df:5e:24:6c:55:d1:fa:35:74:8e:c1:e4:4b:a2:fa:87: 00:65:30:20:a0:30:fb:73:61:13:54:c7:ae:12:91:83:63:a3: 2d:4a:85:64:ae:20:e4:85:8e:a7:78:9b:0e:0c:b2:37:0e:ae: a9:9f:55:1f:8e:bf:fb:29:e1:99:d6:04:e6:01:f8:31:34:59: c4:b5:2f:f4:6f:14:b6:3d:3f:49:4c:99:29:78:e9:49:ed:37: f8:25:2a:67:d3:c6:9a:26:63:65:b9:ae:f8:c4:d3:d8:aa:91: 8b:e3:a7:ed:f4:aa:d1:c5:7a:82:5d:66:e3:f7:93:01:be:50: 95:66:07:2d:4f:39:25:60:ed:95:3e:b9:d1:45:87:25:a7:12: 20:d4:1e:5e:3a:5a:85:ab:64:c4:40:2c:01:63:f2:2b:83:cc: 49:46:56:59:7d:b0:81:b2:25:e2:85:18:32:a1:10:8a:d3:0e: cd:c7:ec:5f:5c:92:22:e5:e4:b1:a8:4c:bd:f1:21:a0:11:99: 5b:c7:b8:c4 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt7pON6Re2taYSEVvEBqT40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjc4YjQ5ZjlhZTI1ZjFlMTI3NTM0YjE5MTUwNDRhYzdkMGQ5ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+K61Db4xXBdcZO4mit4YA/I/2cp WRVdmtCR/LhzEoaD9pDhS8XvZDVlogxDRguBh9ouSFzfe+0Bgxjs/MDVi5aS3S7T YAIqEaQO75q0ZFoUKFm7NEZgCzmhDWcb3NlK7mfHO5PDU3tKp7bWL01LYbn01qdh nvVouYh0NO3FwYnpPDtH1C+aU+1JCIVnawdWIgEQbfioeQNzhH8IF0LKElbbgNBQ 0J0OBR/CYIySq5J4MxUtme+zxrNVofyJCixwIQI9MUmNvs/MkUxcAcVoNJ2tunZ2 XB2cr7tjSwpiV2Ys42/WtYZOO/BCg7z9dhtUpfTZmQpAgjGRyQBj3ejG2wIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzBmNzFm My03ZTEzLTQ3MTMtYjIzMi03NDU0YTE5ZDMyZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMGY3MWYz LTdlMTMtNDcxMy1iMjMyLTc0NTRhMTlkMzJkMS8xL0ZuaTBuNXJpWHg0U2RUU3hr VkJFckgwTm5uTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAwBAIAATAqAwQCk040AwQCueJQAwQCwSU0AwQCwSbwAwQCwhqw AwQCwjdQAwQCwl0kMA0GCSqGSIb3DQEBCwUAA4IBAQB94fQelZgrVxb/Tg6dqjVq FJKfTZX1RkjISle9KcoHnNla2ZpsqCT0KdYCrGA9j1RJjcoaTY/HjN9eJGxV0fo1 dI7B5Eui+ocAZTAgoDD7c2ETVMeuEpGDY6MtSoVkriDkhY6neJsODLI3Dq6pn1Uf jr/7KeGZ1gTmAfgxNFnEtS/0bxS2PT9JTJkpeOlJ7Tf4JSpn08aaJmNlua74xNPY qpGL46ft9KrRxXqCXWbj95MBvlCVZgctTzklYO2VPrnRRYclpxIg1B5eOlqFq2TE QCwBY/Irg8xJRlZZfbCBsiXihRgyoRCK0w7Nx+xfXJIi5eSxqEy98SGgEZlbx7jE -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:39 2026 by rpki-client