This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer (raw, json) Hash identifier: eDg+01yvrKZrhkTrFE+H9V4C7PvigJNU6kuqKpov3tI= Subject key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F3E093BA23687AC01054AD52D72C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44309 IP: 91.201.172.0/22 IP: 91.237.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f3:e0:93:ba:23:68:7a:c0:10:54:ad:52:d7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:85:b1:9e:da:84:44:60:0c:3b:08:64:01: 53:71:dd:5c:eb:48:26:99:e7:e7:da:36:c8:f2:77: a6:fc:5a:07:e2:7a:e5:0c:06:d8:b2:5f:d7:8e:d6: d1:98:c4:09:7d:16:56:d3:b0:bc:01:03:34:a2:e1: 9b:0c:a4:59:17:6d:3e:fb:e4:61:d2:04:64:cf:fb: bf:87:12:ba:0a:ff:6c:28:81:28:75:10:b1:38:c4: 76:38:60:52:26:fb:e1:15:80:ae:3a:3a:1b:4f:6f: ad:fc:f2:27:e4:fa:78:cb:7b:0e:5c:ee:35:f8:22: 71:fb:cc:05:d2:d8:0e:0a:4a:8d:8b:27:cb:d7:8a: 1b:c2:d6:14:6f:b4:c2:13:74:7b:0e:67:bd:6e:4e: 9e:a9:af:cf:03:c4:ee:47:11:03:41:c0:8d:ec:2d: 32:1d:f1:32:5f:04:46:65:32:f4:29:bf:8f:45:ca: 95:04:db:67:35:76:66:04:b1:fa:da:98:0a:a5:5b: 91:07:b2:83:80:9e:18:93:7a:4a:21:06:c6:16:3e: ad:71:3a:78:4b:07:20:59:d0:17:3a:98:ca:7a:9d: 7b:0e:7f:ec:e8:7e:f1:3c:ae:5b:29:84:44:1f:ed: ce:2c:65:e0:e6:17:a5:82:56:ba:20:68:a3:90:c1: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.172.0/22 91.237.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44309 Signature Algorithm: sha256WithRSAEncryption 3d:f5:49:f8:53:27:ba:3d:2f:e2:1d:91:69:22:12:f2:20:50: 66:7c:ff:56:fe:16:d1:c0:42:7e:7a:c8:3c:7c:fa:bf:88:9d: ba:07:8c:0d:48:63:de:c0:5f:73:17:13:d0:b4:18:ad:5a:dc: dc:73:29:79:c9:c4:ec:72:f7:52:16:e5:60:66:56:8c:0d:91: 2b:db:63:d4:fd:cc:41:cc:b0:fa:a9:f7:a5:94:35:65:64:c7: b5:23:d1:9a:17:06:91:fe:d8:17:ba:7c:a3:f1:3f:9f:b7:a5: 12:fb:0f:2f:e9:67:93:af:e9:90:a2:1a:b0:47:5f:80:66:6d: 7e:d3:9b:84:4e:46:92:6c:dc:ba:fb:8e:4d:9b:91:6c:81:9b: 11:b9:ab:7c:fb:af:00:78:ec:0e:97:c4:d7:65:2f:af:dd:57: f7:33:ab:64:6a:30:76:ec:94:d5:f8:72:c9:30:7e:a4:d2:3e: 7a:1b:ab:00:3c:e3:ae:9c:16:fd:7c:5c:4a:9b:1d:de:ca:49: 29:9c:86:fe:16:3f:7f:dc:33:5d:0e:93:7e:a6:2d:b4:70:c7: 95:b3:ca:a6:af:da:ff:69:2b:e0:20:5a:73:d4:a2:ba:eb:fb: 82:ed:81:11:1f:28:1f:ed:c1:3c:68:a6:4d:2c:17:1c:1e:ff: da:9f:6f:95 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/FfPgk7ojaHrAEFStUtcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjllYTAyNzVjNzY1ZTE3NjAzZWI1OWVlZjM5ZTJmYWI1MzgwZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5qFsZ7ahERgDDsIZAFTcd1c60gm mefn2jbI8nem/FoH4nrlDAbYsl/XjtbRmMQJfRZW07C8AQM0ouGbDKRZF20+++Rh 0gRkz/u/hxK6Cv9sKIEodRCxOMR2OGBSJvvhFYCuOjobT2+t/PIn5Pp4y3sOXO41 +CJx+8wF0tgOCkqNiyfL14obwtYUb7TCE3R7Dme9bk6eqa/PA8TuRxEDQcCN7C0y HfEyXwRGZTL0Kb+PRcqVBNtnNXZmBLH62pgKpVuRB7KDgJ4Yk3pKIQbGFj6tcTp4 SwcgWdAXOpjKep17Dn/s6H7xPK5bKYREH+3OLGXg5helgla6IGijkMHGTQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFBaeoCdcdl4XYD61nu854vq1OA7wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzRhNTRm ZC1iYmVhLTQxNWEtYjk2OS1kNjllZjQyMmMxNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvNGE1NGZk LWJiZWEtNDE1YS1iOTY5LWQ2OWVmNDIyYzE2Ny8xL0ZwNmdKMXgyWGhkZ1ByV2U3 em5pLXJVNER2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8msAwQCW+04MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCtFTANBgkqhkiG9w0BAQsFAAOCAQEAPfVJ+FMnuj0v4h2RaSIS8iBQ Znz/Vv4W0cBCfnrIPHz6v4idugeMDUhj3sBfcxcT0LQYrVrc3HMpecnE7HL3Uhbl YGZWjA2RK9tj1P3MQcyw+qn3pZQ1ZWTHtSPRmhcGkf7YF7p8o/E/n7elEvsPL+ln k6/pkKIasEdfgGZtftObhE5GkmzcuvuOTZuRbIGbEbmrfPuvAHjsDpfE12Uvr91X 9zOrZGowduyU1fhyyTB+pNI+ehurADzjrpwW/XxcSpsd3spJKZyG/hY/f9wzXQ6T fqYttHDHlbPKpq/a/2kr4CBac9Siuuv7gu2BER8oH+3BPGimTSwXHB7/2p9vlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:41 2026 by rpki-client