This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer (raw, json) Hash identifier: SMlaQGL3ZRp6uCXYMhU+0OSK23WwCciz6KU6uSgWFs8= Subject key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B14190FC59B2D2AC03C4E7A4BD0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.131.200.0/24 IP: 185.197.211.0/24 IP: 2a0c:1bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b1:41:90:fc:59:b2:d2:ac:03:c4:e7:a4:bd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a5:de:82:99:32:71:ec:5e:52:11:94:09:dd: 63:35:a4:21:6f:ba:84:26:f5:e5:c3:e4:b8:34:4a: 1c:dc:89:af:63:a5:fa:1c:60:46:de:67:30:1d:d1: 51:b6:92:78:61:64:a1:af:4a:3a:05:19:72:13:ee: 85:7b:42:fe:5d:1d:8b:97:1b:12:b4:48:fa:11:35: fa:e8:2f:8d:36:0b:71:3c:c0:2a:8c:6a:e9:82:fd: 77:cc:0d:51:a9:f8:45:c3:fb:c1:6a:83:07:bc:38: 0d:d8:1b:f4:33:ec:d7:a5:de:65:23:c1:22:01:37: 09:e0:9c:6a:df:84:7a:a0:26:89:74:53:b2:c3:01: ed:60:be:4d:c4:1d:e6:e0:ab:24:38:2e:d0:47:03: dd:b1:53:16:68:bd:f6:70:37:c8:bc:12:e0:5b:d9: c2:c8:79:d3:6a:9b:2f:59:77:c0:39:28:99:64:e4: a5:20:ea:46:c7:1c:ff:c9:36:b4:59:9f:32:a4:99: f8:9b:10:1d:be:ca:df:9d:c6:80:5f:7f:c0:8d:ca: fe:52:91:a2:3b:ec:95:6f:95:19:59:ee:0e:21:9d: 25:2a:31:7d:8a:8f:00:37:94:eb:83:bb:03:dd:2b: 9a:ae:2d:74:90:2a:04:8c:84:9e:a6:50:d8:59:f1: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.200.0/24 185.197.211.0/24 IPv6: 2a0c:1bc0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:ae:39:c6:ad:d6:b3:1d:1f:15:7b:f5:53:8c:40:98:ae:e4: f2:b7:c9:79:a6:a7:0e:fb:a2:f3:c9:de:eb:14:e8:1d:4c:5d: 29:49:6c:de:52:83:26:c6:ff:22:54:a0:39:1c:71:a1:4f:af: 3e:e5:c2:58:22:e8:d9:e5:64:d9:d6:69:e3:00:5d:c9:36:09: 38:f7:dc:c1:14:f6:68:f1:ef:02:40:72:52:b3:aa:ea:dc:7f: 68:a3:a2:c5:a6:58:de:ea:2d:3c:c8:e5:1c:a4:0d:b7:02:f2: 4a:6d:1b:ea:08:1e:95:91:2b:da:76:35:50:27:d6:66:31:14: 2f:19:ce:c6:66:d7:0e:ee:5e:af:83:96:12:fd:fe:ca:27:09: 17:92:30:79:4d:e2:32:49:84:a2:1d:8c:7d:52:39:85:f5:c3: e7:9c:b9:9a:9b:f2:90:c7:27:50:c4:ad:a7:78:76:7f:72:e0: 00:33:c8:10:b5:b4:ab:be:dd:3f:13:58:d0:f5:bb:a0:4d:f3: ac:b9:d7:86:93:93:dd:85:3f:28:f3:fd:81:54:14:4e:4c:08: bd:06:8b:f5:3d:1b:bd:5d:05:8f:6a:fb:6f:e9:40:64:74:2f: 1f:a7:68:d9:8b:50:f4:c9:84:6f:92:b3:ba:b8:5b:1b:93:02: 06:d6:51:d3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8gLFBkPxZstKsA8TnpL0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzQ1NjcyZmM0MmJkZDMzZTU0NTMzOGE3NDE3ZTgxNzFhMDRlZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aXegpkycexeUhGUCd1jNaQhb7qE JvXlw+S4NEoc3ImvY6X6HGBG3mcwHdFRtpJ4YWShr0o6BRlyE+6Fe0L+XR2LlxsS tEj6ETX66C+NNgtxPMAqjGrpgv13zA1RqfhFw/vBaoMHvDgN2Bv0M+zXpd5lI8Ei ATcJ4Jxq34R6oCaJdFOywwHtYL5NxB3m4KskOC7QRwPdsVMWaL32cDfIvBLgW9nC yHnTapsvWXfAOSiZZOSlIOpGxxz/yTa0WZ8ypJn4mxAdvsrfncaAX3/Ajcr+UpGi O+yVb5UZWe4OIZ0lKjF9io8AN5Trg7sD3Suari10kCoEjISeplDYWfHMsQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFHxFZy/EK90z5UUzinQX6BcaBO4/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzA4YWYy Mi1mZmM5LTRjMWItYTlkNy05NGJlZGI1ZDAzMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMDhhZjIy LWZmYzktNGMxYi1hOWQ3LTk0YmVkYjVkMDMzNC8xL2ZFVm5MOFFyM1RQbFJUT0tk QmZvRnhvRTdqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuYPIAwQAucXTMA0EAgACMAcDBQMqDBvAMA0G CSqGSIb3DQEBCwUAA4IBAQBrrjnGrdazHR8Ve/VTjECYruTyt8l5pqcO+6Lzyd7r FOgdTF0pSWzeUoMmxv8iVKA5HHGhT68+5cJYIujZ5WTZ1mnjAF3JNgk499zBFPZo 8e8CQHJSs6rq3H9oo6LFplje6i08yOUcpA23AvJKbRvqCB6VkSvadjVQJ9ZmMRQv Gc7GZtcO7l6vg5YS/f7KJwkXkjB5TeIySYSiHYx9UjmF9cPnnLmam/KQxydQxK2n eHZ/cuAAM8gQtbSrvt0/E1jQ9bugTfOsudeGk5PdhT8o8/2BVBROTAi9Bov1PRu9 XQWPavtv6UBkdC8fp2jZi1D0yYRvkrO6uFsbkwIG1lHT -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:34 2026 by rpki-client