This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer File: FKawhisrMDswLDwjSaWsjQ-QawY.cer (raw, json) Hash identifier: Nb2DpXv4wUE6mCcK0PuEeCs8hFTRUibGuUqQYzhRwFY= Subject key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AE7CF3FA951F680AB352E7BC0ECF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209318 IP: 77.95.115.0/24 IP: 85.209.208.0/22 IP: 2a09:9fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ae:7c:f3:fa:95:1f:68:0a:b3:52:e7:bc:0e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:f5:69:38:d3:3f:e5:81:ef:67:a6:41:b5: 71:84:2d:8c:3a:1d:24:9a:d0:10:d4:1e:07:84:bc: 7f:77:c9:dd:e5:83:66:ad:5c:a7:0d:a5:ec:17:3d: 55:a7:2c:23:19:e4:da:e2:11:99:55:37:2a:46:ab: 79:47:be:a3:42:6b:cb:58:c1:49:35:aa:15:96:68: 30:24:07:50:a5:57:44:3c:78:9d:d9:51:cc:0f:b9: 33:5a:b3:22:2b:15:0c:c3:5f:25:bf:10:a7:69:16: 91:40:c9:e6:1d:30:c7:a1:fb:51:19:8f:c6:58:78: 43:5e:39:97:ae:b5:1c:9c:62:34:e2:38:c1:33:0b: bf:56:b5:ba:76:6c:05:ac:6f:5c:0a:4b:d3:6f:bc: 12:95:79:43:7b:74:6d:06:14:ae:fb:61:82:18:fc: eb:d8:93:e1:28:0b:64:87:25:f6:5e:d6:cf:6f:0c: e7:cd:49:d9:69:d4:5f:72:ff:72:08:10:32:23:ba: 17:70:17:f8:a8:83:ee:16:79:73:5a:7d:88:1e:53: ea:7d:23:39:27:2e:14:d2:23:ce:b6:76:51:cc:72: 8e:ad:ad:c7:93:a4:82:41:a0:2f:cc:5d:09:0c:da: 01:d3:6c:5d:c1:e7:b2:12:fc:67:25:d6:8c:8e:bd: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.115.0/24 85.209.208.0/22 IPv6: 2a09:9fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209318 Signature Algorithm: sha256WithRSAEncryption 64:82:aa:13:b4:42:ea:44:29:53:c0:84:d7:69:f6:23:55:e2: 78:a4:76:8d:08:b2:26:a4:4f:3b:c7:04:36:78:e1:22:fa:79: 5f:21:8c:6f:db:b6:7e:a0:d4:1b:b7:a5:e6:61:d2:d7:89:1d: 2b:a1:2b:6e:bc:13:15:b6:be:72:08:a9:7a:bd:2e:09:35:80: b3:2f:7a:99:b9:4d:cf:30:e7:5b:65:8b:b4:1c:58:2a:c8:67: e8:82:e4:60:0d:4d:0b:d7:5d:82:df:a1:08:3c:44:06:05:9a: 25:72:52:3a:46:54:9f:b0:7a:e6:96:a9:af:1b:ae:28:fd:64: 5f:62:e2:77:06:ed:08:65:c6:a4:53:bd:77:9b:e9:4a:fa:93: 32:87:12:17:e7:f3:c7:dc:18:d1:0c:ac:37:c5:f7:bc:c5:6d: 69:16:a3:ae:0b:2c:54:13:9e:81:b0:0d:f9:71:ca:1d:9a:b6: f9:27:3e:96:a5:c2:b8:09:2c:c7:39:38:cb:a4:75:3a:ab:41: a1:e8:bf:87:03:ec:e7:f5:04:a8:9c:99:06:01:b5:8f:78:86: 5b:f8:e0:aa:65:e0:80:99:9b:31:38:96:59:cd:0d:3d:fa:a8: b6:1e:5c:7e:ed:26:cc:ce:22:ed:01:62:b2:b9:6e:ca:6a:2b: 96:39:d1:3c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8Eq588/qVH2gKs1LnvA7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGE2YjA4NjJiMmIzMDNiMzAyYzNjMjM0OWE1YWM4ZDBmOTA2YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmj1aTjTP+WB72emQbVxhC2MOh0k mtAQ1B4HhLx/d8nd5YNmrVynDaXsFz1VpywjGeTa4hGZVTcqRqt5R76jQmvLWMFJ NaoVlmgwJAdQpVdEPHid2VHMD7kzWrMiKxUMw18lvxCnaRaRQMnmHTDHoftRGY/G WHhDXjmXrrUcnGI04jjBMwu/VrW6dmwFrG9cCkvTb7wSlXlDe3RtBhSu+2GCGPzr 2JPhKAtkhyX2XtbPbwznzUnZadRfcv9yCBAyI7oXcBf4qIPuFnlzWn2IHlPqfSM5 Jy4U0iPOtnZRzHKOra3Hk6SCQaAvzF0JDNoB02xdweeyEvxnJdaMjr1MHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBSmsIYrKzA7MCw8I0mlrI0PkGsGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzhkOTkx ZS0zZWNlLTRhMTEtYjQ2My03NTFjZjNhNWUxZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvOGQ5OTFl LTNlY2UtNGExMS1iNDYzLTc1MWNmM2E1ZTFlMS8xL0ZLYXdoaXNyTURzd0xEd2pT YVdzalEtUWF3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATV9zAwQCVdHQMA0EAgACMAcDBQMqCZ/AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxpjANBgkqhkiG9w0BAQsFAAOCAQEAZIKq E7RC6kQpU8CE12n2I1XieKR2jQiyJqRPO8cENnjhIvp5XyGMb9u2fqDUG7el5mHS 14kdK6ErbrwTFba+cgiper0uCTWAsy96mblNzzDnW2WLtBxYKshn6ILkYA1NC9dd gt+hCDxEBgWaJXJSOkZUn7B65paprxuuKP1kX2LidwbtCGXGpFO9d5vpSvqTMocS F+fzx9wY0QysN8X3vMVtaRajrgssVBOegbAN+XHKHZq2+Sc+lqXCuAksxzk4y6R1 OqtBoei/hwPs5/UEqJyZBgG1j3iGW/jgqmXggJmbMTiWWc0NPfqoth5cfu0mzM4i 7QFisrluymorljnRPA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:53 2026 by rpki-client