This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer File: FFXKMFkjEziJJe4UQQCa0x1LtB8.cer (raw, json) Hash identifier: tiklBmhebp3Q1+zNbdXZEUAaKbGYalBng1K+HOKJ66s= Subject key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E4D3527DF333A95C405F5171D4927 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6898 AS: 43141 IP: 31.44.32.0/20 IP: 46.21.20.0/24 IP: 46.21.22.0/23 IP: 46.21.28.0/22 IP: 185.155.176.0/22 IP: 185.155.184.0/22 IP: 193.222.104.0/23 IP: 2a04:1580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4d:35:27:df:33:3a:95:c4:05:f5:17:1d:49:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1455ca30592313388925ee1441009ad31d4bb41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:59:29:9f:cd:7b:6e:cf:b7:ac:81:8f:d1: 2a:9b:e7:0e:0b:2a:87:ea:63:c6:26:e9:b3:c7:b6: 1c:11:1e:8a:9e:bb:25:4b:23:7c:39:8c:0f:69:b3: ed:14:6c:0f:37:b3:83:7f:59:ba:8d:4d:0d:71:82: 4c:9b:92:ce:76:80:c6:af:4a:37:d6:e2:18:e6:a4: a2:77:69:3f:3c:cd:49:e9:8a:ba:a1:8e:c4:2e:56: 0a:4e:0b:5f:9a:62:3c:9d:e4:7a:f1:da:0d:d2:d3: c1:a6:b7:de:94:fa:29:3e:c6:c6:bb:0d:84:c9:16: d1:75:a6:fe:bd:05:56:18:c1:07:41:42:5c:04:c0: 9f:33:79:e2:f6:33:25:b3:5d:a0:9b:ad:7e:56:2b: c9:61:8d:60:45:ef:39:f4:f9:2c:fe:0d:cc:b9:0a: 6f:d6:37:c6:34:ae:14:3e:16:c3:9b:68:65:44:c4: bb:cd:73:ff:11:2a:02:a5:73:a9:6c:2f:62:ee:a5: 6c:49:3e:6f:85:5d:0a:af:b6:18:05:6a:cf:ee:0b: e5:22:7a:73:79:f0:b5:19:58:ea:f9:bc:9e:9f:8c: 33:44:ad:f7:3c:d8:d1:f9:aa:a1:54:a5:2f:85:31: 91:9e:d4:9a:a2:b6:fb:60:a6:a1:93:c2:54:58:c9: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.32.0/20 46.21.20.0/24 46.21.22.0/23 46.21.28.0/22 185.155.176.0/22 185.155.184.0/22 193.222.104.0/23 IPv6: 2a04:1580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6898 43141 Signature Algorithm: sha256WithRSAEncryption 9e:f1:59:e6:c2:f1:1d:a6:20:85:d8:a9:4a:72:88:44:f7:9f: 9a:d2:df:b8:04:d0:e7:5f:b1:45:45:c2:2a:5a:a2:99:c7:38: cf:ea:6e:05:dd:5e:a4:5b:d3:36:06:f7:da:b9:c6:eb:92:1c: b7:47:d3:33:f0:25:c3:d1:e2:d8:95:37:72:f1:fb:94:65:57: b8:55:b4:9e:e5:9c:3d:a1:03:a6:58:99:74:07:d0:36:df:80: 2f:17:b5:87:b9:d0:09:1d:5e:ea:f0:04:6b:1f:48:83:e8:eb: e9:d9:17:97:f2:9f:a0:26:02:3a:51:48:06:dc:e7:c8:c4:63: 3c:04:8c:b9:14:16:f2:61:c8:9f:52:72:3e:c4:cf:73:65:15: 80:a7:33:a8:62:65:ce:21:51:9d:b1:46:a8:a9:40:8a:b0:27: 05:c9:1a:78:e9:e5:83:00:c9:43:0c:bd:9d:ad:05:d0:ba:9d: 83:ca:d9:14:e2:70:fb:0d:52:0e:e4:ef:d2:a0:9c:e8:56:df: 90:a0:21:6c:a4:06:02:f4:dc:17:fc:72:cf:c5:c5:fe:e2:d1: 19:2d:25:05:7a:d1:22:08:55:ce:19:59:23:15:e3:dd:34:98: 47:5a:fb:78:12:25:20:10:9d:b2:12:a5:fa:a3:03:40:ea:a7: f5:96:4b:8c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt5fk01J98zOpXEBfUXHUknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDU1Y2EzMDU5MjMxMzM4ODkyNWVlMTQ0MTAwOWFkMzFkNGJiNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqudZKZ/Ne27Pt6yBj9Eqm+cOCyqH 6mPGJumzx7YcER6KnrslSyN8OYwPabPtFGwPN7ODf1m6jU0NcYJMm5LOdoDGr0o3 1uIY5qSid2k/PM1J6Yq6oY7ELlYKTgtfmmI8neR68doN0tPBprfelPopPsbGuw2E yRbRdab+vQVWGMEHQUJcBMCfM3ni9jMls12gm61+VivJYY1gRe859Pks/g3MuQpv 1jfGNK4UPhbDm2hlRMS7zXP/ESoCpXOpbC9i7qVsST5vhV0Kr7YYBWrP7gvlInpz efC1GVjq+byen4wzRK33PNjR+aqhVKUvhTGRntSaorb7YKahk8JUWMkKlwIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFBRVyjBZIxM4iSXuFEEAmtMdS7QfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2YwODMy ZS02NzViLTRlYzItYTgwMi05YjI2Y2FiNzk0NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZjA4MzJl LTY3NWItNGVjMi1hODAyLTliMjZjYWI3OTQ1MS8xL0ZGWEtNRmtqRXppSkplNFVR UUNhMHgxTHRCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQEHywgAwQALhUUAwQBLhUWAwQCLhUcAwQCuZuw AwQCuZu4AwQBwd5oMA0EAgACMAcDBQMqBBWAMB4GCCsGAQUFBwEIAQH/BA8wDaAL MAkCAhryAgMAqIUwDQYJKoZIhvcNAQELBQADggEBAJ7xWebC8R2mIIXYqUpyiET3 n5rS37gE0OdfsUVFwipaopnHOM/qbgXdXqRb0zYG99q5xuuSHLdH0zPwJcPR4tiV N3Lx+5RlV7hVtJ7lnD2hA6ZYmXQH0DbfgC8XtYe50AkdXurwBGsfSIPo6+nZF5fy n6AmAjpRSAbc58jEYzwEjLkUFvJhyJ9Scj7Ez3NlFYCnM6hiZc4hUZ2xRqipQIqw JwXJGnjp5YMAyUMMvZ2tBdC6nYPK2RTicPsNUg7k79KgnOhW35CgIWykBgL03Bf8 cs/Fxf7i0RktJQV60SIIVc4ZWSMV4900mEda+3gSJSAQnbISpfqjA0Dqp/WWS4w= -----END CERTIFICATE-----Generated at Mon Jan 26 16:01:28 2026 by rpki-client