This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer File: fTBF_EkdOfUucUWxAAs7hsN97UU.cer (raw, json) Hash identifier: DLhw1fIrt4uLx9jp/TsCzoKsjZI3Gg99nbpIePS0QjM= Subject key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEDF5CA10EE80EF62C8D0D9DA3CA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.236.18.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ed:f5:ca:10:ee:80:ef:62:c8:d0:d9:da:3c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:ff:25:9f:e8:f8:cb:a1:17:f3:51:40:f4: 99:5b:99:4f:12:b0:ea:76:81:8e:45:87:c2:86:89: b3:80:5c:f6:ea:9b:c1:9f:cc:dd:7c:65:8b:84:ea: ed:2f:31:1e:d7:d0:64:32:61:30:1c:53:20:ec:5b: f1:82:21:d0:52:1e:6d:69:f9:01:bb:2b:49:08:89: fe:a4:cd:63:9c:55:6f:f1:fe:14:95:61:87:6a:cf: 12:f9:b1:7b:2e:02:74:28:c1:28:af:01:3e:15:8c: a1:73:d2:57:5c:a2:28:03:92:39:a0:f7:ce:36:29: c1:14:56:e1:d5:69:5e:93:77:b5:93:c1:43:cb:fe: ae:94:89:91:74:0e:ec:58:a9:35:0d:4e:2b:b8:e8: bb:42:ae:36:c4:c3:73:64:46:63:68:2f:f2:0c:fc: a3:c8:d8:7f:7f:d2:47:7a:0c:f3:8d:d6:94:2a:cc: 78:8f:34:45:86:bc:54:d8:89:5e:84:cf:95:d3:15: 96:59:25:02:f8:f5:c2:a1:28:9d:6a:15:c6:9f:83: e6:6d:2b:b7:be:58:03:50:f7:55:33:16:78:ae:b6: 23:95:ad:0e:8c:c9:d3:3e:08:15:db:34:8b:21:80: f7:d0:96:b4:a2:e0:39:c2:20:ba:4b:27:94:c7:6b: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.18.0/24 Signature Algorithm: sha256WithRSAEncryption 63:83:dd:ef:a5:e8:be:ca:d4:4c:5c:c2:60:fc:0b:cf:d0:90: ba:13:a6:93:a0:aa:eb:dc:7d:fa:48:42:c4:8a:49:65:34:52: d6:4c:8b:a0:6f:2b:ab:4c:32:f3:ea:0c:d3:b5:74:f5:04:38: 0d:ac:79:22:94:66:11:6e:73:10:72:6d:1d:28:4b:71:29:fc: 78:0e:c7:c2:c4:73:4e:cf:93:67:5b:9c:bb:aa:ba:08:28:c1: 71:8f:28:a9:55:21:8a:d5:19:e9:c8:7f:ad:71:18:1c:e6:3e: c3:79:3e:6f:84:67:25:55:cb:c5:e7:0a:36:f0:87:8c:87:b2: 1f:6c:ea:78:e0:7f:7e:31:43:a3:c8:09:68:0c:27:2d:09:33: 8c:b1:47:68:6e:55:1a:b7:84:dd:21:e5:f5:16:7c:a8:91:b7: ba:8d:8d:c5:1f:af:e5:af:69:4b:e4:97:f6:37:83:03:bb:d5: 9e:64:c7:9e:46:8c:e6:f2:8b:4e:b0:34:10:18:1e:bf:cd:e3: ab:f5:d0:ba:64:61:0a:42:f4:cf:fb:16:c2:e3:13:21:da:e0: 23:7f:be:ef:6f:5a:6b:05:43:38:28:53:98:3d:1b:be:a5:ce: 2f:bb:a8:53:f3:ef:bd:f3:64:8f:e5:8e:97:16:67:de:88:ac: 22:78:29:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Wu31yhDugO9iyNDZ2jyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDMwNDVmYzQ5MWQzOWY1MmU3MTQ1YjEwMDBiM2I4NmMzN2RlZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrX/JZ/o+MuhF/NRQPSZW5lPErDq doGORYfChomzgFz26pvBn8zdfGWLhOrtLzEe19BkMmEwHFMg7FvxgiHQUh5tafkB uytJCIn+pM1jnFVv8f4UlWGHas8S+bF7LgJ0KMEorwE+FYyhc9JXXKIoA5I5oPfO NinBFFbh1Wlek3e1k8FDy/6ulImRdA7sWKk1DU4ruOi7Qq42xMNzZEZjaC/yDPyj yNh/f9JHegzzjdaUKsx4jzRFhrxU2IlehM+V0xWWWSUC+PXCoSidahXGn4PmbSu3 vlgDUPdVMxZ4rrYjla0OjMnTPggV2zSLIYD30Ja0ouA5wiC6SyeUx2tdVQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH0wRfxJHTn1LnFFsQALO4bDfe1FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzFmNjNk Yi1jOTYzLTQ0YmMtYTAzOS04YWFhNmE5MGZmOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMWY2M2Ri LWM5NjMtNDRiYy1hMDM5LThhYWE2YTkwZmY5NS8xL2ZUQkZfRWtkT2ZVdWNVV3hB QXM3aHNOOTdVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+wSMA0GCSqGSIb3DQEBCwUAA4IBAQBjg93v pei+ytRMXMJg/AvP0JC6E6aToKrr3H36SELEikllNFLWTIugbyurTDLz6gzTtXT1 BDgNrHkilGYRbnMQcm0dKEtxKfx4DsfCxHNOz5NnW5y7qroIKMFxjyipVSGK1Rnp yH+tcRgc5j7DeT5vhGclVcvF5wo28IeMh7IfbOp44H9+MUOjyAloDCctCTOMsUdo blUat4TdIeX1Fnyokbe6jY3FH6/lr2lL5Jf2N4MDu9WeZMeeRozm8otOsDQQGB6/ zeOr9dC6ZGEKQvTP+xbC4xMh2uAjf77vb1prBUM4KFOYPRu+pc4vu6hT8++982SP 5Y6XFmfeiKwieCl5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:08 2026 by rpki-client