This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer (raw, json) Hash identifier: gP5eRAyIvboLV1pLOQk2VfEj9r84PnovCTuheP7Jq4Q= Subject key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834328F11E61135F73DF1E92E76326E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41906 IP: 185.88.116.0/22 IP: 2a05:ca40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:32:8f:11:e6:11:35:f7:3d:f1:e9:2e:76:32:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:90:01:53:9a:13:fa:13:23:41:9b:3e:ab: 71:18:a4:0b:f7:0b:ea:91:9a:1b:a4:24:b1:95:19: 35:bb:1b:8c:c2:2a:fa:14:9f:bb:ef:fc:58:bb:90: 9b:78:bb:4b:18:66:51:fa:76:24:e0:36:f7:66:75: 5e:29:1a:cd:47:f5:99:92:0a:6b:16:6a:0b:98:51: 5a:56:a5:7e:07:8a:ac:99:6f:fd:71:ab:17:f0:81: 37:a9:15:c9:d7:58:42:24:20:93:d9:55:c3:8a:a9: 30:20:f1:51:1c:12:3e:1e:fe:dc:2b:f0:56:5d:3b: 0e:ff:c2:02:65:0c:56:0e:14:fa:c9:31:5c:5f:46: ec:bd:d9:d8:09:c5:31:c7:4e:8f:24:79:85:b1:28: 1d:19:86:2d:39:97:1e:ee:6b:ac:00:c3:c3:9e:60: 38:45:d5:e1:3d:0d:06:79:76:ad:64:76:77:70:73: 97:d3:4b:7d:0d:6b:29:6e:c1:e2:7e:49:fe:7b:b7: c3:d9:a1:17:b6:dd:b8:92:e4:5b:dc:82:99:0c:d5: a2:45:6c:18:4b:c9:41:1d:c6:19:14:88:34:de:17: 67:af:f0:d6:02:56:72:8f:47:4f:78:88:ae:5d:61: 68:fb:b0:65:9f:be:cd:40:9c:12:10:5b:bd:5a:3e: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.116.0/22 IPv6: 2a05:ca40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41906 Signature Algorithm: sha256WithRSAEncryption 8f:f3:a4:01:df:02:4c:46:97:46:43:fb:e4:20:39:54:88:3d: 9a:c5:52:7c:4e:8a:9b:35:14:ac:e8:41:16:7d:f1:0c:1f:f8: 0d:09:e3:58:65:f9:83:e7:c9:1a:18:32:5a:d7:3d:ac:2e:11: d7:7b:c9:e2:0d:47:25:26:9a:2b:ce:c3:0c:94:f9:62:46:15: 19:c5:09:38:4c:1b:4a:8c:6e:bd:bf:0a:11:10:b0:28:84:a3: cd:61:56:c2:f8:8c:50:eb:e1:8a:dd:8c:2e:7e:de:e9:bb:cf: 15:63:40:41:d0:58:0f:f9:7d:da:3a:47:3a:37:c5:f9:93:13: 69:69:15:a2:87:7a:97:e9:39:05:28:86:e2:06:0b:b6:4b:32: 5c:80:16:f6:65:c6:3a:e9:b8:2b:5c:b3:b0:b4:d4:23:6f:bb: e2:a8:1b:e6:14:3f:07:a0:f8:9e:29:a7:b2:57:3e:a2:4c:30: 02:19:d8:8f:c5:4f:57:3b:61:7b:06:fb:8f:e3:19:30:16:aa: ad:64:6b:dd:ef:ee:82:78:63:b3:ba:ec:bb:1a:31:6e:67:26: c5:77:bb:44:73:6d:d2:01:df:29:1e:7f:d4:41:14:33:48:e9: a9:57:fe:f0:6e:de:ff:14:2f:f4:54:90:f4:95:5a:de:bf:bf: e1:76:80:c4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NDKPEeYRNfc98ekudjJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDVhODVjNDViZjUzYzNkODhhNzY2OTVhYWZlYmJkNGFhNzdiYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGeQAVOaE/oTI0GbPqtxGKQL9wvq kZobpCSxlRk1uxuMwir6FJ+77/xYu5CbeLtLGGZR+nYk4Db3ZnVeKRrNR/WZkgpr FmoLmFFaVqV+B4qsmW/9casX8IE3qRXJ11hCJCCT2VXDiqkwIPFRHBI+Hv7cK/BW XTsO/8ICZQxWDhT6yTFcX0bsvdnYCcUxx06PJHmFsSgdGYYtOZce7musAMPDnmA4 RdXhPQ0GeXatZHZ3cHOX00t9DWspbsHifkn+e7fD2aEXtt24kuRb3IKZDNWiRWwY S8lBHcYZFIg03hdnr/DWAlZyj0dPeIiuXWFo+7Bln77NQJwSEFu9Wj6ciwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNBahcRb9Tw9iKdmlar+u9Sqd7vBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzU0OTQ3 Ny00YTgyLTQyYmMtODM5ZS00Zjk4NDBkZWZhMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNTQ5NDc3 LTRhODItNDJiYy04MzllLTRmOTg0MGRlZmExZi8xLzBGcUZ4RnYxUEQySXAyYVZx djY3MUtwM3U4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVh0MA0EAgACMAcDBQMqBcpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCjsjANBgkqhkiG9w0BAQsFAAOCAQEAj/OkAd8CTEaX RkP75CA5VIg9msVSfE6KmzUUrOhBFn3xDB/4DQnjWGX5g+fJGhgyWtc9rC4R13vJ 4g1HJSaaK87DDJT5YkYVGcUJOEwbSoxuvb8KERCwKISjzWFWwviMUOvhit2MLn7e 6bvPFWNAQdBYD/l92jpHOjfF+ZMTaWkVood6l+k5BSiG4gYLtksyXIAW9mXGOum4 K1yzsLTUI2+74qgb5hQ/B6D4nimnslc+okwwAhnYj8VPVzthewb7j+MZMBaqrWRr 3e/ugnhjs7rsuxoxbmcmxXe7RHNt0gHfKR5/1EEUM0jpqVf+8G7e/xQv9FSQ9JVa 3r+/4XaAxA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:41 2026 by rpki-client