This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer File: FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer (raw, json) Hash identifier: W+VmpB6tF2MfdKoovhiEKCdlFXRXOs8D7wQ6LvdSFjs= Subject key identifier: 17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDF6834BAECDA7BCCBA130AD36C745AF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 07:15:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.229.32.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:68:34:ba:ec:da:7b:cc:ba:13:0a:d3:6c:74:5a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 07:15:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17096a033650c8830fd56b3fe5ffd49a174d322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:9d:b1:23:6a:0b:9a:d9:1f:ca:ce:82:05: 00:64:2c:9e:ab:6d:ce:12:8e:eb:db:29:d4:34:78: bf:88:1a:74:ee:f5:14:77:e8:59:87:08:e2:20:33: 37:d8:c2:b3:e7:88:03:40:f6:5d:67:5a:f0:d8:8b: 6e:ed:c9:2e:8d:d2:66:27:52:14:02:2e:06:12:18: 22:0d:9d:1d:d6:28:dc:9e:13:dd:0d:5d:45:a2:55: f4:e4:92:b5:69:34:7e:7f:4c:72:59:f0:cb:42:98: b0:07:23:0f:91:f2:c9:81:14:00:bf:e5:b4:2f:ab: d9:26:c4:5e:be:1c:a1:f5:f6:c6:c8:31:99:2c:40: 14:9f:7a:b4:78:90:e5:ed:0d:2b:9e:d9:1c:1f:75: 10:69:93:91:bc:dc:29:e5:74:e8:cc:85:36:92:f6: 12:6e:00:d7:e8:75:fb:4f:38:35:89:41:67:39:4f: 42:85:0f:3f:e1:32:ef:62:a7:16:c3:c3:78:e8:c3: 46:1a:f7:21:68:5a:af:75:5b:87:7d:b8:b2:16:1c: 59:cb:b3:f2:ea:70:a8:94:1f:ca:e6:79:33:b1:cd: 15:db:7b:34:85:80:e8:fd:df:dd:b6:71:8f:7f:58: 45:2e:94:09:8b:a0:b0:42:1d:78:47:a0:c4:93:04: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.32.0/23 Signature Algorithm: sha256WithRSAEncryption 56:bd:65:68:ac:a1:c1:93:fc:3a:d7:e0:24:f5:32:32:b2:c3: 2a:88:e3:d9:97:0c:d8:1f:c1:64:fc:e9:4f:a6:6c:33:8b:84: 29:99:67:a0:29:f8:63:5a:1f:5f:71:ea:35:e8:10:9c:d5:4d: 61:79:06:9c:e9:df:3b:5b:81:75:cc:15:4d:0c:7e:3f:3d:2a: d9:8e:a5:8b:2c:ad:02:98:d9:e3:55:3c:37:0e:20:fa:e8:c8: 10:38:42:b3:e4:ea:fd:d7:83:6c:88:d9:1e:ae:d8:ac:1a:f8: 36:df:ba:9b:15:c0:9b:e9:25:d7:0d:4a:c1:f3:f5:94:f2:19: b4:30:65:9e:4f:c5:9c:1b:aa:53:21:cb:43:b6:00:7a:cf:59: da:4c:d7:94:1e:a4:11:1a:0b:09:06:bf:bb:36:1e:2e:4f:eb: f2:a6:20:76:41:16:65:47:7b:9a:9b:cd:e3:38:de:37:0a:e8: 81:a8:df:26:4f:70:5b:23:d0:22:90:05:73:9f:9e:4b:95:e4: a0:a6:6d:e2:78:9a:9d:24:e6:d3:c7:f3:43:47:80:4b:83:3a: e9:cc:bf:bb:5f:21:0e:74:03:11:96:64:12:eb:b8:f1:77:a7: 38:5c:9f:8c:8a:14:c5:29:9c:cd:3c:18:28:1d:2c:58:c3:8d: e9:4c:48:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZvfaDS67Np7zLoTCtNsdFrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMDcxNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA5NmEwMzM2NTBjODgzMGZkNTZiM2ZlNWZmZDQ5YTE3NGQzMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunKdsSNqC5rZH8rOggUAZCyeq23O Eo7r2ynUNHi/iBp07vUUd+hZhwjiIDM32MKz54gDQPZdZ1rw2Itu7ckujdJmJ1IU Ai4GEhgiDZ0d1ijcnhPdDV1FolX05JK1aTR+f0xyWfDLQpiwByMPkfLJgRQAv+W0 L6vZJsRevhyh9fbGyDGZLEAUn3q0eJDl7Q0rntkcH3UQaZORvNwp5XTozIU2kvYS bgDX6HX7Tzg1iUFnOU9ChQ8/4TLvYqcWw8N46MNGGvchaFqvdVuHfbiyFhxZy7Py 6nColB/K5nkzsc0V23s0hYDo/d/dtnGPf1hFLpQJi6CwQh14R6DEkwQ5ZQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBcJagM2UMiDD9VrP+X/1JoXTTIuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2UzODhk ZC1jNzRkLTQyZjAtODNmYi0yZTg0ZjFkZmRjNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZTM4OGRk LWM3NGQtNDJmMC04M2ZiLTJlODRmMWRmZGM2Mi8xL0Z3bHFBelpReUlNUDFXc181 Zl9VbWhkTk1pNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+UgMA0GCSqGSIb3DQEBCwUAA4IBAQBWvWVo rKHBk/w61+Ak9TIyssMqiOPZlwzYH8Fk/OlPpmwzi4QpmWegKfhjWh9fceo16BCc 1U1heQac6d87W4F1zBVNDH4/PSrZjqWLLK0CmNnjVTw3DiD66MgQOEKz5Or914Ns iNkertisGvg237qbFcCb6SXXDUrB8/WU8hm0MGWeT8WcG6pTIctDtgB6z1naTNeU HqQRGgsJBr+7Nh4uT+vypiB2QRZlR3uam83jON43CuiBqN8mT3BbI9AikAVzn55L leSgpm3ieJqdJObTx/NDR4BLgzrpzL+7XyEOdAMRlmQS67jxd6c4XJ+MihTFKZzN PBgoHSxYw43pTEis -----END CERTIFICATE-----Generated at Sun Jan 25 13:30:03 2026 by rpki-client