This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer File: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer (raw, json) Hash identifier: 8We0Ac5eHYdtCfFU9UHNKwgU562oDCEoyNWC54ayn3E= Subject key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4D1FAB547C57A5829E44D3A67C0EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43207 AS: 207120 IP: 5.133.172.0/22 IP: 46.231.8.0/21 IP: 85.95.32.0/19 IP: 91.209.142.0/24 IP: 91.214.228.0/22 IP: 151.249.64.0/20 IP: 185.44.248.0/22 IP: 185.113.0.0/22 IP: 185.168.144.0/22 IP: 209.35.128.0/20 IP: 2a01:5640::/32 IP: 2a0d:ea00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:fa:b5:47:c5:7a:58:29:e4:4d:3a:67:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:95:1b:d1:ee:db:02:c3:da:9e:52:21:ab: 89:f9:c0:77:aa:e3:d2:cb:7c:c0:13:e4:ca:a3:cf: 6e:13:34:f4:39:e0:b8:e0:06:72:f5:0a:47:24:65: 64:3f:d8:36:55:8c:d1:6c:6d:c7:d1:b9:12:24:ec: be:b8:79:c7:fe:a9:5c:ac:7f:12:5e:77:20:7c:98: 71:96:3a:17:fd:ba:ad:27:78:4a:f7:ad:14:17:4d: dd:88:72:2b:7e:98:7d:33:6c:4c:f5:4d:ee:49:5d: e5:7f:ed:da:69:8d:32:ae:e2:82:61:b7:42:3d:e8: 3e:04:f7:fe:63:ee:93:32:30:f6:8d:6e:1a:00:be: cc:dc:4d:71:fd:6e:fb:f0:e0:87:22:9a:bb:80:ed: 4f:41:49:54:d7:c3:ef:44:64:ab:8d:31:2a:a0:22: fc:c8:3d:7c:dd:d1:b6:32:32:7b:ce:30:0c:89:e3: 06:ce:99:c0:ba:60:15:fd:5f:16:14:23:a0:1d:6f: ce:44:43:f9:28:12:02:24:e0:5a:7d:a2:ac:6d:87: 65:05:b8:b4:0f:87:65:dd:6d:bc:92:27:02:04:b2: ba:01:2d:12:7f:a9:1e:09:8b:fc:aa:48:a6:25:68: 5c:65:ef:0c:ca:c8:00:91:7c:49:ba:96:86:d8:f5: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.172.0/22 46.231.8.0/21 85.95.32.0/19 91.209.142.0/24 91.214.228.0/22 151.249.64.0/20 185.44.248.0/22 185.113.0.0/22 185.168.144.0/22 209.35.128.0/20 IPv6: 2a01:5640::/32 2a0d:ea00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43207 207120 Signature Algorithm: sha256WithRSAEncryption 6e:21:dd:49:55:30:87:6f:77:c7:cf:ef:a0:08:07:89:c0:30: 92:4a:35:d9:49:2f:d6:f3:38:4e:68:88:a1:8f:0c:89:ba:af: 9c:3a:40:3f:a2:cd:4a:b8:f4:1c:0a:be:99:d5:71:30:5d:85: 20:32:22:7d:d4:99:6a:71:9b:aa:82:6f:96:cd:66:5b:e0:22: ae:79:0b:48:92:cd:47:a3:c5:34:65:05:70:1e:e8:81:7f:70: 46:a4:48:e4:d0:e2:99:2e:51:80:30:2b:c6:78:10:18:3a:29: 56:99:e9:19:91:da:dd:29:4b:60:e9:47:4e:e2:65:fa:fb:59: 11:b8:4b:f1:27:2d:b9:f3:b2:ab:5c:d4:86:07:45:b2:b1:2e: a1:5a:89:96:b5:73:50:61:af:f6:cd:a8:93:49:3d:02:6c:08: 44:f3:e6:10:65:6c:06:4c:ed:c6:88:1a:7f:c6:27:82:f8:48: af:3d:77:72:67:03:48:a6:be:f8:6b:a7:9e:8a:00:bf:06:ca: 49:1d:f7:49:b3:88:ee:f9:90:c2:32:78:0e:f0:06:b0:32:57: 99:9b:8c:65:fd:84:77:5f:49:b5:2e:a7:8b:7c:92:d1:de:26: b5:55:ff:7b:33:6d:af:bf:ee:fc:78:10:b4:13:97:66:ec:82: b6:62:3c:5f -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt7pNH6tUfFelgp5E06Z8DvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQ1YTlhMDM1M2EzM2M2YTRmOTM2MDhmOWQyNWYyN2M4NTk0OGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscuVG9Hu2wLD2p5SIauJ+cB3quPS y3zAE+TKo89uEzT0OeC44AZy9QpHJGVkP9g2VYzRbG3H0bkSJOy+uHnH/qlcrH8S XncgfJhxljoX/bqtJ3hK960UF03diHIrfph9M2xM9U3uSV3lf+3aaY0yruKCYbdC Peg+BPf+Y+6TMjD2jW4aAL7M3E1x/W778OCHIpq7gO1PQUlU18PvRGSrjTEqoCL8 yD183dG2MjJ7zjAMieMGzpnAumAV/V8WFCOgHW/OREP5KBICJOBafaKsbYdlBbi0 D4dl3W28kicCBLK6AS0Sf6keCYv8qkimJWhcZe8MysgAkXxJupaG2PV8dQIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFH5FqaA1OjPGpPk2CPnSXyfIWUi3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2RkN2Jl Yi02Zjc4LTQxOWItOTU3ZC0zN2E2MGMzMzVhNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZGQ3YmVi LTZmNzgtNDE5Yi05NTdkLTM3YTYwYzMzNWE1ZC8xL2ZrV3BvRFU2TThhay1UWUkt ZEpmSjhoWlNMYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQCBYWsAwQDLucIAwQFVV8gAwQAW9GOAwQCW9bk AwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE0SOAMBQEAgACMA4DBQAqAVZAAwUD Kg3qADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAqMcCAwMpEDANBgkqhkiG9w0B AQsFAAOCAQEAbiHdSVUwh293x8/voAgHicAwkko12Ukv1vM4TmiIoY8MibqvnDpA P6LNSrj0HAq+mdVxMF2FIDIifdSZanGbqoJvls1mW+AirnkLSJLNR6PFNGUFcB7o gX9wRqRI5NDimS5RgDArxngQGDopVpnpGZHa3SlLYOlHTuJl+vtZEbhL8SctufOy q1zUhgdFsrEuoVqJlrVzUGGv9s2ok0k9AmwIRPPmEGVsBkztxogaf8YngvhIrz13 cmcDSKa++GunnooAvwbKSR33SbOI7vmQwjJ4DvAGsDJXmZuMZf2Ed19JtS6ni3yS 0d4mtVX/ezNtr7/u/HgQtBOXZuyCtmI8Xw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:14:59 2026 by rpki-client