This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer (raw, json) Hash identifier: 8eJWVW2JG6n+xtkWNaLS4NovIbas2lXS4f8DsSAMKA8= Subject key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7BE82C8ABFE6EB8F12160AA3A0DA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49914 IP: 185.56.248.0/22 IP: 2a02:5720::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:be:82:c8:ab:fe:6e:b8:f1:21:60:aa:3a:0d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:af:df:10:61:64:49:76:3b:b4:a4:0e:92: d7:71:14:0d:86:06:94:78:c0:3e:5f:1b:a5:57:e1: e8:66:b4:c0:ef:49:3b:4d:85:63:f8:d6:64:97:f9: cb:9d:c6:b9:b6:a3:3c:7e:05:18:df:29:a1:86:97: 5b:8a:17:1b:4b:6d:2b:ca:4d:17:32:88:51:e8:47: 4e:85:1b:df:a3:dc:dd:ea:18:79:6f:a8:d6:4b:31: 0b:60:44:40:8d:eb:d7:12:26:e6:3b:bf:6c:f9:ff: bf:d1:ee:8e:78:f8:a3:f4:d8:61:c3:91:3b:d7:05: 5d:fa:df:cb:fb:7a:ff:53:b2:1a:1f:31:b4:eb:ec: 46:4d:8e:96:3d:bc:4e:47:41:4d:63:d9:cf:31:37: db:9e:61:d5:9b:0c:8d:c5:cd:e8:62:03:57:c2:05: 64:76:ef:42:7c:68:5b:77:63:a6:de:36:43:4a:db: f8:19:77:8f:6a:76:0d:ee:6c:43:17:c7:39:ef:ad: 8c:88:c5:b9:e5:d2:5f:ba:4a:1b:eb:33:39:5c:9f: 8e:f5:7f:12:28:a8:6c:3a:f0:8e:f5:3b:01:e4:9f: 86:99:40:c5:f2:a4:09:de:a6:d4:eb:59:5c:64:26: 8b:8c:6c:61:c7:1c:bc:5d:7b:42:d8:9d:40:12:42: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.248.0/22 IPv6: 2a02:5720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49914 Signature Algorithm: sha256WithRSAEncryption 7c:d8:8a:04:ef:11:a2:13:e9:6e:6a:97:37:f6:79:fd:b1:af: 1a:80:e3:b4:80:f6:19:9e:ad:a1:d1:0d:bf:25:9f:71:60:67: bb:56:8e:88:ef:19:54:af:ac:66:1f:f8:b5:a5:95:05:8a:b3: 76:fe:2d:b2:e7:1b:f8:2c:1d:4d:37:a7:9d:44:f3:38:ea:05: 2a:c0:10:4f:aa:8e:ee:8d:df:5f:4f:7a:dc:88:90:61:ae:e1: 67:04:95:25:fe:74:32:50:ce:2c:d2:7c:40:3e:a8:c5:be:a2: 0e:35:a8:ec:80:b0:46:60:ff:8e:ef:23:41:d6:ef:14:5a:56: 76:a8:b2:c8:00:e8:46:81:ae:e9:ae:14:f5:2f:ff:e6:3d:70: cb:35:1e:7a:30:f1:b6:8d:23:41:de:f6:65:89:d0:a2:af:75: 6a:39:24:e4:66:f4:17:74:51:69:4c:01:de:4f:61:0c:48:ee: ca:3f:fe:e9:cd:6e:74:51:a3:84:d4:b0:0c:ed:c0:f6:56:5c: 9f:9f:5f:a2:2a:d8:83:a6:c6:40:7d:68:be:cf:1c:b4:44:39: b6:e2:ce:53:a2:f8:73:6e:2e:1a:ac:3e:2f:20:c3:68:77:c8: 94:28:c0:05:ea:b8:2a:ee:1f:d1:da:cd:63:63:c0:79:f4:83: d7:2d:f8:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x76CyKv+brjxIWCqOg2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTE1ZTJmZWY0ZDMxMjQ1ZGM2NzAxOGJlZmMzMzc0ZGMwZjFlYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2umv3xBhZEl2O7SkDpLXcRQNhgaU eMA+XxulV+HoZrTA70k7TYVj+NZkl/nLnca5tqM8fgUY3ymhhpdbihcbS20ryk0X MohR6EdOhRvfo9zd6hh5b6jWSzELYERAjevXEibmO79s+f+/0e6OePij9Nhhw5E7 1wVd+t/L+3r/U7IaHzG06+xGTY6WPbxOR0FNY9nPMTfbnmHVmwyNxc3oYgNXwgVk du9CfGhbd2Om3jZDStv4GXePanYN7mxDF8c5762MiMW55dJfukob6zM5XJ+O9X8S KKhsOvCO9TsB5J+GmUDF8qQJ3qbU61lcZCaLjGxhxxy8XXtC2J1AEkJsgwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBUV4v700xJF3GcBi+/DN03A8exoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2IwYzkz Ni05ODNkLTQzOTAtODk2YS03ZDEzZGQyODNlODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYjBjOTM2 LTk4M2QtNDM5MC04OTZhLTdkMTNkZDI4M2U4MC8xL0ZSWGlfdlRURWtYY1p3R0w3 OE0zVGNEeDdHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTj4MA0EAgACMAcDBQAqAlcgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDC+jANBgkqhkiG9w0BAQsFAAOCAQEAfNiKBO8RohPp bmqXN/Z5/bGvGoDjtID2GZ6todENvyWfcWBnu1aOiO8ZVK+sZh/4taWVBYqzdv4t sucb+CwdTTennUTzOOoFKsAQT6qO7o3fX0963IiQYa7hZwSVJf50MlDOLNJ8QD6o xb6iDjWo7ICwRmD/ju8jQdbvFFpWdqiyyADoRoGu6a4U9S//5j1wyzUeejDxto0j Qd72ZYnQoq91ajkk5Gb0F3RRaUwB3k9hDEjuyj/+6c1udFGjhNSwDO3A9lZcn59f oirYg6bGQH1ovs8ctEQ5tuLOU6L4c24uGqw+LyDDaHfIlCjABeq4Ku4f0drNY2PA efSD1y34Hg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:19 2026 by rpki-client