This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer File: fx0OMpi-06fzn7OyRO2Ri_bE178.cer (raw, json) Hash identifier: 1wy0K2jlATa279VWDzFVrbxWyI2pcYOQqOfKsCppw9I= Subject key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD13B75F55FEE099794627300491E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.58.156.0/22 IP: 194.24.232.0/23 IP: 194.24.250.0/23 IP: 217.195.144.0/22 IP: 2a06:2340::/29 IP: 2a09:e740::/29 IP: 2a0d:9e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d1:3b:75:f5:5f:ee:09:97:94:62:73:00:49:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:6f:1d:55:98:c9:a9:d4:e7:29:d4:aa:2f: fd:3d:26:c1:67:93:0b:d0:40:91:cc:3c:82:73:a9: 82:90:95:26:8b:36:11:7c:36:21:9f:36:b3:d0:e6: a3:a0:0a:b2:78:61:dd:b7:23:6c:9d:f2:57:8f:16: e8:6d:00:8d:09:55:3b:ba:80:4d:a7:d1:c5:1f:99: c3:0f:af:3a:1a:70:c0:cd:5b:e0:47:3f:db:1b:3f: 73:d7:ad:0b:54:b3:88:55:25:7a:82:79:50:a8:00: 91:f6:64:99:08:ba:d0:e5:33:fe:7a:9c:88:33:4b: 94:e5:06:db:a7:21:ff:83:28:9e:a2:87:82:1b:bd: 53:ea:00:04:66:ae:21:db:39:ba:30:ec:38:ec:d2: 97:82:fa:9e:2b:52:5d:df:0d:98:4f:a0:ce:b0:b9: 47:f1:93:7d:dd:2b:b1:9d:64:76:a7:6d:41:6d:d8: 2f:d9:b5:5f:71:d2:83:bf:97:58:1f:80:ba:ed:3b: 4f:0f:72:52:f4:91:47:61:11:f0:90:da:21:c6:38: cf:0d:1b:7a:2e:12:06:58:41:66:7f:10:94:c5:61: 29:15:5b:bb:63:6f:35:86:de:2d:98:d9:c7:fe:29: 5d:ef:27:74:39:87:d3:7a:ef:45:41:f1:2b:b4:00: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.156.0/22 194.24.232.0/23 194.24.250.0/23 217.195.144.0/22 IPv6: 2a06:2340::/29 2a09:e740::/29 2a0d:9e40::/29 Signature Algorithm: sha256WithRSAEncryption 55:5f:ca:8e:05:1e:e5:f5:7a:1a:6a:79:26:3b:6f:73:9a:61: 1f:fc:e0:3c:02:53:4e:85:f6:e3:2a:ed:0d:a4:8d:04:b7:ca: 5c:a7:01:03:d8:e8:53:15:e4:81:da:28:97:01:5a:0d:90:4d: 0a:31:87:84:27:23:49:e3:94:8b:9a:cb:e6:aa:97:68:f1:92: 40:c2:4f:ec:8c:e1:2d:1d:c5:d8:13:5b:db:35:9e:06:b0:aa: ea:4a:fa:b0:ff:71:8d:ad:a6:9f:4e:c6:22:23:f0:cb:b4:5a: 48:c1:96:60:02:d9:12:82:6b:52:2b:b3:61:9f:f2:e8:ed:7d: 8b:04:0e:4b:22:8c:3e:96:ee:77:02:cd:6c:e6:2d:72:22:27: 7f:6b:6c:f8:6e:48:a6:d5:e9:79:c7:ca:fe:b7:18:23:8f:1c: b8:e6:41:f0:21:3f:50:46:23:b7:fc:1d:5d:2a:4a:2d:d7:38: a9:24:46:00:1c:ab:10:0e:49:2f:4b:83:3f:b0:7f:95:01:1c: 16:d9:82:5d:83:58:7b:b3:60:e3:1d:d5:d0:1e:bd:cf:54:d1: f2:d7:ef:b1:4f:42:f1:8a:cf:b0:cc:87:73:a8:66:36:7c:0e: 6c:3c:c4:2c:de:7f:a8:04:45:7b:b8:b5:ec:a7:52:4e:58:f3: 3d:45:09:8a -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt8f9E7dfVf7gmXlGJzAEkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjFkMGUzMjk4YmVkM2E3ZjM5ZmIzYjI0NGVkOTE4YmY2YzRkN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZhvHVWYyanU5ynUqi/9PSbBZ5ML 0ECRzDyCc6mCkJUmizYRfDYhnzaz0OajoAqyeGHdtyNsnfJXjxbobQCNCVU7uoBN p9HFH5nDD686GnDAzVvgRz/bGz9z160LVLOIVSV6gnlQqACR9mSZCLrQ5TP+epyI M0uU5QbbpyH/gyieooeCG71T6gAEZq4h2zm6MOw47NKXgvqeK1Jd3w2YT6DOsLlH 8ZN93SuxnWR2p21Bbdgv2bVfcdKDv5dYH4C67TtPD3JS9JFHYRHwkNohxjjPDRt6 LhIGWEFmfxCUxWEpFVu7Y281ht4tmNnH/ild7yd0OYfTeu9FQfErtAA3mQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFH8dDjKYvtOn85+zskTtkYv2xNe/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2U2NTA2 ZS03Njg1LTQ4ZTctYTU4My0yMWFmM2RlZThlZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZTY1MDZl LTc2ODUtNDhlNy1hNTgzLTIxYWYzZGVlOGVlOS8xL2Z4ME9NcGktMDZmem43T3lS TzJSaV9iRTE3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCAjqcAwQBwhjoAwQBwhj6AwQC2cOQMBsEAgAC MBUDBQMqBiNAAwUDKgnnQAMFAyoNnkAwDQYJKoZIhvcNAQELBQADggEBAFVfyo4F HuX1ehpqeSY7b3OaYR/84DwCU06F9uMq7Q2kjQS3ylynAQPY6FMV5IHaKJcBWg2Q TQoxh4QnI0njlIuay+aql2jxkkDCT+yM4S0dxdgTW9s1ngawqupK+rD/cY2tpp9O xiIj8Mu0WkjBlmAC2RKCa1Irs2Gf8ujtfYsEDksijD6W7ncCzWzmLXIiJ39rbPhu SKbV6XnHyv63GCOPHLjmQfAhP1BGI7f8HV0qSi3XOKkkRgAcqxAOSS9Lgz+wf5UB HBbZgl2DWHuzYOMd1dAevc9U0fLX77FPQvGKz7DMh3OoZjZ8Dmw8xCzef6gERXu4 teynUk5Y8z1FCYo= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:20 2026 by rpki-client