This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer File: fpBL1x1v50pnFo_ZE-gocidVtJQ.cer (raw, json) Hash identifier: LM/BonoAFZIKcv6tOxYDeH+NTDLrFx9F6ee0B0OBEp4= Subject key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9201E445647C4947D7AF8F4B1988780B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 06:32:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62159 IP: 185.133.56.0/22 IP: 2001:67c:19c4::/48 IP: 2a06:e3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:01:e4:45:64:7c:49:47:d7:af:8f:4b:19:88:78:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 06:32:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e904bd71d6fe74a67168fd913e828722755b494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:bb:af:30:7a:51:95:7e:0c:d7:37:b7:43: 30:3b:fb:c1:85:33:ff:93:e0:62:07:a0:2a:72:ab: 39:ce:a7:e2:2b:20:35:07:54:3e:1a:73:6d:27:d6: 14:45:ca:e5:cf:9e:f0:03:f7:6c:14:77:3e:af:cd: 89:c7:ce:83:98:8d:3b:92:1b:a9:90:3d:16:11:e3: 2d:6e:7f:6b:42:b4:49:a5:36:b9:b6:04:79:99:59: 77:74:fb:94:1e:ff:17:3e:4f:8c:09:d9:03:5f:fb: 18:12:d1:53:4a:6c:dc:f3:78:1d:9c:73:ef:2b:aa: cc:99:e7:b0:c3:a2:aa:ff:83:22:9b:23:30:2a:7c: 60:4b:0a:5f:96:fb:99:34:7a:11:55:0b:9f:b3:3c: 4e:b0:90:c8:f7:70:88:77:4d:f1:28:35:a1:e6:fd: 58:59:ea:c8:d4:04:81:c0:10:54:f4:7d:a1:1c:df: 57:0b:b8:ef:95:ea:9a:22:1b:b5:7b:5c:16:21:9c: 9f:ec:c4:3d:db:82:44:8c:bf:ac:35:46:66:0f:23: 05:1c:82:9a:aa:2a:61:e1:88:49:ce:6d:f2:36:72: 46:ee:54:02:2d:62:21:99:88:ec:b6:44:e4:b8:3a: 95:50:c7:4c:eb:60:de:dc:64:69:cc:dc:3e:89:0f: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.56.0/22 IPv6: 2001:67c:19c4::/48 2a06:e3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62159 Signature Algorithm: sha256WithRSAEncryption b0:c9:78:66:de:3f:c2:2a:4c:a0:f7:64:cb:59:0c:ff:35:04: e6:bf:ed:b8:ff:45:97:c4:20:55:54:dc:02:60:12:a9:9d:d0: 87:18:e4:d5:2e:7b:92:0b:55:57:b0:eb:8c:e7:14:28:84:66: 30:ec:5f:b1:49:50:bf:6c:0d:bd:2a:4a:bc:47:0f:06:db:34: 01:65:cb:8f:82:eb:5c:f4:6b:66:d0:21:40:e5:ce:95:60:76: 17:77:14:cc:62:23:c5:db:c5:96:0c:6a:c5:50:b6:01:94:5f: 7b:44:9a:93:40:08:af:aa:57:ba:aa:58:4b:3f:65:e9:65:42: 58:f0:d5:63:60:30:1b:33:13:53:54:0c:56:5b:12:5f:59:84: 93:52:8c:b7:82:60:6a:6c:b3:f1:60:3f:1f:38:2e:63:f9:ec: 94:9a:da:8f:7e:28:af:02:53:aa:23:fa:3b:b6:5a:02:f5:b0: 5e:6f:25:0e:ee:d0:de:09:3e:84:ab:65:39:e6:dd:93:76:1e: fc:ae:14:53:80:c8:71:0b:71:10:e0:52:4a:3c:2d:18:fe:23: 1a:ce:b6:05:9e:fb:9d:62:59:ac:c9:ef:90:43:e9:e4:38:e7: 72:db:97:ac:f9:d8:0d:b9:21:e3:55:c6:ae:db:c6:dd:4a:73: b7:85:0a:58 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZuSAeRFZHxJR9evj0sZiHgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MDYzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTkwNGJkNzFkNmZlNzRhNjcxNjhmZDkxM2U4Mjg3MjI3NTViNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dy7rzB6UZV+DNc3t0MwO/vBhTP/ k+BiB6Aqcqs5zqfiKyA1B1Q+GnNtJ9YURcrlz57wA/dsFHc+r82Jx86DmI07khup kD0WEeMtbn9rQrRJpTa5tgR5mVl3dPuUHv8XPk+MCdkDX/sYEtFTSmzc83gdnHPv K6rMmeeww6Kq/4MimyMwKnxgSwpflvuZNHoRVQufszxOsJDI93CId03xKDWh5v1Y WerI1ASBwBBU9H2hHN9XC7jvleqaIhu1e1wWIZyf7MQ924JEjL+sNUZmDyMFHIKa qiph4YhJzm3yNnJG7lQCLWIhmYjstkTkuDqVUMdM62De3GRpzNw+iQ9hVQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFH6QS9cdb+dKZxaP2RPoKHInVbSUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzJmMTI2 NC0yM2U4LTQyZTAtODM2NC00ZjM4MmNiYjU5ZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMmYxMjY0 LTIzZTgtNDJlMC04MzY0LTRmMzgyY2JiNTlmMi8xL2ZwQkwxeDF2NTBwbkZvX1pF LWdvY2lkVnRKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQCuYU4MBYEAgACMBADBwAgAQZ8GcQDBQMqBuPA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyzzANBgkqhkiG9w0BAQsFAAOCAQEA sMl4Zt4/wipMoPdky1kM/zUE5r/tuP9Fl8QgVVTcAmASqZ3Qhxjk1S57kgtVV7Dr jOcUKIRmMOxfsUlQv2wNvSpKvEcPBts0AWXLj4LrXPRrZtAhQOXOlWB2F3cUzGIj xdvFlgxqxVC2AZRfe0Sak0AIr6pXuqpYSz9l6WVCWPDVY2AwGzMTU1QMVlsSX1mE k1KMt4Jgamyz8WA/HzguY/nslJraj34orwJTqiP6O7ZaAvWwXm8lDu7Q3gk+hKtl Oebdk3Ye/K4UU4DIcQtxEOBSSjwtGP4jGs62BZ77nWJZrMnvkEPp5DjnctuXrPnY Dbkh41XGrtvG3Upzt4UKWA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:52:59 2026 by rpki-client