This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer File: fFV1K31vznKGsaGi5DvIbUWE6D8.cer (raw, json) Hash identifier: 1NGLf88dW9+fhuCOp/EwFGmrMwITj468q7JUw8XCQx8= Subject key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC98C418AD9C4EA03C56A8C4BD9B2F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.223.215.0/24 IP: 2a10:ecc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:8c:41:8a:d9:c4:ea:03:c5:6a:8c:4b:d9:b2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:85:73:7f:33:60:97:10:d2:68:c3:e8:25: 86:22:e3:df:16:88:df:3a:7c:ef:5f:57:b9:b7:f9: 13:b3:47:73:50:16:cb:24:8b:89:8f:5a:78:70:f9: 81:02:56:44:27:bf:ea:46:b0:90:b7:eb:61:ed:ec: 60:25:11:7c:d0:56:db:01:34:21:4c:84:20:a3:13: 75:08:df:c0:8a:32:bd:02:f1:af:50:83:af:be:50: 18:a4:2a:01:ac:36:87:85:ea:39:03:cb:0f:cd:30: 0f:95:a7:b2:ac:3e:ee:1c:a4:24:a9:8f:9d:83:94: 23:42:d7:ea:18:2c:d2:af:35:d4:a4:62:cd:b2:30: 4c:85:5a:98:9c:e6:e7:50:07:68:49:94:0e:f8:07: 19:0f:9e:6e:32:9b:1f:94:71:8c:be:48:fa:34:a5: 76:c4:ce:2b:a4:cc:8f:42:74:d3:5e:10:6e:e6:1a: 2c:3a:23:5c:d5:0a:a6:f8:16:b8:7f:7d:c2:d8:5f: ee:7a:2a:4c:e5:dc:91:9e:4f:2b:74:2c:c4:a9:b7: 1b:a2:60:5c:11:46:de:4d:74:d2:53:d3:38:21:e7: b6:d8:77:02:07:15:c4:78:96:85:81:ed:9f:25:fd: eb:33:25:c5:58:18:4f:33:52:18:40:97:c6:ae:8e: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.215.0/24 IPv6: 2a10:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption ab:9c:3c:e3:47:d2:b2:05:93:7d:25:2a:cf:7b:e0:54:40:2a: 50:ad:68:62:f5:ad:ce:f4:81:e8:e0:63:67:42:7d:32:d5:44: 2d:69:25:79:02:62:4e:2f:32:7b:da:4c:dd:30:09:7d:b9:4a: a0:12:2f:9b:0d:87:a3:44:cf:47:f9:88:8c:a6:68:6b:97:c0: 1b:af:7c:3a:85:8a:69:35:1e:43:d8:91:bf:8d:12:0a:63:47: 92:f6:f7:45:a3:60:94:5f:ad:33:55:62:b6:43:de:f8:98:11: 65:de:65:df:ce:0e:2a:ca:f9:01:ea:49:ba:b9:79:b1:e7:70: eb:2c:ae:c7:a0:c2:31:5f:bf:bb:a3:ef:d7:98:bd:1a:88:2a: 38:4d:01:77:2f:4c:45:0b:89:6f:85:a8:2e:ab:7e:ee:d5:d2: 8d:77:23:22:41:ca:aa:d6:1c:3b:72:28:3a:7c:40:02:b6:f4: bf:54:c5:b3:ce:4a:55:f9:48:ff:68:2b:83:a0:dd:98:60:9f: bd:57:a2:c4:02:04:47:19:14:e7:ad:06:eb:5f:df:49:91:49: 40:41:84:5b:27:d1:17:da:2a:7a:1b:9d:b0:84:74:4a:a2:ec: 17:eb:0b:be:09:2a:24:c2:bb:ff:a5:57:5a:fe:0d:0b:e4:00: 5d:38:ce:8c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yYxBitnE6gPFaoxL2bL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU1NzUyYjdkNmZjZTcyODZiMWExYTJlNDNiYzg2ZDQ1ODRlODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUyFc38zYJcQ0mjD6CWGIuPfFojf OnzvX1e5t/kTs0dzUBbLJIuJj1p4cPmBAlZEJ7/qRrCQt+th7exgJRF80FbbATQh TIQgoxN1CN/AijK9AvGvUIOvvlAYpCoBrDaHheo5A8sPzTAPlaeyrD7uHKQkqY+d g5QjQtfqGCzSrzXUpGLNsjBMhVqYnObnUAdoSZQO+AcZD55uMpsflHGMvkj6NKV2 xM4rpMyPQnTTXhBu5hosOiNc1Qqm+Ba4f33C2F/ueipM5dyRnk8rdCzEqbcbomBc EUbeTXTSU9M4Iee22HcCBxXEeJaFge2fJf3rMyXFWBhPM1IYQJfGro6tLwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHxVdSt9b85yhrGhouQ7yG1FhOg/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzM0ZTA3 Ni01OTg5LTQwMmQtOTZkZS1lODg2OTVmZGQ2ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvMzRlMDc2 LTU5ODktNDAyZC05NmRlLWU4ODY5NWZkZDZlNS8xL2ZGVjFLMzF2em5LR3NhR2k1 RHZJYlVXRTZEOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAud/XMA0EAgACMAcDBQMqEOzAMA0GCSqGSIb3 DQEBCwUAA4IBAQCrnDzjR9KyBZN9JSrPe+BUQCpQrWhi9a3O9IHo4GNnQn0y1UQt aSV5AmJOLzJ72kzdMAl9uUqgEi+bDYejRM9H+YiMpmhrl8Abr3w6hYppNR5D2JG/ jRIKY0eS9vdFo2CUX60zVWK2Q974mBFl3mXfzg4qyvkB6km6uXmx53DrLK7HoMIx X7+7o+/XmL0aiCo4TQF3L0xFC4lvhaguq37u1dKNdyMiQcqq1hw7cig6fEACtvS/ VMWzzkpV+Uj/aCuDoN2YYJ+9V6LEAgRHGRTnrQbrX99JkUlAQYRbJ9EX2ip6G52w hHRKouwX6wu+CSokwrv/pVda/g0L5ABdOM6M -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:22 2026 by rpki-client