This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer (raw, json) Hash identifier: BOFVxCHUepzqmli6vKDIWQsjIugGTyI4u62jboJ7OSc= Subject key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED04E79B624953B4B7B1058437E065 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202635 IP: 86.110.32.0/19 IP: 185.158.176.0/22 IP: 185.193.60.0/22 IP: 185.244.100.0/22 IP: 2a13:ca40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:e7:9b:62:49:53:b4:b7:b1:05:84:37:e0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:10:46:0f:59:42:63:2f:28:01:91:b2:80: 35:ea:9f:16:29:cf:8e:9b:4a:3f:bb:dd:26:dc:a4: 76:5c:77:7b:4a:20:df:08:b1:2d:81:20:b0:d2:9f: 86:1e:10:94:be:16:27:58:c4:b4:76:75:53:c4:d1: ff:57:02:48:91:df:01:3a:64:6f:30:ce:17:e8:34: b0:33:a0:5b:b1:db:c2:3c:94:6c:b9:16:87:92:cf: 0d:df:8c:44:e7:dc:ef:ae:cc:86:71:b3:94:88:41: d9:3a:6b:4b:1a:51:86:8f:94:00:df:1d:74:b8:bb: 53:0e:b1:39:9e:c4:45:07:49:79:26:23:10:cf:a0: 70:8c:1f:5f:8a:a8:f5:a2:38:e3:0e:7d:49:57:6e: ad:e4:bd:52:0d:bc:ce:a8:f7:c7:dc:f0:39:11:0c: 24:29:90:a9:e2:be:c8:ca:58:70:80:a9:9c:23:f2: 67:b5:b1:3a:40:e9:98:e1:47:8a:cc:43:f9:b3:10: e2:5d:7f:9c:cb:65:bd:f6:6a:33:85:7d:21:8f:27: 57:aa:30:12:a0:6e:96:8f:70:6c:3a:30:74:f8:e1: 92:44:db:25:b9:8e:c2:bd:c0:86:63:fa:14:b9:f7: a9:6e:81:0d:c9:8a:4e:45:84:2f:cb:6a:06:bd:23: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.32.0/19 185.158.176.0/22 185.193.60.0/22 185.244.100.0/22 IPv6: 2a13:ca40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202635 Signature Algorithm: sha256WithRSAEncryption 40:60:ec:7f:9b:e7:30:83:3e:8b:e1:84:9e:4a:35:ea:67:f9: b7:b6:3c:7e:7e:7f:ca:1d:01:e4:0a:f6:59:85:bb:18:ab:99: bf:2e:29:ea:c7:f0:61:a9:0f:88:45:8d:a4:34:a9:b6:92:a0: 4b:84:7a:3d:12:b3:23:95:b1:38:f2:e1:61:72:4c:af:8a:c7: 46:f2:03:a5:51:c5:67:39:ca:96:70:8e:c9:ed:46:a0:ec:92: 5c:dd:6b:6a:88:98:83:1e:00:6b:1c:a3:d9:96:60:45:cc:00: e8:4a:27:41:53:7c:3f:d6:4f:97:e4:fd:1b:6a:ff:e2:3d:13: fd:51:11:75:c3:39:d0:61:55:de:3e:f4:9d:39:95:de:d5:28: 90:3f:26:20:55:1a:0e:60:21:27:cf:fa:d6:27:9b:c0:e8:a9: b8:21:00:f7:e0:e4:4c:55:04:54:45:5e:dd:7e:dd:ba:aa:9a: cb:4f:0c:20:bd:5a:de:57:bc:0d:00:aa:68:80:23:01:62:f7: 88:c7:4c:75:98:be:43:5d:2f:a9:6e:60:28:ab:14:05:5c:31: 3b:12:87:93:24:f5:76:b8:41:d9:94:a0:47:c7:42:2b:88:fe: 25:79:e6:5e:db:1f:9b:59:8d:a8:e4:bf:b1:5c:c0:84:8c:13: f2:63:c7:8b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt57QTnm2JJU7S3sQWEN+BlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA2Nzk3N2VmZDE0YmM4OWZiMGRhYmEwM2JiMGY2MDBmYmIwMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJkQRg9ZQmMvKAGRsoA16p8WKc+O m0o/u90m3KR2XHd7SiDfCLEtgSCw0p+GHhCUvhYnWMS0dnVTxNH/VwJIkd8BOmRv MM4X6DSwM6BbsdvCPJRsuRaHks8N34xE59zvrsyGcbOUiEHZOmtLGlGGj5QA3x10 uLtTDrE5nsRFB0l5JiMQz6BwjB9fiqj1ojjjDn1JV26t5L1SDbzOqPfH3PA5EQwk KZCp4r7IylhwgKmcI/JntbE6QOmY4UeKzEP5sxDiXX+cy2W99mozhX0hjydXqjAS oG6Wj3BsOjB0+OGSRNsluY7CvcCGY/oUufepboENyYpORYQvy2oGvSNXoQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFBcGeXfv0UvIn7DaugO7D2APuwGEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2UxYWQ3 YS0xMmU3LTRmZDAtYjYxZS1kMWE3NzcyZGIwNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZTFhZDdh LTEyZTctNGZkMC1iNjFlLWQxYTc3NzJkYjA3Ni8xL0Z3WjVkLV9SUzhpZnNOcTZB N3NQWUEtN0FZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFVm4gAwQCuZ6wAwQCucE8AwQCufRkMA0EAgAC MAcDBQMqE8pAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXizANBgkqhkiG9w0B AQsFAAOCAQEAQGDsf5vnMIM+i+GEnko16mf5t7Y8fn5/yh0B5Ar2WYW7GKuZvy4p 6sfwYakPiEWNpDSptpKgS4R6PRKzI5WxOPLhYXJMr4rHRvIDpVHFZznKlnCOye1G oOySXN1raoiYgx4Aaxyj2ZZgRcwA6EonQVN8P9ZPl+T9G2r/4j0T/VERdcM50GFV 3j70nTmV3tUokD8mIFUaDmAhJ8/61iebwOipuCEA9+DkTFUEVEVe3X7duqqay08M IL1a3le8DQCqaIAjAWL3iMdMdZi+Q10vqW5gKKsUBVwxOxKHkyT1drhB2ZSgR8dC K4j+JXnmXtsfm1mNqOS/sVzAhIwT8mPHiw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:12 2026 by rpki-client