This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer File: fhVA_dWt1rd1SYwePyXJDiE6YS8.cer (raw, json) Hash identifier: Db1GxuyOma4xhdOTFfJh/aIbpbTS2ukhoMuxedp+1P8= Subject key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8427626823CCCC3D43C1C417793085 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44821 IP: 5.253.132.0/22 IP: 185.23.138.0/23 IP: 185.148.252.0/22 IP: 2a07:6380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:27:62:68:23:cc:cc:3d:43:c1:c4:17:79:30:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:9c:7a:80:c6:7e:ab:e4:82:b4:6d:36:5e: a8:aa:81:a3:0b:1e:85:94:7c:71:eb:6b:a1:78:18: 9d:5f:98:fe:51:a4:c7:ff:ac:f4:58:72:4b:7f:fb: d7:3e:ba:61:fb:65:ce:32:39:11:f3:82:f4:e4:4c: 9e:9f:7f:99:8d:ae:14:14:14:dc:f1:3c:ce:99:98: 5d:a0:c2:98:f9:5c:03:7d:93:5b:b8:e7:9f:32:35: c3:6c:de:5e:6c:5c:f0:e2:0a:8d:1c:f3:96:ab:58: 9e:4b:42:a0:db:29:c5:74:af:71:ef:13:0f:65:0d: 73:56:0f:58:0c:d7:82:32:4f:41:bc:4e:b3:e7:40: 5d:7b:70:e3:be:47:01:d8:9a:d3:7d:71:e3:46:96: a7:04:39:75:b6:42:76:25:64:6b:5f:5b:93:b3:9b: a3:3a:f5:a3:bd:b4:3f:ed:cb:54:7c:c3:f6:53:41: 4c:90:2f:9d:2f:b7:1f:66:8a:1b:ab:12:4c:4c:d5: 18:76:65:e5:1f:dd:a2:f4:4f:72:b4:91:93:53:28: 7e:66:ad:4c:c2:a5:69:63:1c:7b:69:bf:ad:e7:7f: 04:15:e4:25:4b:d5:81:aa:76:b7:ba:37:af:51:05: 51:5e:2a:87:bb:2b:8c:c8:5a:15:08:35:91:3d:02: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.132.0/22 185.23.138.0/23 185.148.252.0/22 IPv6: 2a07:6380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44821 Signature Algorithm: sha256WithRSAEncryption 0c:15:ce:db:ad:9b:9a:33:0f:bc:0f:66:ba:84:d9:b4:08:52: 07:eb:2f:9e:06:0b:74:d5:f0:3d:4b:73:7f:65:ae:86:84:9f: da:e9:f5:8f:b5:51:6b:0b:28:d2:3b:db:b8:2a:e3:38:f8:67: ce:79:6f:7d:a9:e3:71:9e:6d:f2:7f:b9:9b:57:b9:15:b4:83: 0d:1c:ee:84:9f:54:6d:f7:d6:2e:2b:20:4e:df:46:52:ec:d1: 5c:9e:16:f9:05:13:fe:cd:49:7e:91:64:e0:bd:b7:be:54:99: f6:c0:fd:02:c0:c1:b6:fc:c1:8f:03:46:ff:dc:5d:25:b3:1c: e1:4a:af:c2:a5:e9:1a:62:09:8e:22:e4:9f:f7:a2:b8:d7:38: bf:e3:76:3f:e6:a6:72:37:ae:c9:95:16:35:b7:36:e7:dd:9d: 9c:0c:56:d9:af:f1:c4:e8:f2:45:be:39:1a:62:a0:1f:b5:13: 55:12:ba:30:99:44:d3:ab:28:62:44:ce:f1:d0:f5:35:49:db: e3:03:93:65:64:1b:3d:2f:5e:8f:40:31:49:2e:db:4b:e2:c8: 1e:31:cb:1c:df:76:20:07:63:9e:e0:3e:f9:a7:e4:aa:d6:db: 8e:93:b9:f9:b5:11:d4:96:f6:3b:ef:c2:9e:49:65:d8:e6:3f: 04:7c:b5:47 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/hCdiaCPMzD1DwcQXeTCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTE1NDBmZGQ1YWRkNmI3NzU0OThjMWUzZjI1YzkwZTIxM2E2MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHaceoDGfqvkgrRtNl6oqoGjCx6F lHxx62uheBidX5j+UaTH/6z0WHJLf/vXPrph+2XOMjkR84L05Eyen3+Zja4UFBTc 8TzOmZhdoMKY+VwDfZNbuOefMjXDbN5ebFzw4gqNHPOWq1ieS0Kg2ynFdK9x7xMP ZQ1zVg9YDNeCMk9BvE6z50Bde3DjvkcB2JrTfXHjRpanBDl1tkJ2JWRrX1uTs5uj OvWjvbQ/7ctUfMP2U0FMkC+dL7cfZoobqxJMTNUYdmXlH92i9E9ytJGTUyh+Zq1M wqVpYxx7ab+t538EFeQlS9WBqna3ujevUQVRXiqHuyuMyFoVCDWRPQKg/wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2E0ZGVi Yi0yN2I3LTQxNDAtYjI3ZS1lYTY1MzgyNGIxZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYTRkZWJi LTI3YjctNDE0MC1iMjdlLWVhNjUzODI0YjFmMi8xL2ZoVkFfZFd0MXJkMVNZd2VQ eVhKRGlFNllTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCBf2EAwQBuReKAwQCuZT8MA0EAgACMAcDBQMq B2OAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvFTANBgkqhkiG9w0BAQsFAAOC AQEADBXO262bmjMPvA9muoTZtAhSB+svngYLdNXwPUtzf2WuhoSf2un1j7VRawso 0jvbuCrjOPhnznlvfanjcZ5t8n+5m1e5FbSDDRzuhJ9UbffWLisgTt9GUuzRXJ4W +QUT/s1JfpFk4L23vlSZ9sD9AsDBtvzBjwNG/9xdJbMc4UqvwqXpGmIJjiLkn/ei uNc4v+N2P+amcjeuyZUWNbc2592dnAxW2a/xxOjyRb45GmKgH7UTVRK6MJlE06so YkTO8dD1NUnb4wOTZWQbPS9ej0AxSS7bS+LIHjHLHN92IAdjnuA++afkqtbbjpO5 +bUR1Jb2O+/Cnkll2OY/BHy1Rw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:01 2026 by rpki-client