This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer (raw, json) Hash identifier: gi9IlEb6TcvxILGxt+Spt3VS6kgKw2mWG2C8bIM1jNw= Subject key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED26FDDF57F7B53EA158A16BAD40FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.203.152.0/22 IP: 176.123.128.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:26:fd:df:57:f7:b5:3e:a1:58:a1:6b:ad:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16914c51d031411c1340171593603163c3d4a08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:aa:96:b5:38:43:2c:f8:8c:af:35:50:b0: 52:f3:85:57:00:4b:5f:a7:d3:67:1d:e7:13:7b:80: c9:1f:d1:3d:ff:fd:86:bd:7b:b3:83:1e:0a:a5:0b: 2c:21:ee:ed:c5:c9:a6:50:49:f2:ac:59:06:98:6b: 91:5b:f6:af:76:07:3b:26:86:c4:d0:23:9e:59:45: 1e:f7:36:c9:76:0a:39:0b:b7:2d:70:48:e0:bb:9d: 15:c9:0e:9f:99:d6:a0:72:b3:75:b1:5d:ad:81:56: 17:0b:fa:20:50:65:64:77:5f:f5:df:f0:d9:0e:4c: 89:4f:20:2a:65:30:0b:9b:05:b6:cd:6f:2f:a6:41: 26:88:3d:28:76:cc:cc:ac:11:23:4c:52:3e:6b:77: 8f:e4:7b:91:4b:96:38:88:6e:1d:77:1a:d2:55:23: 1e:26:44:f6:15:8d:9f:2e:82:44:90:8e:a4:17:3e: 86:a4:91:d9:c5:7f:08:77:3e:9d:ad:94:90:eb:f5: 01:74:81:83:b6:aa:2d:3d:60:a7:af:0a:c4:ca:d7: 61:34:fa:4d:cd:d3:07:0b:62:2e:c3:a9:1a:3a:c0: 92:39:cb:cd:70:37:a3:16:b3:56:8e:ab:bd:a8:cd: 2d:5d:bc:a4:6e:26:b9:07:9a:fd:df:e6:3c:92:af: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.152.0/22 176.123.128.0/19 Signature Algorithm: sha256WithRSAEncryption 89:12:72:7a:70:4a:a7:b3:40:bc:78:f3:2c:a1:fa:b8:fb:c4: e8:70:81:fe:72:48:cf:f1:f2:7e:88:2c:5e:21:65:9a:93:a2: 09:23:d8:c5:84:db:3c:16:be:52:43:e2:22:69:87:7b:46:ab: 23:b5:b6:d2:c5:ca:9d:c7:b9:b8:37:31:9b:71:c5:b9:61:00: 0e:4b:dd:86:43:e1:3a:3c:b4:07:a6:2a:67:30:63:a2:95:24: b5:84:c4:ac:5a:3b:2d:b2:e6:75:d7:36:5c:8f:79:d0:35:4d: d0:35:fb:0f:aa:84:52:58:75:b6:6f:9c:6a:60:88:46:f9:2f: 67:88:fe:b0:e6:d5:a6:22:66:23:06:e2:73:c1:ff:64:7c:83: 43:79:1e:4f:aa:94:f1:6e:be:33:60:ea:4a:cc:d5:49:c9:a4: 5d:2f:45:e9:e1:f7:ec:ca:c0:80:28:18:54:df:df:43:b7:97: 89:ea:d3:3e:bf:de:39:cc:6c:ab:23:3b:0c:08:aa:22:c8:ac: 99:9a:19:9d:8f:94:f2:6b:a7:33:dd:49:af:ee:ac:eb:c2:da: d8:c7:c6:fd:91:db:f9:2d:4f:f5:ad:8c:6f:43:9f:4f:3b:a2: 22:a1:c1:8e:2c:a5:12:12:3f:a4:29:95:95:64:4a:7a:2e:ec: 65:bd:29:c0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt87Sb931f3tT6hWKFrrUD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjkxNGM1MWQwMzE0MTFjMTM0MDE3MTU5MzYwMzE2M2MzZDRhMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmSqlrU4Qyz4jK81ULBS84VXAEtf p9NnHecTe4DJH9E9//2GvXuzgx4KpQssIe7txcmmUEnyrFkGmGuRW/avdgc7JobE 0COeWUUe9zbJdgo5C7ctcEjgu50VyQ6fmdagcrN1sV2tgVYXC/ogUGVkd1/13/DZ DkyJTyAqZTALmwW2zW8vpkEmiD0odszMrBEjTFI+a3eP5HuRS5Y4iG4ddxrSVSMe JkT2FY2fLoJEkI6kFz6GpJHZxX8Idz6drZSQ6/UBdIGDtqotPWCnrwrEytdhNPpN zdMHC2Iuw6kaOsCSOcvNcDejFrNWjqu9qM0tXbykbia5B5r93+Y8kq8KpQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBaRTFHQMUEcE0AXFZNgMWPD1KCOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2Y5MGE3 ZC04YTA1LTQ3NTUtYjY2Yi0wOWYxOWM2ZTUxYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZjkwYTdk LThhMDUtNDc1NS1iNjZiLTA5ZjE5YzZlNTFiMi8xL0ZwRk1VZEF4UVJ3VFFCY1Zr MkF4WThQVW9JNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8uYAwQFsHuAMA0GCSqGSIb3DQEBCwUAA4IB AQCJEnJ6cEqns0C8ePMsofq4+8TocIH+ckjP8fJ+iCxeIWWak6IJI9jFhNs8Fr5S Q+IiaYd7RqsjtbbSxcqdx7m4NzGbccW5YQAOS92GQ+E6PLQHpipnMGOilSS1hMSs WjstsuZ11zZcj3nQNU3QNfsPqoRSWHW2b5xqYIhG+S9niP6w5tWmImYjBuJzwf9k fINDeR5PqpTxbr4zYOpKzNVJyaRdL0Xp4ffsysCAKBhU399Dt5eJ6tM+v945zGyr IzsMCKoiyKyZmhmdj5Tya6cz3Umv7qzrwtrYx8b9kdv5LU/1rYxvQ59PO6IiocGO LKUSEj+kKZWVZEp6LuxlvSnA -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:14 2026 by rpki-client