This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer File: FT0HLM7wC_Rk1mDb0F2todoz0sg.cer (raw, json) Hash identifier: gbr3X5p6VDjEOVJ0pnMtFn9IivohhNm7LPBAEPSy5bQ= Subject key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F808030EF545CCDFE9651099C9EB150 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42716 IP: 77.73.216.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:80:30:ef:54:5c:cd:fe:96:51:09:9c:9e:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153d072ccef00bf464d660dbd05dada1da33d2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:1e:ca:49:dd:76:c8:db:99:9e:40:35:69: 35:1c:32:fb:50:88:f6:b8:f2:4f:af:0e:f9:6d:be: 66:e1:4e:3d:c7:85:ad:ff:a5:88:80:54:61:08:6c: ee:c3:7b:8b:6b:13:ad:a4:58:a8:3d:40:be:27:1d: d9:a5:53:84:dc:17:10:1a:83:ec:64:ef:7b:a5:b9: e6:f8:27:ce:14:25:e0:4b:48:ee:c5:7a:52:d6:99: cd:f6:eb:22:e5:65:1e:28:43:b8:63:d8:2d:a9:83: 79:44:23:b2:40:de:0b:99:cc:d6:d8:b8:62:83:cf: bb:af:80:35:80:d2:be:44:1c:a7:46:98:82:84:19: b6:a0:ed:39:5f:d1:65:2a:a8:a6:cd:68:35:77:1d: 62:f8:77:e6:38:14:3f:9e:a3:53:1c:3b:5f:a6:bf: 42:a4:67:e1:5c:6f:c7:ed:89:03:ab:23:8a:d7:09: 1d:4b:11:bc:a1:97:77:b6:55:82:6d:ca:68:d5:d3: b7:eb:3c:51:f7:f9:25:43:98:5c:e3:65:10:51:fb: 98:f4:c7:5c:88:04:f2:b5:5c:98:86:5d:1d:db:7f: 59:77:fb:41:ab:34:6a:04:0a:df:5b:5a:a9:2a:b8: 0e:41:0e:f8:00:96:93:d2:5a:54:ab:f9:d8:b1:78: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42716 Signature Algorithm: sha256WithRSAEncryption 1c:11:4f:24:b8:e9:10:55:e9:67:49:22:4d:f7:c4:fe:04:92: bf:b6:f3:f8:58:be:18:2a:80:2e:26:77:98:b7:ce:5d:66:d3: 77:61:7d:72:b2:69:78:d1:9c:eb:36:cb:fd:a3:08:d1:9f:d7: c2:a3:8a:57:cb:3d:65:f0:da:4e:cf:c4:88:d1:8d:d1:30:35: 4c:36:51:d6:e1:b9:27:99:90:95:30:e3:1f:f9:bd:bd:b4:81: 31:39:9a:5f:4c:0d:5c:94:d7:7a:ef:16:76:72:e6:8a:ff:f5: 18:22:b1:89:89:2e:32:0c:ad:66:87:4b:d5:52:72:89:49:68: 8f:6a:f5:40:1c:45:9b:a2:c4:f7:93:c1:af:60:47:a4:5d:c7: 2b:6b:76:20:fb:94:bf:0d:5f:04:79:7b:2b:65:28:57:2c:bb: 52:b6:a7:14:b7:48:0d:bb:32:fa:4f:15:ca:1a:c6:06:4c:1d: 8d:28:37:77:fa:c3:57:a4:80:30:7d:f2:f2:17:51:7b:12:c1: 0e:f1:6e:f6:29:91:21:e1:4d:f5:1a:b5:ca:ef:34:00:59:7a: b2:5a:fc:97:ab:15:d2:db:66:1c:86:57:07:17:58:d2:b3:f6: cd:20:de:d5:92:e9:76:c2:d6:46:a3:ac:18:e0:26:54:49:04: ab:51:ae:50 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gIAw71Rczf6WUQmcnrFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNkMDcyY2NlZjAwYmY0NjRkNjYwZGJkMDVkYWRhMWRhMzNkMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsgeyknddsjbmZ5ANWk1HDL7UIj2 uPJPrw75bb5m4U49x4Wt/6WIgFRhCGzuw3uLaxOtpFioPUC+Jx3ZpVOE3BcQGoPs ZO97pbnm+CfOFCXgS0juxXpS1pnN9usi5WUeKEO4Y9gtqYN5RCOyQN4LmczW2Lhi g8+7r4A1gNK+RBynRpiChBm2oO05X9FlKqimzWg1dx1i+HfmOBQ/nqNTHDtfpr9C pGfhXG/H7YkDqyOK1wkdSxG8oZd3tlWCbcpo1dO36zxR9/klQ5hc42UQUfuY9Mdc iATytVyYhl0d239Zd/tBqzRqBArfW1qpKrgOQQ74AJaT0lpUq/nYsXj2swIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBU9ByzO8Av0ZNZg29BdraHaM9LIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzY0YjFl Ni0wYTFmLTQwZWMtOTQzNy0wNGE0YzJjNDFjMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjRiMWU2 LTBhMWYtNDBlYy05NDM3LTA0YTRjMmM0MWMzNC8xL0ZUMEhMTTd3Q19SazFtRGIw RjJ0b2RvejBzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDTUnYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCm3DANBgkqhkiG9w0BAQsFAAOCAQEAHBFPJLjpEFXpZ0kiTffE/gSSv7bz+Fi+ GCqALiZ3mLfOXWbTd2F9crJpeNGc6zbL/aMI0Z/XwqOKV8s9ZfDaTs/EiNGN0TA1 TDZR1uG5J5mQlTDjH/m9vbSBMTmaX0wNXJTXeu8WdnLmiv/1GCKxiYkuMgytZodL 1VJyiUloj2r1QBxFm6LE95PBr2BHpF3HK2t2IPuUvw1fBHl7K2UoVyy7UranFLdI Dbsy+k8VyhrGBkwdjSg3d/rDV6SAMH3y8hdRexLBDvFu9imRIeFN9Rq1yu80AFl6 slr8l6sV0ttmHIZXBxdY0rP2zSDe1ZLpdsLWRqOsGOAmVEkEq1GuUA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:30 2026 by rpki-client