This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer File: FFAQ3dLG97ZEpQAsseTuFixj0dc.cer (raw, json) Hash identifier: 0CBeDyLGFndVLxKz8CbTHAYbXdLAKiECJU0FIQrDQG0= Subject key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1F08D38BA6E84C70DE0AF521D114A8E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 15:46:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200784 AS: 207230 IP: 45.66.96.0/22 IP: 195.184.244.0/24 IP: 2a04:4b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:08:d3:8b:a6:e8:4c:70:de:0a:f5:21:d1:14:a8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 15:46:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:79:c0:fc:a7:55:0f:08:b7:b5:5a:05:ed: 80:00:20:ae:7b:53:23:f0:cd:46:69:43:10:18:f6: 56:72:8b:3c:4f:6f:af:14:f0:fe:81:21:73:74:47: b0:6d:54:ec:59:77:ff:10:ad:fa:bd:de:36:c8:40: c5:41:5f:51:cd:f2:b0:7a:63:36:d5:6b:b0:07:20: b9:34:07:b2:35:1a:3b:dc:5a:38:85:1a:c0:dd:18: ad:ab:59:24:6e:94:5f:7b:aa:11:51:fc:f2:82:8d: d1:8d:82:51:93:23:1f:12:82:70:63:82:f0:74:01: 01:df:90:f1:c7:07:29:8d:cc:ef:89:a9:34:a1:a3: b0:59:b2:63:60:e2:32:f8:47:9d:91:51:47:00:88: 37:88:2f:ca:34:b8:ea:1e:9c:5a:5a:fe:76:68:8a: 75:a6:c7:ac:4b:1f:49:00:57:33:b0:7d:f5:7c:3b: f7:f2:8d:c2:df:9b:c9:6c:69:84:79:4c:75:a0:b1: a4:eb:d6:1b:c7:c4:7f:90:ac:00:48:2a:32:d5:7d: 49:9c:17:71:0e:1a:94:35:d8:96:1b:83:83:4c:63: 4a:40:6a:58:9e:4c:df:91:a4:ab:00:19:c5:da:d8: 8d:72:cc:6e:37:10:14:51:26:55:00:15:80:80:99: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.96.0/22 195.184.244.0/24 IPv6: 2a04:4b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200784 207230 Signature Algorithm: sha256WithRSAEncryption 5b:1c:20:71:96:23:0a:72:67:dc:54:f8:54:7f:df:a9:6c:7a: 7e:d5:a4:c4:b0:7d:bd:fc:9c:80:79:8a:42:83:e3:eb:ec:69: fe:84:ca:9b:5a:d9:f2:39:13:cd:83:49:11:c5:43:e9:4b:78: bb:3c:a7:e9:4f:df:5b:66:6f:df:f8:56:a5:b2:63:53:85:5f: e1:a4:9f:46:c0:04:2b:a9:ec:cb:32:38:4d:a5:4c:e1:0f:86: e0:5c:21:bd:bd:25:3a:9a:0b:29:6a:bf:35:28:57:62:1f:c4: 7c:be:a5:d0:9f:55:d2:88:49:26:21:bc:7d:35:83:b3:1c:b2: 7e:fd:2c:10:3b:00:d7:53:ed:e2:07:24:60:44:ff:66:14:2a: 6c:99:d0:d4:ea:32:e8:41:ad:c6:0e:e9:87:5d:65:12:3c:55: af:9d:89:ac:55:8d:7a:2a:38:e7:19:4c:a0:31:a7:e2:32:c8: 5f:11:6c:9d:8a:4d:e5:10:11:31:7f:b5:45:dc:d5:7e:e9:aa: dd:c6:09:eb:a0:3d:7f:a5:02:70:e1:eb:9d:33:97:ac:29:9b: 20:43:b8:82:17:f8:01:0a:be:41:47:df:55:f5:d6:30:ca:b9: 4d:51:f8:80:06:9d:4c:a0:ee:5f:92:da:eb:49:9d:1b:4e:e2: e0:fa:50:33 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZwfCNOLpuhMcN4K9SHRFKjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTU0NjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDUwMTBkZGQyYzZmN2I2NDRhNTAwMmNiMWU0ZWUxNjJjNjNkMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfx5wPynVQ8It7VaBe2AACCue1Mj 8M1GaUMQGPZWcos8T2+vFPD+gSFzdEewbVTsWXf/EK36vd42yEDFQV9RzfKwemM2 1WuwByC5NAeyNRo73Fo4hRrA3Ritq1kkbpRfe6oRUfzygo3RjYJRkyMfEoJwY4Lw dAEB35Dxxwcpjczviak0oaOwWbJjYOIy+EedkVFHAIg3iC/KNLjqHpxaWv52aIp1 psesSx9JAFczsH31fDv38o3C35vJbGmEeUx1oLGk69Ybx8R/kKwASCoy1X1JnBdx DhqUNdiWG4ODTGNKQGpYnkzfkaSrABnF2tiNcsxuNxAUUSZVABWAgJlKUwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFBRQEN3Sxve2RKUALLHk7hYsY9HXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2I5ZGIw ZS1mODU2LTQ0NmEtODRmOC02NmRmZjYwOTUwZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYjlkYjBl LWY4NTYtNDQ2YS04NGY4LTY2ZGZmNjA5NTBkYS8xL0ZGQVEzZExHOTdaRXBRQXNz ZVR1Rml4ajBkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLUJgAwQAw7j0MA0EAgACMAcDBQMqBEtAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMQUAIDAyl+MA0GCSqGSIb3DQEBCwUAA4IB AQBbHCBxliMKcmfcVPhUf9+pbHp+1aTEsH29/JyAeYpCg+Pr7Gn+hMqbWtnyORPN g0kRxUPpS3i7PKfpT99bZm/f+FalsmNThV/hpJ9GwAQrqezLMjhNpUzhD4bgXCG9 vSU6mgspar81KFdiH8R8vqXQn1XSiEkmIbx9NYOzHLJ+/SwQOwDXU+3iByRgRP9m FCpsmdDU6jLoQa3GDumHXWUSPFWvnYmsVY16KjjnGUygMafiMshfEWydik3lEBEx f7VF3NV+6ardxgnroD1/pQJw4eudM5esKZsgQ7iCF/gBCr5BR99V9dYwyrlNUfiA Bp1MoO5fktrrSZ0bTuLg+lAz -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:52 2026 by rpki-client