This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer File: FNwR7RqdntVr8Z2n8heDCoCZxCk.cer (raw, json) Hash identifier: foPQ2bc2x9yIZWajt8Z0/0A/CMhr1Tqt7L70nJjga0k= Subject key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4F64E75EE32C852697C5C445E45C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213202 IP: 91.196.191.0/24 IP: 2a07:17c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:64:e7:5e:e3:2c:85:26:97:c5:c4:45:e4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:f2:a2:70:57:ed:49:5a:41:a6:bf:7b:f9: 35:44:eb:f5:fb:db:0b:f4:56:04:94:91:80:5b:e1: c8:e3:38:47:f1:35:f1:e0:27:7d:bd:bc:52:99:6c: 91:d7:0f:78:a7:a3:0d:31:ba:fd:27:1d:b9:f8:c9: 58:70:2d:2d:5a:f3:97:64:80:50:6e:a2:16:c3:99: 75:4c:7b:6e:56:b4:35:d6:a9:df:6c:5c:94:7d:97: 84:67:ee:ea:17:fd:08:b0:41:b6:b4:0a:db:6f:31: 36:dc:d8:85:85:2b:8d:1b:88:ed:9a:e4:02:2d:ed: ad:86:71:95:1a:cd:ea:a8:3a:a5:0c:13:a1:a7:8e: b9:4c:bd:e3:7e:eb:ef:e4:6c:78:ac:dd:ad:8f:e3: c2:71:8b:00:9b:a4:06:1f:33:82:fe:db:15:bd:f8: d4:fd:42:50:e5:1c:10:a2:b9:a6:00:35:92:80:65: 9f:e0:2f:eb:f7:2a:68:a1:fb:d3:90:cc:fb:37:ab: 57:5e:f2:0f:65:31:67:9a:80:c5:b6:a5:7d:f7:64: ce:00:03:da:94:fa:bb:b5:73:51:21:27:5b:8d:40: f9:72:f0:24:a6:87:64:77:21:36:f3:de:09:25:f8: a0:57:95:59:f6:87:77:4e:2e:37:b1:c0:af:9b:82: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.191.0/24 IPv6: 2a07:17c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213202 Signature Algorithm: sha256WithRSAEncryption 80:6e:0c:5c:8d:88:65:44:1a:63:c2:a2:4d:0a:0a:3a:f8:1b: 73:86:61:38:53:b6:be:43:21:5a:39:8b:d3:36:73:9f:4f:b8: 48:6c:df:2f:ba:07:72:93:7f:8e:00:64:de:09:34:1c:d4:c5: 71:41:dd:d8:00:95:f9:d5:86:bb:c3:4f:04:12:8e:0b:21:08: fe:63:a3:9b:51:19:bd:1b:49:6b:91:be:74:55:64:04:73:a5: 21:de:a2:8b:79:ee:69:53:07:7a:e6:55:32:07:78:82:8c:93: bf:c5:b9:4e:62:3e:36:74:5c:3c:a6:44:0f:4a:56:44:fc:5c: 9d:90:7d:ef:ef:a5:3e:51:05:6c:7f:a5:00:d6:41:c0:a7:72: 95:d3:10:e6:17:ca:3e:b7:5e:b8:70:2a:a3:90:11:3b:96:cd: 00:3d:39:b7:9c:5e:84:62:16:6b:5c:e8:51:20:8f:97:0e:b7: 3c:0a:5a:ee:e1:4f:0f:da:0e:3d:b5:e5:0d:3e:79:64:4f:64: 7b:29:77:40:f4:7c:e5:cd:be:26:62:4f:d9:04:20:66:5c:cc: 07:ff:01:40:67:17:bb:d0:5c:a1:bc:bf:b9:ea:c0:70:cc:57: 30:58:cd:08:64:67:1f:4a:8c:67:bd:a1:ea:31:49:68:36:7e: f6:0b:fd:94 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57U9k517jLIUml8XEReRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGRjMTFlZDFhOWQ5ZWQ1NmJmMTlkYTdmMjE3ODMwYTgwOTljNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgTyonBX7UlaQaa/e/k1ROv1+9sL 9FYElJGAW+HI4zhH8TXx4Cd9vbxSmWyR1w94p6MNMbr9Jx25+MlYcC0tWvOXZIBQ bqIWw5l1THtuVrQ11qnfbFyUfZeEZ+7qF/0IsEG2tArbbzE23NiFhSuNG4jtmuQC Le2thnGVGs3qqDqlDBOhp465TL3jfuvv5Gx4rN2tj+PCcYsAm6QGHzOC/tsVvfjU /UJQ5RwQormmADWSgGWf4C/r9ypoofvTkMz7N6tXXvIPZTFnmoDFtqV992TOAAPa lPq7tXNRISdbjUD5cvAkpodkdyE2894JJfigV5VZ9od3Ti43scCvm4KLcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBTcEe0anZ7Va/Gdp/IXgwqAmcQpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2VmN2Jk My0yNGIyLTQyODQtOTdmZS1jNzFkYjcxODk3MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvZWY3YmQz LTI0YjItNDI4NC05N2ZlLWM3MWRiNzE4OTcwZS8xL0ZOd1I3UnFkbnRWcjhaMm44 aGVEQ29DWnhDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8S/MA0EAgACMAcDBQMqBxfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNA0jANBgkqhkiG9w0BAQsFAAOCAQEAgG4MXI2IZUQa Y8KiTQoKOvgbc4ZhOFO2vkMhWjmL0zZzn0+4SGzfL7oHcpN/jgBk3gk0HNTFcUHd 2ACV+dWGu8NPBBKOCyEI/mOjm1EZvRtJa5G+dFVkBHOlId6ii3nuaVMHeuZVMgd4 goyTv8W5TmI+NnRcPKZED0pWRPxcnZB97++lPlEFbH+lANZBwKdyldMQ5hfKPrde uHAqo5ARO5bNAD05t5xehGIWa1zoUSCPlw63PApa7uFPD9oOPbXlDT55ZE9keyl3 QPR85c2+JmJP2QQgZlzMB/8BQGcXu9Bcoby/uerAcMxXMFjNCGRnH0qMZ72h6jFJ aDZ+9gv9lA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:41 2026 by rpki-client