This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer File: FoYA36ydPRp15mMNaXEC8vITLEg.cer (raw, json) Hash identifier: kkNsVcGKwaEkFPn3Qg7/FPBOB9rmt4UxzqOrRRQdb4c= Subject key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A8CDAD11A4550A53FA6DA15B2184 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203576 IP: 5.180.184.0/22 IP: 83.150.212.0/22 IP: 89.252.188.0/22 IP: 185.126.216.0/22 IP: 2a06:c400::/29 IP: 2a09:1900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a8:cd:ad:11:a4:55:0a:53:fa:6d:a1:5b:21:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=168600dfac9d3d1a75e6630d697102f2f2132c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:86:26:0a:69:2d:26:64:a8:cd:82:64:46: f1:db:cd:b7:eb:94:ca:fd:39:f5:6e:5e:28:96:31: 84:39:39:b8:4b:6e:f7:7c:8d:7a:4b:30:aa:ae:97: 18:dc:6e:11:06:0d:93:8f:18:7e:44:96:e3:32:1a: 3a:c6:58:a8:78:7c:05:d4:f6:dd:85:ad:f3:ef:98: 28:f0:6b:76:54:d5:ac:aa:7f:d6:37:ea:87:81:fc: 6d:38:16:6b:a3:48:c4:2b:9f:f4:47:26:19:97:8c: 63:72:9d:bf:6f:69:59:a6:b2:58:24:a7:29:ed:20: b4:89:24:b2:d5:14:44:63:ed:0b:af:92:42:08:d5: fd:6e:96:fa:d8:37:a1:a1:de:d1:4d:a5:a5:17:a9: 1b:38:88:19:89:9a:10:af:d5:e9:f5:07:2c:3b:fe: fb:f5:9a:34:97:56:b9:3e:03:6d:42:d1:7f:c2:47: 57:8d:75:9a:a3:9f:d0:68:dc:e4:1e:2b:1e:eb:72: 76:74:10:8e:8a:c7:ee:cc:48:d2:db:bf:28:4e:7f: 1a:f1:6b:3e:7a:83:b9:82:f7:f6:ee:66:91:8e:1d: 8c:17:28:be:5d:b8:cd:98:9c:42:bc:fb:c3:6c:90: a8:9a:65:d3:89:e7:d5:bd:ba:15:df:bd:ed:c4:e3: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.184.0/22 83.150.212.0/22 89.252.188.0/22 185.126.216.0/22 IPv6: 2a06:c400::/29 2a09:1900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203576 Signature Algorithm: sha256WithRSAEncryption b1:62:58:df:cd:58:24:4c:64:0e:71:eb:37:d0:db:22:b5:49: 33:64:e0:61:69:be:71:b7:3a:f6:e2:dd:df:11:ee:97:73:2b: 1c:a2:25:51:c3:5f:89:0e:91:c9:93:62:2a:68:7d:73:3b:f3: 07:5f:ef:09:f6:42:b0:3c:fb:6a:b9:15:d7:88:fb:18:aa:74: 43:1a:a0:65:df:6a:4f:1b:1c:98:a8:d8:56:2c:d6:a4:dc:bc: 9f:95:b9:e5:cc:25:1a:8e:67:88:61:63:ec:4a:33:81:8f:f0: d6:02:e2:ac:5d:0b:35:61:7e:7c:38:05:15:d9:e6:bf:13:be: 89:d8:3d:19:ff:06:10:76:2e:93:a2:d5:a5:f2:5b:2f:7b:e6: 2f:27:d2:00:ee:53:ec:ed:82:32:99:a5:5f:74:4e:9d:2b:d1: a6:ad:e2:14:6b:f2:6b:c8:42:fa:47:13:80:d5:47:69:d3:0c: 04:d6:ee:4e:3f:82:fb:8e:9e:b6:dd:da:6c:1d:a6:8e:95:c8: 8e:d8:dd:79:65:8c:73:a7:07:3e:4e:b7:b3:3b:f4:c6:2c:b8: 11:fa:f2:6a:02:79:e6:7a:f0:52:0f:85:41:3a:72:c1:c8:e7: 56:43:8e:f9:ed:bb:2e:61:91:a8:6e:6d:68:ae:4d:37:0f:1d: 5d:2e:7c:5b -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt7NajNrRGkVQpT+m2hWyGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjg2MDBkZmFjOWQzZDFhNzVlNjYzMGQ2OTcxMDJmMmYyMTMyYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGWGJgppLSZkqM2CZEbx282365TK /Tn1bl4oljGEOTm4S273fI16SzCqrpcY3G4RBg2Tjxh+RJbjMho6xlioeHwF1Pbd ha3z75go8Gt2VNWsqn/WN+qHgfxtOBZro0jEK5/0RyYZl4xjcp2/b2lZprJYJKcp 7SC0iSSy1RREY+0Lr5JCCNX9bpb62Dehod7RTaWlF6kbOIgZiZoQr9Xp9QcsO/77 9Zo0l1a5PgNtQtF/wkdXjXWao5/QaNzkHise63J2dBCOisfuzEjS278oTn8a8Ws+ eoO5gvf27maRjh2MFyi+XbjNmJxCvPvDbJCommXTiefVvboV373txOMGkQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFBaGAN+snT0adeZjDWlxAvLyEyxIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2FmMzVj My03ZjgxLTQ4MjktOGRiYS0xOGRiZTY1MDRiYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYWYzNWMz LTdmODEtNDgyOS04ZGJhLTE4ZGJlNjUwNGJiNC8xL0ZvWUEzNnlkUFJwMTVtTU5h WEVDOHZJVExFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCBbS4AwQCU5bUAwQCWfy8AwQCuX7YMBQEAgAC MA4DBQMqBsQAAwUDKgkZADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGzgwDQYJ KoZIhvcNAQELBQADggEBALFiWN/NWCRMZA5x6zfQ2yK1STNk4GFpvnG3Ovbi3d8R 7pdzKxyiJVHDX4kOkcmTYipofXM78wdf7wn2QrA8+2q5FdeI+xiqdEMaoGXfak8b HJio2FYs1qTcvJ+VueXMJRqOZ4hhY+xKM4GP8NYC4qxdCzVhfnw4BRXZ5r8TvonY PRn/BhB2LpOi1aXyWy975i8n0gDuU+ztgjKZpV90Tp0r0aat4hRr8mvIQvpHE4DV R2nTDATW7k4/gvuOnrbd2mwdpo6VyI7Y3XlljHOnBz5Ot7M79MYsuBH68moCeeZ6 8FIPhUE6csHI51ZDjvntuy5hkahubWiuTTcPHV0ufFs= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:44 2026 by rpki-client