This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer (raw, json) Hash identifier: HA9nW2thP/vjWQH88MudQAkJozaku7NITb7ihF9OeHk= Subject key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1254DED8565DF33252E5F3B0B37BA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.164.40.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:54:de:d8:56:5d:f3:32:52:e5:f3:b0:b3:7b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:9f:83:a1:eb:bb:06:2b:a3:a9:47:fc:4a: 2b:9f:d5:16:3a:11:eb:3c:ca:11:71:b1:21:7b:e2: f3:22:b9:1c:b0:f5:58:45:0e:c4:e8:d8:21:41:be: 4d:49:a7:d9:b6:18:f8:11:4e:82:8e:f3:b8:a2:84: a4:6e:ba:b2:e3:ac:c2:02:3f:05:4f:71:3e:17:51: 91:90:0c:5c:c7:6e:6c:e1:92:b7:4e:2d:31:b1:33: 46:3c:17:f8:3c:80:22:3d:a9:f8:db:97:21:c3:98: f0:f7:f0:88:4e:1e:b6:9c:e8:b1:c3:d3:4c:35:4f: 7a:01:3b:90:1b:e2:54:fe:ab:af:16:4e:52:e1:52: 1f:39:ec:e5:87:21:a2:23:a5:82:85:77:ee:71:69: 08:eb:06:b8:d0:67:ff:4c:03:b2:5a:ae:5b:9f:b7: 19:b6:45:bd:0c:dc:d5:27:e8:8e:e5:ee:b6:56:76: 98:f4:a9:93:ba:dc:e4:fd:4d:c4:69:78:54:75:10: 6b:5b:23:01:04:5a:cb:7d:df:3e:94:14:3e:ec:1b: c4:62:ac:20:9e:49:13:58:46:a1:66:eb:f0:5c:f8: 81:68:ff:be:17:af:29:42:94:50:13:b6:31:9d:9c: 39:0a:46:ec:1d:35:df:45:44:50:71:1f:49:ff:bc: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.40.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:d1:d8:27:04:95:fd:ae:44:9c:c8:19:be:e3:f2:cd:fe:ac: 16:b0:e6:51:11:72:7f:af:fc:b2:18:47:76:09:b0:31:09:1a: 64:e9:cc:47:1d:8c:8a:d8:01:39:8c:cc:ff:23:39:6a:0f:fb: c7:e7:40:d0:7f:af:c8:de:88:3c:b6:08:74:c5:1d:fd:8f:4c: 42:11:0e:c8:b4:a1:f9:e1:bb:fd:e7:af:fb:cc:6e:34:be:b4: 1f:d4:e8:7d:2c:ee:6b:4d:33:3e:ec:35:09:e7:aa:fd:d9:0d: 80:db:26:74:4a:7a:35:01:f3:d1:d0:ca:74:5b:9a:c6:30:46: 04:a2:9a:a4:d1:d9:89:4a:47:58:45:dc:56:3e:72:90:14:02: b8:93:75:b6:56:6d:d2:17:dc:30:e7:05:8e:6b:ee:91:20:df: 8d:c3:b2:a9:96:af:a9:8d:73:25:68:a6:70:02:94:31:44:9f: 00:5b:9a:b2:fd:62:e8:fe:ad:bd:a6:13:d5:ed:2c:a2:8f:c2: a9:a7:2d:df:6b:1a:7d:b7:74:8e:1b:9b:bf:41:7d:ac:af:9a: 52:02:ff:0b:19:d5:8b:54:80:93:ca:3b:2f:6a:d2:a8:db:ff: b4:3d:ec:1d:59:92:e7:bd:a7:b1:91:0f:53:da:82:ac:62:38: 1e:2a:e5:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8ElTe2FZd8zJS5fOws3uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDY2ZDE5ZTUzODhmMTJjMWQyOGExNmMzMjhkODZjMzY0ZTljYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwWfg6HruwYro6lH/Eorn9UWOhHr PMoRcbEhe+LzIrkcsPVYRQ7E6NghQb5NSafZthj4EU6CjvO4ooSkbrqy46zCAj8F T3E+F1GRkAxcx25s4ZK3Ti0xsTNGPBf4PIAiPan425chw5jw9/CITh62nOixw9NM NU96ATuQG+JU/quvFk5S4VIfOezlhyGiI6WChXfucWkI6wa40Gf/TAOyWq5bn7cZ tkW9DNzVJ+iO5e62VnaY9KmTutzk/U3EaXhUdRBrWyMBBFrLfd8+lBQ+7BvEYqwg nkkTWEahZuvwXPiBaP++F68pQpRQE7YxnZw5CkbsHTXfRURQcR9J/7ybaQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH1m0Z5TiPEsHSihbDKNhsNk6cx5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2FjZTli ZC1mMzNkLTQ4NmUtYjM5NC1mMGQwNzVhNDM3ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvYWNlOWJk LWYzM2QtNDg2ZS1iMzk0LWYwZDA3NWE0MzdmMS8xL2ZXYlJubE9JOFN3ZEtLRnNN bzJHdzJUcHpIay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuaQoMA0GCSqGSIb3DQEBCwUAA4IBAQAe0dgn BJX9rkScyBm+4/LN/qwWsOZREXJ/r/yyGEd2CbAxCRpk6cxHHYyK2AE5jMz/Izlq D/vH50DQf6/I3og8tgh0xR39j0xCEQ7ItKH54bv956/7zG40vrQf1Oh9LO5rTTM+ 7DUJ56r92Q2A2yZ0Sno1AfPR0Mp0W5rGMEYEopqk0dmJSkdYRdxWPnKQFAK4k3W2 Vm3SF9ww5wWOa+6RIN+Nw7Kplq+pjXMlaKZwApQxRJ8AW5qy/WLo/q29phPV7Syi j8Kppy3faxp9t3SOG5u/QX2sr5pSAv8LGdWLVICTyjsvatKo2/+0PewdWZLnvaex kQ9T2oKsYjgeKuWR -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:01 2026 by rpki-client