This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer (raw, json) Hash identifier: v5meITD0gOJCV2kqcpEBBXBh6AJy9Sw5FhbvxCnyZdI= Subject key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7019049A43A309D607F8283690BF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.153.240.0/21 IP: 83.219.112.0/20 IP: 185.74.140.0/22 IP: 185.74.152.0/22 IP: 2a00:d2e0::/29 IP: 2a00:d560::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:90:49:a4:3a:30:9d:60:7f:82:83:69:0b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1492a20754c9a7650b8279b9390689c469d73595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:57:54:2a:9f:b0:9f:e0:5b:5b:bb:39:98: 58:78:bc:e0:c0:10:81:23:cb:ca:67:76:07:04:22: 81:78:ef:93:f4:67:12:e0:80:b3:5f:44:32:db:cd: 3d:58:3b:af:3d:b3:8c:68:ea:ac:fa:39:78:3e:ed: 88:3e:d8:21:a1:fb:c7:b4:b7:ce:0f:34:e4:aa:06: 71:9b:cb:01:48:b0:a8:94:12:03:d3:35:bc:2a:ba: 13:9f:15:eb:7b:8c:6f:88:1c:18:8b:90:26:8a:16: 87:a5:89:0c:f2:0b:7c:9d:e0:0e:38:ee:dc:2b:f8: 33:c0:1d:2f:1a:5a:84:03:20:b4:dd:7f:91:70:6c: 38:fc:29:76:f0:a3:3c:2a:c5:5d:0d:bd:1e:07:4f: ce:08:0a:1f:c2:56:36:6f:e3:19:b6:ef:11:1b:15: 31:21:53:2a:a1:1e:96:ac:bc:b8:8b:89:97:0f:5a: 96:d9:9e:f1:47:f1:2c:2b:6c:d5:23:bd:c5:14:96: 74:97:72:48:5e:90:b0:f9:1a:d4:02:50:fb:f7:81: 9d:18:88:fb:89:ac:2b:29:7b:f2:19:3c:0b:24:01: da:91:a4:fa:b6:62:cb:7c:1b:f5:90:f8:84:9f:ba: 88:25:50:87:ce:c1:e9:86:51:4e:4d:5e:0b:6e:61: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.240.0/21 83.219.112.0/20 185.74.140.0/22 185.74.152.0/22 IPv6: 2a00:d2e0::/29 2a00:d560::/29 Signature Algorithm: sha256WithRSAEncryption 36:db:bb:e0:91:9e:c4:dc:49:83:85:19:66:b9:95:2e:b8:ee: 40:7e:ed:88:c4:1f:64:9c:e8:cb:d1:97:b9:68:c2:b0:31:4d: ed:72:c2:26:88:db:e1:8f:21:08:44:18:58:84:c2:7b:38:af: 8c:91:cb:46:37:f8:19:90:d9:b1:a0:d1:69:e9:53:69:48:aa: 0f:61:03:e4:ad:46:37:77:7d:f1:c4:43:e2:d8:48:45:49:c1: 37:65:27:04:51:aa:72:83:6f:ef:b2:25:0b:cf:50:58:83:5f: 13:e0:d1:38:1a:15:1e:d6:0f:3b:2b:ab:ee:56:70:af:43:2a: 60:80:a6:0b:31:44:79:ad:54:c5:cc:1a:82:88:a8:ef:de:d3: 9a:47:52:f4:b6:c6:90:94:75:d7:13:fa:76:30:c7:03:c7:8c: 7b:ff:3e:6f:fe:be:8c:6e:90:a6:6f:8b:27:db:38:08:0e:d6: 2c:8a:31:be:00:75:e5:ab:96:36:cd:3a:27:95:14:bf:ff:20: f3:80:79:c5:45:6d:e9:e6:8e:4e:c4:f6:a9:37:26:93:28:9c: e9:0d:02:8f:76:61:fb:8d:1a:60:7b:8e:6a:de:72:d1:60:70: 5e:88:cc:1c:41:43:a0:48:a2:d0:ef:5c:d8:70:1b:d0:11:82: d4:03:4a:d4 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+pwGQSaQ6MJ1gf4KDaQvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDkyYTIwNzU0YzlhNzY1MGI4Mjc5YjkzOTA2ODljNDY5ZDczNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gFXVCqfsJ/gW1u7OZhYeLzgwBCB I8vKZ3YHBCKBeO+T9GcS4ICzX0Qy2809WDuvPbOMaOqs+jl4Pu2IPtghofvHtLfO DzTkqgZxm8sBSLColBID0zW8KroTnxXre4xviBwYi5AmihaHpYkM8gt8neAOOO7c K/gzwB0vGlqEAyC03X+RcGw4/Cl28KM8KsVdDb0eB0/OCAofwlY2b+MZtu8RGxUx IVMqoR6WrLy4i4mXD1qW2Z7xR/EsK2zVI73FFJZ0l3JIXpCw+RrUAlD794GdGIj7 iawrKXvyGTwLJAHakaT6tmLLfBv1kPiEn7qIJVCHzsHphlFOTV4LbmGP7QIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFBSSogdUyadlC4J5uTkGicRp1zWVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzYzMWU2 YS03ZDA2LTRmYTEtYmZkOS1jYTc0YTA2N2ZlYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNjMxZTZh LTdkMDYtNGZhMS1iZmQ5LWNhNzRhMDY3ZmViZi8xL0ZKS2lCMVRKcDJVTGdubTVP UWFKeEduWE5aVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQDBZnwAwQEU9twAwQCuUqMAwQCuUqYMBQEAgAC MA4DBQMqANLgAwUDKgDVYDANBgkqhkiG9w0BAQsFAAOCAQEANtu74JGexNxJg4UZ ZrmVLrjuQH7tiMQfZJzoy9GXuWjCsDFN7XLCJojb4Y8hCEQYWITCezivjJHLRjf4 GZDZsaDRaelTaUiqD2ED5K1GN3d98cRD4thIRUnBN2UnBFGqcoNv77IlC89QWINf E+DROBoVHtYPOyur7lZwr0MqYICmCzFEea1Uxcwagoio797TmkdS9LbGkJR11xP6 djDHA8eMe/8+b/6+jG6Qpm+LJ9s4CA7WLIoxvgB15auWNs06J5UUv/8g84B5xUVt 6eaOTsT2qTcmkyic6Q0Cj3Zh+40aYHuOat5y0WBwXojMHEFDoEii0O9c2HAb0BGC 1ANK1A== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:00 2026 by rpki-client