This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer File: FOEoPa4LC5l4ZyZcssAIPFETbto.cer (raw, json) Hash identifier: 1yyLdOQ0Q4RhVPdC9H4noZHWyUCc76W2U6ENsN5SgU4= Subject key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB235819B1541EEF860D294A8CC6C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57131 IP: 185.130.164.0/22 IP: 2a03:9ea0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:23:58:19:b1:54:1e:ef:86:0d:29:4a:8c:c6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e1283dae0b0b997867265cb2c0083c51136eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:51:72:cf:20:80:67:3b:0d:19:d7:5c:22: 39:34:8f:a8:44:82:1e:2e:fa:37:ac:d4:39:ae:9a: 6c:88:e6:a0:b0:a7:6d:c6:89:b2:05:6a:74:24:16: da:1e:b1:ef:75:50:1b:39:21:7c:64:f6:5a:b2:be: 45:e1:f1:c2:1a:b0:0d:c4:44:5b:56:1e:b3:b6:63: b9:a4:28:60:4c:94:14:ca:9a:9a:20:82:46:d5:ec: 53:24:13:85:e1:61:81:3c:37:18:4c:1c:04:fc:3e: 31:18:21:fa:3e:d2:98:e8:ea:34:2e:36:cb:df:9a: 43:27:80:eb:13:e0:ff:87:d4:23:f1:29:9f:43:9e: 49:07:ff:51:6e:50:b4:6c:c7:99:37:4e:78:67:c1: 21:53:c9:e3:97:a5:71:fe:af:24:27:af:f3:42:30: 60:ec:84:cb:6b:25:93:cf:a6:4e:f2:ce:ed:af:97: b8:e7:eb:a8:b1:83:f2:04:5f:2d:04:f2:4c:76:32: fd:7b:99:c1:27:4a:38:50:d8:5f:a8:4c:cd:ba:f5: ad:41:a5:22:52:48:ff:40:d5:e9:64:b0:4e:95:22: c0:e1:70:92:c3:e5:e4:f1:6b:0d:02:7a:ce:28:1c: 11:32:31:35:6c:5d:38:69:ba:c6:1b:b4:24:85:fc: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.164.0/22 IPv6: 2a03:9ea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57131 Signature Algorithm: sha256WithRSAEncryption 87:9c:f6:1f:34:df:0e:48:49:2b:89:cb:62:c6:4d:42:72:6a: c5:b2:6a:ed:49:f6:cd:a8:d9:46:7e:1c:ff:5a:01:c5:ec:e1: ea:d1:76:09:b4:19:ad:65:84:9b:34:da:6e:92:a0:27:82:9f: 5c:c4:c0:86:f2:91:ca:df:ea:ef:7b:7b:1e:fd:0d:5b:70:32: c0:a5:84:2f:39:e9:6e:70:c1:38:90:7c:62:3c:48:d9:44:fd: d5:7a:5b:bd:c7:06:1b:08:46:4a:28:38:d3:73:2e:3f:3c:0b: 5e:5f:17:0f:20:c4:b4:34:db:fd:e9:bc:36:9e:f7:42:54:5a: 52:df:83:24:0b:fe:33:79:67:c7:41:d1:e0:22:bd:ff:c3:8b: 49:c0:1f:2c:9f:49:35:d8:26:c2:c1:b0:28:2d:d5:fd:88:7e: 44:73:30:51:56:e8:72:c1:e0:14:44:b9:96:ce:36:c0:8d:a8: a3:60:88:07:e6:35:07:ed:89:17:cf:b0:f7:c6:bd:65:32:68: 8f:15:af:f7:7f:7e:92:70:2c:43:57:00:2d:7f:8d:28:8f:46: ef:bc:a8:1f:5c:1b:18:b6:b5:88:9e:b6:15:7b:ab:7a:5c:96: 56:bf:a2:24:cc:1f:c7:0e:45:3c:44:2a:3f:d0:39:ab:5f:2c: df:a2:b9:c7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26yNYGbFUHu+GDSlKjMbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGUxMjgzZGFlMGIwYjk5Nzg2NzI2NWNiMmMwMDgzYzUxMTM2ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qFRcs8ggGc7DRnXXCI5NI+oRIIe Lvo3rNQ5rppsiOagsKdtxomyBWp0JBbaHrHvdVAbOSF8ZPZasr5F4fHCGrANxERb Vh6ztmO5pChgTJQUypqaIIJG1exTJBOF4WGBPDcYTBwE/D4xGCH6PtKY6Oo0LjbL 35pDJ4DrE+D/h9Qj8SmfQ55JB/9RblC0bMeZN054Z8EhU8njl6Vx/q8kJ6/zQjBg 7ITLayWTz6ZO8s7tr5e45+uosYPyBF8tBPJMdjL9e5nBJ0o4UNhfqEzNuvWtQaUi Ukj/QNXpZLBOlSLA4XCSw+Xk8WsNAnrOKBwRMjE1bF04abrGG7QkhfxdZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBThKD2uCwuZeGcmXLLACDxRE27aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2U2NjU3 MS1hMGM0LTRhYzAtODNhZS04MDQxMWU5MTc1MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZTY2NTcx LWEwYzQtNGFjMC04M2FlLTgwNDExZTkxNzUzOC8xL0ZPRW9QYTRMQzVsNFp5WmNz c0FJUEZFVGJ0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYKkMA0EAgACMAcDBQAqA56gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDfKzANBgkqhkiG9w0BAQsFAAOCAQEAh5z2HzTfDkhJ K4nLYsZNQnJqxbJq7Un2zajZRn4c/1oBxezh6tF2CbQZrWWEmzTabpKgJ4KfXMTA hvKRyt/q73t7Hv0NW3AywKWELznpbnDBOJB8YjxI2UT91XpbvccGGwhGSig403Mu PzwLXl8XDyDEtDTb/em8Np73QlRaUt+DJAv+M3lnx0HR4CK9/8OLScAfLJ9JNdgm wsGwKC3V/Yh+RHMwUVbocsHgFES5ls42wI2oo2CIB+Y1B+2JF8+w98a9ZTJojxWv 939+knAsQ1cALX+NKI9G77yoH1wbGLa1iJ62FXurelyWVr+iJMwfxw5FPEQqP9A5 q18s36K5xw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:46 2026 by rpki-client