This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer (raw, json) Hash identifier: d7pFAOMvOe7hVVLt0TAvh/EP8AUQAiwDxZx/IwiHBCA= Subject key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C670E347ECF24A4C1F3C308A6B3D3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.72.124.0/22 IP: 2a05:3980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:e3:47:ec:f2:4a:4c:1f:3c:30:8a:6b:3d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:92:23:90:0a:f7:40:65:0d:02:65:06:77: bd:89:51:c2:82:02:d7:58:17:02:0f:35:34:44:52: 01:86:77:69:7f:75:19:e4:eb:5a:18:78:64:bd:24: cf:6f:97:6e:d6:f1:c0:af:94:a3:8e:f1:87:40:c2: 97:30:32:77:d4:4e:0d:86:a3:b6:a8:39:dc:1b:6a: b1:26:bf:61:82:ec:48:cd:c4:c0:af:ee:52:41:a7: c3:5b:29:8e:54:88:71:ec:ec:1b:29:b4:d5:24:46: 4d:5b:b3:94:19:b4:3f:84:c9:fb:fd:a9:68:a5:65: dc:77:fc:90:ff:91:90:85:21:9a:41:0c:59:4e:35: fe:13:45:6e:64:35:37:2d:dd:af:09:1f:e9:81:8c: 93:ba:98:f0:af:30:d9:26:d0:d1:74:3a:41:0f:04: 2f:34:9e:1f:06:08:5f:75:ce:e2:90:03:fd:61:05: 95:96:d7:0b:5b:4e:cd:13:ed:7f:49:9d:9b:5a:91: 2b:4f:5a:0d:8e:16:51:7b:d5:06:b0:71:2a:11:3b: 1b:68:52:39:d2:93:7b:d0:cb:42:d7:33:c9:1b:af: ea:0f:9f:d3:b1:ec:9f:e0:a2:ca:ff:44:97:6b:34: 75:59:09:6b:62:3b:1b:dc:33:fb:a4:79:6a:87:c1: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.124.0/22 IPv6: 2a05:3980::/29 Signature Algorithm: sha256WithRSAEncryption 05:8c:43:f2:1c:9f:b5:5c:71:2b:9c:77:0f:74:e6:e6:02:97: 73:e6:76:97:be:85:3b:56:d0:c8:1c:d2:71:b2:09:18:db:a5: 50:0a:e4:33:2b:df:3e:45:50:f4:48:01:a9:7f:08:98:1b:75: 0a:9d:57:3f:b9:50:04:53:b2:d1:df:f3:2b:d1:a2:e1:90:79: 91:8d:a9:ed:9b:24:89:38:97:f3:11:fd:32:12:db:12:03:91: 4c:28:81:fb:49:7b:70:b8:26:dc:3f:cd:74:a9:bf:54:9a:fe: b7:34:73:f5:a8:d5:b6:2d:74:ec:11:ea:05:be:ac:22:ad:69: a2:1d:fb:f6:a0:17:a8:c3:68:89:b1:4a:03:90:90:ab:69:e2: dd:94:6b:93:0f:f4:e3:f4:fd:67:06:02:ad:d1:b3:b6:75:8e: 4a:04:06:9e:a9:0d:5c:14:3c:84:68:ad:28:a6:f6:ab:b2:63: e1:2c:a4:2f:12:5b:5d:d2:4a:d5:a5:17:5d:d2:5b:7e:c7:a9: 87:92:a4:c8:3d:ab:16:cf:11:30:20:03:64:0a:c3:ce:1c:95: cc:c8:db:7d:0d:54:7c:59:67:56:fe:34:9f:ed:f5:21:15:23: 35:c9:5e:9e:a4:f1:f4:6f:52:8e:91:48:2f:48:9d:94:c1:57: 0a:75:eb:d4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xnDjR+zySkwfPDCKaz08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGRiMDRmOWM5MjMxN2VjYzdhMmFhZmYyY2E0ZDcwOThkMWJkMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE2SI5AK90BlDQJlBne9iVHCggLX WBcCDzU0RFIBhndpf3UZ5OtaGHhkvSTPb5du1vHAr5SjjvGHQMKXMDJ31E4NhqO2 qDncG2qxJr9hguxIzcTAr+5SQafDWymOVIhx7OwbKbTVJEZNW7OUGbQ/hMn7/alo pWXcd/yQ/5GQhSGaQQxZTjX+E0VuZDU3Ld2vCR/pgYyTupjwrzDZJtDRdDpBDwQv NJ4fBghfdc7ikAP9YQWVltcLW07NE+1/SZ2bWpErT1oNjhZRe9UGsHEqETsbaFI5 0pN70MtC1zPJG6/qD5/Tseyf4KLK/0SXazR1WQlrYjsb3DP7pHlqh8EcBwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzU5MWE0 Ni0xZTIxLTQ1OTAtODc0Yy01OGM3YmZjZGNmZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNTkxYTQ2 LTFlMjEtNDU5MC04NzRjLTU4YzdiZmNkY2ZkZi8xL0ZOc0UtY2tqRi16SG9xcl9M S1RYQ1kwYjBtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUh8MA0EAgACMAcDBQMqBTmAMA0GCSqGSIb3 DQEBCwUAA4IBAQAFjEPyHJ+1XHErnHcPdObmApdz5naXvoU7VtDIHNJxsgkY26VQ CuQzK98+RVD0SAGpfwiYG3UKnVc/uVAEU7LR3/Mr0aLhkHmRjantmySJOJfzEf0y EtsSA5FMKIH7SXtwuCbcP810qb9Umv63NHP1qNW2LXTsEeoFvqwirWmiHfv2oBeo w2iJsUoDkJCraeLdlGuTD/Tj9P1nBgKt0bO2dY5KBAaeqQ1cFDyEaK0opvarsmPh LKQvEltd0krVpRdd0lt+x6mHkqTIPasWzxEwIANkCsPOHJXMyNt9DVR8WWdW/jSf 7fUhFSM1yV6epPH0b1KOkUgvSJ2UwVcKdevU -----END CERTIFICATE-----Generated at Tue Jan 27 00:28:22 2026 by rpki-client