This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer File: fTXAsgkTXCLMgAWnwuIixjwTbLA.cer (raw, json) Hash identifier: 0Gfiaaahh63cArb981ajcc1BbAjm0UT0k//JQRHHvw8= Subject key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21BC93E4D498280550474D698207F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.67.176.0/21 IP: 185.39.236.0/22 IP: 2a01:5380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1b:c9:3e:4d:49:82:80:55:04:74:d6:98:20:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:76:bb:91:84:1e:ba:59:81:92:93:fa:3f: dc:a0:4d:6f:c1:82:97:00:90:3b:2b:50:8c:b8:b5: 41:23:b1:52:59:7b:73:90:29:e0:a4:ee:42:32:02: 6c:5f:24:68:ef:c7:57:d7:b9:05:51:1b:36:f0:e8: bb:dd:35:e9:24:ff:ce:b3:55:9e:ec:5e:af:dd:25: 99:a2:e7:46:4a:7a:ec:ef:95:a5:55:12:ce:8f:db: c1:0d:94:80:a6:e8:29:8e:2e:de:40:de:94:47:5e: 59:af:99:87:fa:c6:4d:a2:b5:a8:97:89:75:55:2c: 97:6d:ec:2f:7b:93:1f:d5:24:9b:5b:0a:5f:64:4c: 3e:05:b5:4a:1e:58:10:76:85:25:a6:97:d6:51:d8: 00:f7:dd:98:49:cb:68:e1:b0:76:1e:0b:09:54:28: 06:38:53:45:2c:6e:8a:f9:85:46:c8:cd:9d:12:53: 45:cb:50:a3:cf:08:40:10:ab:55:5e:1d:61:d9:57: 85:11:46:3a:39:78:e1:74:82:66:24:64:ef:b8:ed: d3:25:66:7f:af:0d:4f:8a:06:bd:f1:3b:2c:ad:f7: e9:f0:65:da:34:ea:99:d4:b7:97:a8:bc:1f:a5:82: 96:3f:6d:08:fe:d8:80:b5:96:21:af:42:fe:10:14: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.67.176.0/21 185.39.236.0/22 IPv6: 2a01:5380::/32 Signature Algorithm: sha256WithRSAEncryption 62:9a:c0:eb:b0:87:60:8c:da:c8:35:44:81:cb:c8:08:3f:90: 49:b0:ca:a7:f3:70:c6:58:e6:b3:30:57:c7:99:9f:18:b3:63: 4b:70:f4:8f:2e:5b:05:10:41:a6:66:19:c0:c7:7e:ef:d6:60: 36:fa:74:14:3f:44:cb:e5:50:c2:90:d9:68:66:f1:50:b3:c7: 5d:6d:b4:9f:ac:ea:52:d2:5b:14:af:ca:7a:3b:d4:8d:2d:66: 99:01:98:78:46:58:60:58:54:76:c9:00:02:98:93:bd:e3:bd: 0e:7f:dd:44:d7:79:2e:28:f0:6c:43:eb:8b:9c:3d:ea:a2:91: 6c:97:2f:20:bb:f7:fc:43:5b:c9:b8:28:b4:6a:e9:33:ab:bd: 7d:7b:9d:d7:ca:3b:a3:6c:b8:32:9e:3e:0a:a4:62:c7:ef:32: e4:a9:ef:df:7c:7d:6d:af:d8:8f:bb:3c:d1:c8:aa:ac:d9:62: d2:b6:78:a6:11:ce:cd:6e:df:38:26:57:ba:62:93:26:87:e7: 3b:d1:12:2c:e0:48:09:40:9b:72:fd:c3:6b:49:7f:0a:42:70: c5:ae:31:11:22:4f:25:b3:a0:1a:e5:61:9c:2f:8a:c1:21:a8: 29:eb:af:03:9c:87:df:8b:f5:63:02:2e:55:75:e2:43:53:78: 28:a9:6c:ac -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/8hvJPk1JgoBVBHTWmCB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM1YzBiMjA5MTM1YzIyY2M4MDA1YTdjMmUyMjJjNjNjMTM2Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9l2u5GEHrpZgZKT+j/coE1vwYKX AJA7K1CMuLVBI7FSWXtzkCngpO5CMgJsXyRo78dX17kFURs28Oi73TXpJP/Os1We 7F6v3SWZoudGSnrs75WlVRLOj9vBDZSApugpji7eQN6UR15Zr5mH+sZNorWol4l1 VSyXbewve5Mf1SSbWwpfZEw+BbVKHlgQdoUlppfWUdgA992YScto4bB2HgsJVCgG OFNFLG6K+YVGyM2dElNFy1CjzwhAEKtVXh1h2VeFEUY6OXjhdIJmJGTvuO3TJWZ/ rw1Piga98Tssrffp8GXaNOqZ1LeXqLwfpYKWP20I/tiAtZYhr0L+EBQgRQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFH01wLIJE1wizIAFp8LiIsY8E2ywMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2I5Yzkw Ni0xZTg1LTQ1NzMtOGY2Mi04MjU3ZDUxOTI4YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYjljOTA2 LTFlODUtNDU3My04ZjYyLTgyNTdkNTE5MjhhOS8xL2ZUWEFzZ2tUWENMTWdBV253 dUlpeGp3VGJMQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsEOwAwQCuSfsMA0EAgACMAcDBQAqAVOAMA0G CSqGSIb3DQEBCwUAA4IBAQBimsDrsIdgjNrINUSBy8gIP5BJsMqn83DGWOazMFfH mZ8Ys2NLcPSPLlsFEEGmZhnAx37v1mA2+nQUP0TL5VDCkNloZvFQs8ddbbSfrOpS 0lsUr8p6O9SNLWaZAZh4RlhgWFR2yQACmJO9470Of91E13kuKPBsQ+uLnD3qopFs ly8gu/f8Q1vJuCi0aukzq719e53XyjujbLgynj4KpGLH7zLkqe/ffH1tr9iPuzzR yKqs2WLStnimEc7Nbt84Jle6YpMmh+c70RIs4EgJQJty/cNrSX8KQnDFrjERIk8l s6Aa5WGcL4rBIagp668DnIffi/VjAi5VdeJDU3goqWys -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:35 2026 by rpki-client