This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer File: 1-89zN262Px3PsnBAK_3PMDH12CU.cer (raw, json) Hash identifier: 6MYjh6HZIOqJFGH3DwWEHR2XJzHoeY7kmj7ynoTapfE= Subject key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAECB4EBA8A8A0EF447D1273F8BD4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15641 IP: 87.249.64.0/19 IP: 91.209.68.0/24 IP: 91.209.90.0/24 IP: 91.209.99.0 -- 91.209.100.255 IP: 217.10.160.0/19 IP: 217.175.64.0/20 IP: 2a02:b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:b4:eb:a8:a8:a0:ef:44:7d:12:73:f8:bd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:ad:2e:68:ac:30:a6:d8:78:0f:19:22:88: 08:9c:49:4a:f5:f1:d8:20:88:c8:88:9e:f1:1d:7c: 77:a9:f0:f7:3c:da:f1:da:94:47:b2:06:07:9b:8a: 6a:e7:51:4d:59:a3:1c:4c:2b:f6:14:ac:e3:82:78: 22:a5:9c:d8:51:48:0a:76:86:97:b9:63:4f:13:04: 9b:98:13:0e:df:50:73:82:37:69:e6:16:4d:60:69: ae:d0:26:7a:ab:29:a4:11:2a:46:81:0f:38:ec:ea: c8:80:b0:34:c6:0b:47:58:84:75:f2:43:ca:98:15: b1:7c:15:d5:25:48:92:95:c8:6a:69:1c:f4:2e:81: 71:8c:88:38:39:d1:44:87:a1:ee:09:f9:fb:62:ae: 2a:3f:0a:01:73:5c:2a:33:e0:d9:0c:fb:2f:3e:e4: 58:46:be:75:fd:8d:d8:73:cb:0e:ab:b5:20:92:e2: 59:07:11:ef:92:9c:87:19:9d:cf:0c:1b:fd:fa:ec: 58:e7:cf:97:84:f4:ef:5c:2c:1e:3b:a3:1c:5b:79: a2:e5:78:b2:d0:ed:0b:77:e5:2b:41:3f:76:89:df: 53:50:b0:7a:35:9a:18:7f:5d:8c:07:7c:bf:4f:2a: 21:6f:d9:a9:df:28:00:64:e4:9d:4d:bb:f8:ff:c0: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.249.64.0/19 91.209.68.0/24 91.209.90.0/24 91.209.99.0-91.209.100.255 217.10.160.0/19 217.175.64.0/20 IPv6: 2a02:b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15641 Signature Algorithm: sha256WithRSAEncryption 48:61:02:5a:26:60:a1:34:61:08:a0:69:e5:03:6b:c5:c8:20: 8f:13:32:0b:98:d9:ed:87:bc:a4:e5:5f:fa:a9:95:68:ec:c8: 2b:d3:19:f9:33:9d:ca:e8:77:38:40:8d:3e:da:f4:d6:e2:48: af:a5:4e:81:20:8d:50:82:8c:28:de:ce:47:ac:c1:2a:36:a2: 3a:fd:75:a5:b7:0c:56:f1:26:b6:24:f0:47:c6:20:c3:60:42: 5b:56:c2:10:50:c6:88:f1:75:d9:31:2e:b8:91:73:e2:d8:aa: c4:de:fa:cb:88:b7:ac:04:ff:90:0f:48:b3:dd:8d:ac:52:86: 14:8b:08:f5:ce:d2:05:02:00:e0:fb:38:2b:37:7e:54:d2:a7: 8a:a3:55:15:7d:74:b7:b0:ba:e7:7d:bb:0b:b7:79:8e:b7:51: 1c:a6:42:e1:36:da:9b:df:83:07:43:e8:d8:de:96:b7:8b:13: 09:b5:6c:0d:1b:fd:de:b1:c1:d7:86:28:38:81:f1:ed:0c:62: 74:78:2b:71:b5:48:ac:9a:80:6e:19:8b:30:05:04:39:77:ec: d3:13:48:2d:e6:91:07:46:d2:19:96:1d:ad:f8:ba:3e:16:0d: 76:c8:8c:04:5e:f1:14:65:a1:ce:57:1b:b1:7b:44:69:f7:33: 69:86:38:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt9yuy066iooO9EfRJz+L1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNmNzMzNzZlYjYzZjFkY2ZiMjcwNDAyYmZkY2YzMDMxZjVkODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+tLmisMKbYeA8ZIogInElK9fHY IIjIiJ7xHXx3qfD3PNrx2pRHsgYHm4pq51FNWaMcTCv2FKzjgngipZzYUUgKdoaX uWNPEwSbmBMO31Bzgjdp5hZNYGmu0CZ6qymkESpGgQ847OrIgLA0xgtHWIR18kPK mBWxfBXVJUiSlchqaRz0LoFxjIg4OdFEh6HuCfn7Yq4qPwoBc1wqM+DZDPsvPuRY Rr51/Y3Yc8sOq7UgkuJZBxHvkpyHGZ3PDBv9+uxY58+XhPTvXCweO6McW3mi5Xiy 0O0Ld+UrQT92id9TULB6NZoYf12MB3y/Tyohb9mp3ygAZOSdTbv4/8CHtwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFPvPczdutj8dz7JwQCv9zzAx9dglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzYyNjJi My1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5ZTMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIz LWY1Y2MtNDg2OC04YjIxLTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJB S18zUE1ESDEyQ1UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEF BQcBBwEB/wRFMEMwMgQCAAEwLAMEBVf5QAMEAFvRRAMEAFvRWjAMAwQAW9FjAwQA W9FkAwQF2QqgAwQE2a9AMA0EAgACMAcDBQAqAgsAMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAj0ZMA0GCSqGSIb3DQEBCwUAA4IBAQBIYQJaJmChNGEIoGnlA2vFyCCP EzILmNnth7yk5V/6qZVo7Mgr0xn5M53K6Hc4QI0+2vTW4kivpU6BII1Qgowo3s5H rMEqNqI6/XWltwxW8Sa2JPBHxiDDYEJbVsIQUMaI8XXZMS64kXPi2KrE3vrLiLes BP+QD0iz3Y2sUoYUiwj1ztIFAgDg+zgrN35U0qeKo1UVfXS3sLrnfbsLt3mOt1Ec pkLhNtqb34MHQ+jY3pa3ixMJtWwNG/3escHXhig4gfHtDGJ0eCtxtUismoBuGYsw BQQ5d+zTE0gt5pEHRtIZlh2t+Lo+Fg12yIwEXvEUZaHOVxuxe0Rp9zNphjgP -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:51 2026 by rpki-client