This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer File: fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer (raw, json) Hash identifier: inFJ/ak7LdQTUbwwX4eKrLMcP3lHmu9nbIuN0hle7YA= Subject key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE09D683D3182567DA4C48BCFDA359FE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 12:52:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21034 AS: 205005 IP: 185.2.144.0/22 IP: 185.121.208.0/22 IP: 185.179.103.0/24 IP: 212.43.96.0/19 IP: 2a00:1be0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9d:68:3d:31:82:56:7d:a4:c4:8b:cf:da:35:9f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 12:52:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:70:d2:46:e5:29:11:dd:34:d3:37:dc:b1: 10:4e:de:d4:44:1e:c5:7d:ef:91:f1:20:4d:d7:e4: d7:d0:9d:c4:e3:33:96:49:00:4d:a1:ed:4b:3b:e9: 15:de:23:e8:f6:ce:61:83:c7:6a:04:5b:88:48:28: c3:b6:2b:67:49:ca:b0:c1:b0:e9:1f:07:1f:d6:9b: e3:d1:b2:6b:d4:ef:3c:f5:59:41:85:ae:c2:55:4b: 72:f1:3c:7c:72:1c:5c:50:a8:c0:bd:c3:09:06:60: 7c:e6:4d:f3:5c:5a:7e:92:85:05:0b:40:b3:57:4a: b9:6d:c2:c4:a2:3c:d0:08:39:7e:17:55:cb:c9:00: d6:53:03:0d:98:4d:cb:9e:f5:0b:6a:bd:3e:e6:8b: 64:7e:e7:a0:db:26:33:65:0f:f0:f7:df:85:63:21: 74:a2:b7:d1:bc:36:9f:f6:78:c4:e4:3f:8a:d3:4e: de:5c:36:cb:50:ef:f0:c1:f5:87:33:f8:e8:76:6c: 6e:c4:ce:a0:29:d5:5f:3c:6e:c5:e6:a2:2d:a0:dd: 95:71:4f:cc:fa:0e:8c:61:3c:46:21:d4:33:10:71: c0:97:c0:19:a6:e2:6c:3f:bb:e1:a2:74:e6:17:94: f3:10:04:6a:c5:7a:21:d4:d1:ab:19:6c:1f:45:ce: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.144.0/22 185.121.208.0/22 185.179.103.0/24 212.43.96.0/19 IPv6: 2a00:1be0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21034 205005 Signature Algorithm: sha256WithRSAEncryption 07:17:90:ba:81:4b:ba:72:ef:e7:4d:b7:06:53:d7:45:f2:a1: 04:29:2a:f7:d5:1a:4a:9a:bc:83:b9:4e:c5:aa:77:17:41:56: af:15:28:e1:98:40:f8:49:79:35:81:92:c3:af:9f:fa:2f:6e: 3f:25:ef:62:b2:da:42:a7:34:8d:d9:f5:41:a7:19:80:4c:c9: 39:0c:71:03:bf:69:c3:8b:23:80:57:0f:d9:d4:5b:87:7d:b4: 1b:6a:e0:26:c5:21:4c:70:46:48:41:f4:4b:fc:fd:a7:78:89: 09:58:80:da:ee:8a:8b:fd:8d:2f:ca:70:98:0c:10:8b:7b:c9: dc:a4:74:fd:c1:68:e2:cb:ad:df:4a:03:df:5f:f2:11:69:5f: 1b:b7:e2:cd:c0:05:4d:0c:a4:bb:a8:ca:af:1a:83:64:00:74: 9d:b6:19:8c:cd:b7:e7:71:25:0d:d9:40:31:ff:0a:65:4d:8a: c4:6c:ce:8b:fe:02:eb:5b:ad:8e:51:33:34:c5:33:74:9d:ad: 9b:ab:d2:b3:55:3c:aa:12:62:41:98:37:5c:c7:dc:2a:28:b4: fd:7e:7f:8a:a9:2c:0e:6a:b7:cb:14:56:68:50:ca:77:83:a7: 2d:fd:27:23:ac:c9:96:4d:81:9c:ad:aa:32:06:f0:65:a4:57: 3c:2b:69:4c -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZvgnWg9MYJWfaTEi8/aNZ/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTI1MjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZThlMDk3MjRmNDcyZTc2Njg5YzYxZGNhNjBhN2M2NDFmMmFjOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXRw0kblKRHdNNM33LEQTt7URB7F fe+R8SBN1+TX0J3E4zOWSQBNoe1LO+kV3iPo9s5hg8dqBFuISCjDtitnScqwwbDp Hwcf1pvj0bJr1O889VlBha7CVUty8Tx8chxcUKjAvcMJBmB85k3zXFp+koUFC0Cz V0q5bcLEojzQCDl+F1XLyQDWUwMNmE3LnvULar0+5otkfueg2yYzZQ/w99+FYyF0 orfRvDaf9njE5D+K007eXDbLUO/wwfWHM/jodmxuxM6gKdVfPG7F5qItoN2VcU/M +g6MYTxGIdQzEHHAl8AZpuJsP7vhonTmF5TzEARqxXoh1NGrGWwfRc7H3QIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFH6OCXJPRy52aJxh3KYKfGQfKsj5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2RkYzI3 Yy03OTM3LTQ1NjAtYmUyMi1kY2I1ZmIzM2MxNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvZGRjMjdj LTc5MzctNDU2MC1iZTIyLWRjYjVmYjMzYzE3OC8xL2ZvNEpjazlITG5ab25HSGNw Z3A4WkI4cXlQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCuQKQAwQCuXnQAwQAubNnAwQF1CtgMA0EAgAC MAcDBQMqABvgMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlIqAgMDIM0wDQYJKoZI hvcNAQELBQADggEBAAcXkLqBS7py7+dNtwZT10XyoQQpKvfVGkqavIO5TsWqdxdB Vq8VKOGYQPhJeTWBksOvn/ovbj8l72Ky2kKnNI3Z9UGnGYBMyTkMcQO/acOLI4BX D9nUW4d9tBtq4CbFIUxwRkhB9Ev8/ad4iQlYgNruiov9jS/KcJgMEIt7ydykdP3B aOLLrd9KA99f8hFpXxu34s3ABU0MpLuoyq8ag2QAdJ22GYzNt+dxJQ3ZQDH/CmVN isRszov+AutbrY5RMzTFM3SdrZur0rNVPKoSYkGYN1zH3CootP1+f4qpLA5qt8sU VmhQyneDpy39JyOsyZZNgZytqjIG8GWkVzwraUw= -----END CERTIFICATE-----Generated at Mon Jan 26 16:56:23 2026 by rpki-client