This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer (raw, json) Hash identifier: CXoCOhu9iIFESVHVeklbiNYh74W6XA1udE9ifD5wiVg= Subject key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF13EA259E9F08F1179EB5F4DE6BAFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206522 IP: 185.184.12.0/22 IP: 2a0b:2380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:3e:a2:59:e9:f0:8f:11:79:eb:5f:4d:e6:ba:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:db:b4:69:2c:8f:f4:df:d2:40:63:79:52: 61:a5:c8:4c:1d:98:12:a9:34:aa:ef:c8:41:29:5e: ed:63:cd:67:7b:e6:01:c1:44:30:a6:01:7d:7c:e4: 1a:ea:70:e1:69:6a:e8:11:8c:6e:19:4c:c9:cd:4d: 5f:18:b5:ff:e6:e7:e3:a1:2c:cd:25:c7:e1:b9:40: 33:71:4d:ec:ca:c8:c6:ae:ed:ae:33:9e:0a:78:58: 43:70:97:83:f1:aa:16:e3:f9:06:16:34:a4:d1:dd: b8:78:d0:34:d1:02:e4:f5:7d:79:b9:b9:3e:c7:07: 5f:0d:0c:56:fb:5a:76:f2:03:50:31:18:82:eb:b5: 0d:de:81:4c:f8:e2:75:d8:51:00:99:5e:ad:c6:5d: 57:72:bf:96:d5:15:68:fe:95:46:46:85:ec:c8:fe: 90:d3:de:bb:13:51:e0:3a:a3:9d:09:df:7e:63:54: 10:3b:5d:50:e2:4b:24:53:fd:36:f1:11:34:2a:71: 5e:02:b5:b5:45:d5:b6:08:a6:a4:ff:a8:ba:55:76: 95:2f:ae:35:10:7e:b7:bd:e1:45:d7:13:ff:e6:66: 66:59:be:1e:be:f9:3b:f6:e9:d3:b1:9b:c4:1b:b8: c6:83:63:75:4c:eb:d8:3a:95:24:4b:dd:26:ff:33: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.12.0/22 IPv6: 2a0b:2380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206522 Signature Algorithm: sha256WithRSAEncryption 87:9b:d2:12:1a:ec:57:27:bb:bc:11:bc:b4:82:b7:72:d0:94: 59:fe:c6:4b:78:00:25:13:08:55:e1:b5:8a:c0:6a:99:1b:eb: a4:a9:8d:b4:05:33:20:f9:cd:1b:d1:b4:ce:19:91:93:68:e0: 11:65:8a:c3:98:43:d6:c6:44:7f:56:60:47:99:85:7d:a6:31: 3c:fc:1a:6d:76:33:0f:48:c0:cc:b3:2b:26:5e:15:ea:6f:ab: 72:32:44:55:20:a2:2e:24:9c:46:5c:95:95:03:c6:86:28:37: 68:0c:13:c6:61:c5:81:97:68:72:3d:6f:a5:f3:e3:08:d2:f3: 72:e4:dd:74:27:32:6b:99:02:aa:47:6e:f5:91:2a:2c:8d:77: 82:5a:9f:64:e7:35:04:49:8b:27:b5:ac:64:62:31:33:0e:90: ae:d2:3a:0d:ee:8a:86:60:2a:0f:cf:d1:f3:7b:42:e1:44:9a: 69:f9:81:13:a9:34:3a:61:da:84:a1:1b:66:df:91:8a:2c:d4: cd:27:4a:25:8c:a2:53:bb:5f:3d:6d:44:45:51:37:8e:ed:c6: 59:7c:02:6d:eb:45:5a:bb:74:20:52:02:ff:41:87:df:c7:d2: 54:c8:8b:53:02:4e:29:43:88:3c:66:de:2d:28:b2:59:29:c5: 69:1a:79:6b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8T6iWenwjxF5619N5rr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGUxNjg0NmQ3YzIyZDBmYzNhZDg4NGM5NGMwMzRkZDdiYjM1Zjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZrbtGksj/Tf0kBjeVJhpchMHZgS qTSq78hBKV7tY81ne+YBwUQwpgF9fOQa6nDhaWroEYxuGUzJzU1fGLX/5ufjoSzN JcfhuUAzcU3sysjGru2uM54KeFhDcJeD8aoW4/kGFjSk0d24eNA00QLk9X15ubk+ xwdfDQxW+1p28gNQMRiC67UN3oFM+OJ12FEAmV6txl1Xcr+W1RVo/pVGRoXsyP6Q 0967E1HgOqOdCd9+Y1QQO11Q4kskU/028RE0KnFeArW1RdW2CKak/6i6VXaVL641 EH63veFF1xP/5mZmWb4evvk79unTsZvEG7jGg2N1TOvYOpUkS90m/zPCkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBThaEbXwi0Pw62ITJTANN17s195MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzc0NTUz ZC1hMDg4LTRkMzctYjRhNi0xZDlkODkwYmU2MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNzQ1NTNk LWEwODgtNGQzNy1iNGE2LTFkOWQ4OTBiZTYzMi8xL0ZPRm9SdGZDTFFfRHJZaE1s TUEwM1h1elgzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubgMMA0EAgACMAcDBQMqCyOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmujANBgkqhkiG9w0BAQsFAAOCAQEAh5vSEhrsVye7 vBG8tIK3ctCUWf7GS3gAJRMIVeG1isBqmRvrpKmNtAUzIPnNG9G0zhmRk2jgEWWK w5hD1sZEf1ZgR5mFfaYxPPwabXYzD0jAzLMrJl4V6m+rcjJEVSCiLiScRlyVlQPG hig3aAwTxmHFgZdocj1vpfPjCNLzcuTddCcya5kCqkdu9ZEqLI13glqfZOc1BEmL J7WsZGIxMw6QrtI6De6KhmAqD8/R83tC4USaafmBE6k0OmHahKEbZt+RiizUzSdK JYyiU7tfPW1ERVE3ju3GWXwCbetFWrt0IFIC/0GH38fSVMiLUwJOKUOIPGbeLSiy WSnFaRp5aw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:36 2026 by rpki-client