This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer File: fhFniG2oFSRDG78u-wVykUtobrw.cer (raw, json) Hash identifier: momQgqmsJiC81FSGaPY/ZZNpWuc1NHdbZ0Jfd0q9880= Subject key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD13F7885739A819F07CE89DE8222 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60204 AS: 60618 IP: 193.8.204.0/24 IP: 193.17.13.0/24 IP: 193.223.176.0/20 IP: 194.56.241.0/24 IP: 195.160.0.0/18 IP: 195.160.96.0 -- 195.160.159.255 IP: 212.39.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d1:3f:78:85:73:9a:81:9f:07:ce:89:de:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e1167886da81524431bbf2efb0572914b686ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:b7:e9:9d:6c:5e:ae:01:02:de:4c:b5:e8: ad:f4:e1:b6:d3:86:dd:42:cc:76:cc:7a:82:e9:33: 47:3a:3a:ae:bf:d5:1d:48:92:d6:23:e7:ca:48:27: 4c:bc:99:b8:56:3b:82:9a:f6:05:02:e6:17:da:a4: 45:87:41:4c:3b:e1:02:d9:ec:2c:06:a5:c6:ae:d6: b0:72:df:65:43:4e:0e:85:9e:e4:a6:e0:18:0a:ff: ee:33:24:3b:96:8f:41:41:70:f7:43:86:c7:a4:f3: d1:ff:a6:22:01:0c:dc:46:dd:c8:74:bc:72:5b:16: 49:b3:b8:a1:65:cd:00:b8:89:dc:14:27:c0:dc:17: f0:f3:a6:3b:cf:ed:e4:64:ff:01:1a:f0:52:a2:48: 07:8a:4a:4d:88:70:e7:98:e4:3e:10:b8:90:82:af: 5c:0c:11:f7:72:9f:b3:f4:cb:34:50:54:8b:ea:9b: 50:a6:6a:63:68:36:27:1b:84:b4:12:25:8c:24:90: d2:7e:33:ef:24:8d:f5:f1:34:61:f5:1e:c1:19:bd: 4e:bb:6f:87:87:29:14:7a:27:22:cf:8a:bb:a7:0f: ec:cc:19:2e:22:a2:02:92:34:bf:de:9d:e8:eb:be: 16:46:19:b5:f3:6a:d8:9e:bd:16:57:a4:6a:71:4f: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.204.0/24 193.17.13.0/24 193.223.176.0/20 194.56.241.0/24 195.160.0.0/18 195.160.96.0-195.160.159.255 212.39.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60204 60618 Signature Algorithm: sha256WithRSAEncryption 27:ef:b3:39:e8:d5:63:13:e3:d4:fe:1a:c8:b0:09:eb:9e:e3: 8e:95:32:f3:80:cb:55:5d:5c:fa:6d:b7:e7:5d:76:ff:bb:e4: c2:06:52:de:76:18:6a:68:c0:7c:b5:ac:4e:21:32:db:c1:bf: cb:59:f9:9c:af:e6:17:d7:0b:cb:cf:2a:b9:1f:bc:f9:1f:4b: f9:4f:ad:d0:42:51:e1:8a:37:75:97:1a:cf:80:1c:8f:ce:71: a9:ec:98:f7:28:ce:00:ec:0d:03:6d:6a:7c:c9:16:32:51:4d: c2:8c:18:f8:b6:7f:29:ba:f8:1b:a1:a1:09:df:04:7a:2f:8d: af:d1:c6:bf:51:d9:5f:79:56:49:65:ec:6f:0c:dd:d3:80:9d: da:e0:c2:28:87:31:31:9a:0f:4d:e5:f6:c1:66:dc:de:d3:80: 27:ac:95:8d:95:b1:5c:99:11:92:b8:ea:ba:79:bb:86:dd:a6: a4:aa:d3:c5:53:5a:1e:c0:30:58:4c:e9:33:4d:c4:ca:83:29: 61:e9:3f:f5:79:b3:a7:a6:2c:1f:d5:ad:aa:a2:b9:4a:76:80: d0:d3:8f:25:6f:98:d0:89:c7:58:5a:db:1c:06:58:be:a0:cd: 02:55:78:ae:cf:56:d0:40:19:de:70:97:76:a9:13:d7:4a:bf: a2:73:9b:6d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt9ytE/eIVzmoGfB86J3oIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTExNjc4ODZkYTgxNTI0NDMxYmJmMmVmYjA1NzI5MTRiNjg2ZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlC36Z1sXq4BAt5Mteit9OG204bd Qsx2zHqC6TNHOjquv9UdSJLWI+fKSCdMvJm4VjuCmvYFAuYX2qRFh0FMO+EC2ews BqXGrtawct9lQ04OhZ7kpuAYCv/uMyQ7lo9BQXD3Q4bHpPPR/6YiAQzcRt3IdLxy WxZJs7ihZc0AuIncFCfA3Bfw86Y7z+3kZP8BGvBSokgHikpNiHDnmOQ+ELiQgq9c DBH3cp+z9Ms0UFSL6ptQpmpjaDYnG4S0EiWMJJDSfjPvJI318TRh9R7BGb1Ou2+H hykUeiciz4q7pw/szBkuIqICkjS/3p3o674WRhm182rYnr0WV6RqcU9hPwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFH4RZ4htqBUkQxu/LvsFcpFLaG68MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2Y5MmNk Ny02NDZjLTQ0MWItYWU0Ni05YjI4MmM2NDMyNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvZjkyY2Q3 LTY0NmMtNDQxYi1hZTQ2LTliMjgyYzY0MzI1Ni8xL2ZoRm5pRzJvRlNSREc3OHUt d1Z5a1V0b2Jydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjA4BAIAATAyAwQAwQjMAwQAwRENAwQEwd+wAwQAwjjxAwQGw6AA MAwDBAXDoGADBAXDoIADBAXUJ+AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAOss AgMA7MowDQYJKoZIhvcNAQELBQADggEBACfvszno1WMT49T+GsiwCeue446VMvOA y1VdXPptt+dddv+75MIGUt52GGpowHy1rE4hMtvBv8tZ+Zyv5hfXC8vPKrkfvPkf S/lPrdBCUeGKN3WXGs+AHI/OcansmPcozgDsDQNtanzJFjJRTcKMGPi2fym6+Buh oQnfBHovja/Rxr9R2V95Vkll7G8M3dOAndrgwiiHMTGaD03l9sFm3N7TgCeslY2V sVyZEZK46rp5u4bdpqSq08VTWh7AMFhM6TNNxMqDKWHpP/V5s6emLB/VraqiuUp2 gNDTjyVvmNCJx1ha2xwGWL6gzQJVeK7PVtBAGd5wl3apE9dKv6Jzm20= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client