This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer File: 0fbkNwERz7-WhASFQie4CShRRQ0.cer (raw, json) Hash identifier: mp6viHlk7H1GxwOC5fvKO5Bhb1O00T/33S3UBPQrHtQ= Subject key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783492E4508A2FDBF0C188DFD44ECD76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.1.184.0/21 IP: 185.21.0.0/22 IP: 2a00:4ba0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:92:e4:50:8a:2f:db:f0:c1:88:df:d4:4e:cd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f6e4370111cfbf968404854227b8092851450d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:1a:cf:1f:5d:c8:d9:1d:3b:5a:43:03:94: 5c:3c:6a:ad:35:4c:b4:0e:3e:d8:24:6a:4c:42:bb: 55:77:a5:15:fe:1f:4f:67:55:02:6c:c2:90:cb:75: 3d:5e:8f:2e:66:36:6d:6a:2d:94:b0:2f:a7:0a:88: 4a:8d:05:e3:6a:4b:ac:d6:b5:fd:5e:22:72:8d:91: 7a:f9:05:77:eb:70:b8:72:4c:a2:86:e9:91:bd:25: 8b:06:aa:8a:dd:91:7a:7b:ca:22:36:6f:db:7a:d9: df:51:6c:ea:fb:74:d1:fc:fe:72:fc:e7:23:b2:9b: 86:59:0c:0c:b4:ff:90:82:16:68:d6:07:29:fd:c7: 23:e9:9f:73:db:9d:bb:bc:2f:fc:ec:7e:74:9a:73: 24:f1:4b:16:2d:b1:45:b2:cf:7d:ad:ca:76:96:aa: d4:2c:f6:44:05:8b:c5:bc:19:92:16:9a:d7:39:7c: 92:fc:f6:de:0b:ac:d3:dc:da:48:37:45:ce:18:a9: 72:2f:2f:02:fc:7a:95:20:41:0c:3b:ac:1a:44:b9: e8:bb:c5:6e:09:30:9b:a0:c3:d3:05:da:3f:d7:86: ef:2c:5b:87:90:07:53:c8:51:63:2f:74:b0:08:c2: af:ac:53:fa:7d:42:ab:88:03:cd:a4:f5:58:71:66: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.184.0/21 185.21.0.0/22 IPv6: 2a00:4ba0::/32 Signature Algorithm: sha256WithRSAEncryption 17:fd:be:8d:ed:dd:69:cd:de:ae:60:7b:f8:7b:52:9a:17:04: d5:11:14:f0:37:8c:67:ef:10:dc:9e:7c:af:78:5c:0f:d5:98: 2c:f9:e5:77:e4:03:49:4c:4b:b4:3d:8f:74:0e:1b:c6:de:81: e7:4e:2b:e1:8d:44:d7:b8:85:fd:ea:53:f8:05:fa:a5:e8:eb: 8c:5b:e9:92:29:ad:f1:d3:1c:af:5e:19:ad:aa:df:2e:78:13: 01:6e:0c:40:31:1a:0e:53:f1:fd:05:63:ba:0a:bd:97:86:93: ed:96:49:5a:a5:d6:66:94:ee:26:ac:e6:c2:c2:21:f5:c2:a8: dd:8a:f8:23:eb:13:6f:41:65:a8:25:34:d8:35:f2:32:f5:b1: 8a:3c:a8:78:9e:8e:37:05:10:25:07:ae:8c:8a:01:7c:56:91: 93:86:46:44:41:b5:4c:55:cc:52:71:12:cd:6b:07:58:e3:3f: 1c:fe:34:ac:7b:e8:70:47:9f:70:a4:43:c6:6d:10:4d:46:be: 57:87:33:6e:1e:b5:07:ee:6e:73:f7:9c:e9:5a:f8:73:cf:a7: 19:58:36:37:f4:df:24:a9:3f:b8:38:4f:e9:a8:ee:a8:fa:49: cf:df:a7:cb:32:37:ed:b2:c5:87:6e:e5:24:ec:ba:42:7e:05: 8e:99:9d:20 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt4NJLkUIov2/DBiN/UTs12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWY2ZTQzNzAxMTFjZmJmOTY4NDA0ODU0MjI3YjgwOTI4NTE0NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHUazx9dyNkdO1pDA5RcPGqtNUy0 Dj7YJGpMQrtVd6UV/h9PZ1UCbMKQy3U9Xo8uZjZtai2UsC+nCohKjQXjakus1rX9 XiJyjZF6+QV363C4ckyihumRvSWLBqqK3ZF6e8oiNm/betnfUWzq+3TR/P5y/Ocj spuGWQwMtP+QghZo1gcp/ccj6Z9z2527vC/87H50mnMk8UsWLbFFss99rcp2lqrU LPZEBYvFvBmSFprXOXyS/PbeC6zT3NpIN0XOGKlyLy8C/HqVIEEMO6waRLnou8Vu CTCboMPTBdo/14bvLFuHkAdTyFFjL3SwCMKvrFP6fUKriAPNpPVYcWYGsQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFNH25DcBEc+/loQEhUInuAkoUUUNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzU5ZDRl OS02NjJjLTQzNWEtYjM1MS00YWE1MzlhMzBkMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNTlkNGU5 LTY2MmMtNDM1YS1iMzUxLTRhYTUzOWEzMGQyMS8xLzBmYmtOd0VSejctV2hBU0ZR aWU0Q1NoUlJRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJQG4AwQCuRUAMA0EAgACMAcDBQAqAEugMA0G CSqGSIb3DQEBCwUAA4IBAQAX/b6N7d1pzd6uYHv4e1KaFwTVERTwN4xn7xDcnnyv eFwP1Zgs+eV35ANJTEu0PY90DhvG3oHnTivhjUTXuIX96lP4Bfql6OuMW+mSKa3x 0xyvXhmtqt8ueBMBbgxAMRoOU/H9BWO6Cr2XhpPtlklapdZmlO4mrObCwiH1wqjd ivgj6xNvQWWoJTTYNfIy9bGKPKh4no43BRAlB66MigF8VpGThkZEQbVMVcxScRLN awdY4z8c/jSse+hwR59wpEPGbRBNRr5XhzNuHrUH7m5z95zpWvhzz6cZWDY39N8k qT+4OE/pqO6o+knP36fLMjftssWHbuUk7LpCfgWOmZ0g -----END CERTIFICATE-----Generated at Tue Jan 27 06:10:56 2026 by rpki-client