This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer (raw, json) Hash identifier: SSZRVDmLl4ALtSpcflpAYrgcIRk4O374euB3UBf1cDY= Subject key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FE5358872745D100B6977CCD2B51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201480 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fe:53:58:87:27:45:d1:00:b6:97:7c:cd:2b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c2eab6a2960506046a1da4312773d98e97cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:b5:5e:d5:4b:30:39:f9:4e:85:87:3e:66: 97:dc:1c:b7:f6:73:fe:b3:cc:6e:92:9c:e3:ab:b2: d4:3f:da:44:4d:72:48:3a:69:4a:7a:ac:0a:8b:b5: a9:aa:b1:d4:a8:36:d2:65:25:b1:be:cd:71:40:fb: 69:55:e0:fe:2b:ad:ec:75:30:11:00:0e:4b:45:98: f9:b1:db:e7:47:0a:b6:96:54:ee:d9:f5:5e:be:81: be:ed:5a:f3:c2:f7:c6:64:0b:ef:4d:20:8d:68:a5: 32:ad:9e:22:02:a1:c7:a2:3f:6f:da:13:da:5d:34: 45:3a:3c:67:a8:36:4d:95:cc:f0:09:a5:b5:e6:05: b3:42:65:1a:5e:1d:a3:33:01:fd:6a:a0:19:70:25: 0a:e2:42:f4:0f:51:c1:46:c9:6e:f5:dd:28:f5:65: 4f:91:32:84:82:5a:ae:d3:ed:1c:ea:6c:e9:51:91: 9b:76:e1:75:de:0d:b7:81:dc:4a:18:02:e8:71:fc: 00:23:96:fa:98:1c:ec:6a:cc:0e:c7:0a:21:2d:88: 53:56:ae:7c:be:4d:59:38:8a:93:4d:75:d4:dc:fa: ef:a3:ee:3a:09:57:26:ad:a3:80:26:79:b6:1d:09: bb:fc:7b:6d:43:28:e0:50:a7:f0:a3:c3:c1:e5:72: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201480 Signature Algorithm: sha256WithRSAEncryption 49:42:e8:4e:9b:98:ca:2f:51:6c:5f:77:3c:03:35:23:1a:a1: 58:26:db:fd:21:03:93:f5:81:db:e7:28:f6:77:82:1a:20:ac: b7:c2:46:8b:6e:81:26:cd:9c:98:fa:51:3e:ca:c7:28:ff:4f: 31:2d:7c:49:54:3c:b3:df:6e:0d:c0:d1:62:6f:f5:df:3a:27: fd:77:d6:e9:49:0c:5e:b6:4e:9b:64:0e:b1:81:e9:b6:90:5d: b6:75:cc:74:c2:3c:6f:9d:35:94:83:0f:b5:f6:63:f2:57:19: c0:cf:17:02:37:c9:62:f4:03:a7:2c:13:95:d2:e3:59:b2:46: cd:ea:c7:cf:2b:d5:5f:78:0b:24:14:07:88:8a:6b:b3:93:e9: 03:7c:4e:84:4c:ad:8b:c9:7c:02:c9:10:39:35:9e:53:7b:ef: f0:19:0e:e1:c7:0c:a0:41:39:83:62:7e:73:37:8e:b0:80:54: 42:56:1f:a4:07:5a:2e:ec:82:6f:05:88:b2:96:62:56:73:3b: 97:07:15:bc:81:d2:3b:b7:d1:4e:90:0f:28:eb:fd:48:e1:cf: 91:f1:d9:89:48:43:5a:10:c1:60:9d:71:4b:b3:39:70:5c:33: 2c:ee:3a:06:7d:5d:3f:5c:5f:81:9d:d6:52:9d:40:ba:dc:8a: bf:dd:50:84 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NP5TWIcnRdEAtpd8zStRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGMyZWFiNmEyOTYwNTA2MDQ2YTFkYTQzMTI3NzNkOThlOTdjZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMq1XtVLMDn5ToWHPmaX3By39nP+ s8xukpzjq7LUP9pETXJIOmlKeqwKi7WpqrHUqDbSZSWxvs1xQPtpVeD+K63sdTAR AA5LRZj5sdvnRwq2llTu2fVevoG+7VrzwvfGZAvvTSCNaKUyrZ4iAqHHoj9v2hPa XTRFOjxnqDZNlczwCaW15gWzQmUaXh2jMwH9aqAZcCUK4kL0D1HBRslu9d0o9WVP kTKEglqu0+0c6mzpUZGbduF13g23gdxKGALocfwAI5b6mBzsaswOxwohLYhTVq58 vk1ZOIqTTXXU3Prvo+46CVcmraOAJnm2HQm7/HttQyjgUKfwo8PB5XJtQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBTC6railgUGBGodpDEnc9mOl81aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzRiNGQ3 YS1jZTQ4LTQ3YTQtYTNjNC02MTFlNTdkYTk1YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNGI0ZDdh LWNlNDgtNDdhNC1hM2M0LTYxMWU1N2RhOTVjMC8xL0ZNTHF0cUtXQlFZRWFoMmtN U2R6Mlk2WHpWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTCDANBgkqhkiG9w0BAQsFAAOCAQEASULoTpuYyi9R bF93PAM1IxqhWCbb/SEDk/WB2+co9neCGiCst8JGi26BJs2cmPpRPsrHKP9PMS18 SVQ8s99uDcDRYm/13zon/XfW6UkMXrZOm2QOsYHptpBdtnXMdMI8b501lIMPtfZj 8lcZwM8XAjfJYvQDpywTldLjWbJGzerHzyvVX3gLJBQHiIprs5PpA3xOhEyti8l8 AskQOTWeU3vv8BkO4ccMoEE5g2J+czeOsIBUQlYfpAdaLuyCbwWIspZiVnM7lwcV vIHSO7fRTpAPKOv9SOHPkfHZiUhDWhDBYJ1xS7M5cFwzLO46Bn1dP1xfgZ3WUp1A utyKv91QhA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:20 2026 by rpki-client