This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer File: FT8kGD1slRhZGTSebpJTNzZDe5Q.cer (raw, json) Hash identifier: J/J6BEoNrUOZgWJ9ymwVQQeK0KpMTwBgFgqu24qYRKI= Subject key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E01F318DFEAECE566730C546C4FFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216146 IP: 194.187.253.0/24 IP: 2a13:e940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:01:f3:18:df:ea:ec:e5:66:73:0c:54:6c:4f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153f24183d6c95185919349e6e92533736437b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:2e:90:f5:9c:a3:e8:af:bb:b8:e7:e0:fe: 25:80:88:1c:d1:c2:eb:ac:58:f3:9b:ab:95:71:95: d6:59:a5:9a:09:f8:a0:76:86:65:bb:44:22:e9:9e: 69:c5:e8:d2:17:01:ff:85:eb:0f:6a:53:f3:03:a8: 6c:b2:84:07:ce:11:d9:7c:c9:f7:f5:20:53:1e:03: 4a:38:bb:1c:b7:e7:80:ab:69:58:3b:8d:5e:6c:ae: a5:32:c1:ee:e9:41:fd:f7:47:65:7a:ac:4f:6a:50: ed:ee:c9:2a:56:15:85:1d:04:76:db:8c:61:a9:3b: b3:79:49:18:2c:6f:90:4b:ce:39:fa:7d:9c:26:f2: 07:bb:a8:95:c1:bd:b4:72:7a:fc:6c:98:99:52:ce: 2c:e5:c6:5c:f5:f0:90:86:cf:99:25:cc:78:17:7f: 80:31:ac:43:4e:93:02:1c:a6:61:7f:22:16:16:7e: ea:08:63:9b:28:53:e3:c6:dd:0c:9e:2b:9c:09:aa: 1c:4d:76:c0:1e:a9:0d:8c:69:d6:cf:e6:97:67:d2: a4:0f:59:6a:24:f9:d8:dd:7f:12:6a:6a:12:1b:ed: ae:a0:7a:b1:74:cd:ef:23:95:28:94:98:d1:29:70: a6:40:6f:cc:a2:9b:08:d6:22:3c:05:e7:36:b0:33: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.253.0/24 IPv6: 2a13:e940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216146 Signature Algorithm: sha256WithRSAEncryption 83:2e:03:c0:4f:17:cc:c3:cf:6d:ae:6d:44:8c:2b:1b:84:41: 4d:ef:85:e5:90:89:e4:7f:a7:d2:d9:84:c9:20:96:66:54:ed: 23:be:74:c8:7b:be:71:b0:67:25:51:bd:5a:6a:43:66:81:84: 80:93:32:35:1e:15:1a:1d:54:70:ef:6c:75:46:7c:c7:ae:c3: ca:d1:58:e4:c9:c3:4a:a4:96:a7:aa:79:f1:19:56:a0:0f:c3: 78:c3:01:74:44:92:7b:e7:9e:54:91:08:60:4e:89:7b:f4:d8: 4a:04:91:10:bf:52:9b:23:ca:e0:7b:7e:5f:64:3f:67:59:33: 70:b4:90:96:0e:38:db:88:dd:c5:ad:5f:16:f9:86:f1:6e:f1: d2:06:08:00:97:bf:18:0d:d2:eb:0c:37:ba:58:2b:4b:1d:16: c2:54:3e:27:43:13:83:09:f8:71:d0:a0:c7:ed:76:e1:75:57: 05:bc:34:d7:d6:73:f9:6d:20:01:e8:95:d3:5c:aa:42:74:bf: b1:c8:b8:41:19:56:87:24:34:15:dd:62:24:e3:a5:05:f6:c4: 33:d4:1d:b6:ba:ff:aa:f6:6f:6d:47:d3:4c:9f:3a:de:8c:9e: 7c:84:3c:b5:d5:42:c7:b6:65:c3:01:b9:e2:0f:c7:27:da:23: fc:22:f6:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fgHzGN/q7OVmcwxUbE/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNmMjQxODNkNmM5NTE4NTkxOTM0OWU2ZTkyNTMzNzM2NDM3Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SAukPWco+ivu7jn4P4lgIgc0cLr rFjzm6uVcZXWWaWaCfigdoZlu0Qi6Z5pxejSFwH/hesPalPzA6hssoQHzhHZfMn3 9SBTHgNKOLsct+eAq2lYO41ebK6lMsHu6UH990dleqxPalDt7skqVhWFHQR224xh qTuzeUkYLG+QS845+n2cJvIHu6iVwb20cnr8bJiZUs4s5cZc9fCQhs+ZJcx4F3+A MaxDTpMCHKZhfyIWFn7qCGObKFPjxt0MniucCaocTXbAHqkNjGnWz+aXZ9KkD1lq JPnY3X8SamoSG+2uoHqxdM3vI5UolJjRKXCmQG/MopsI1iI8Bec2sDNoCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2IwNWUw OC0wNzYyLTRkYzctYTRiMC01ODA1ZDNmM2RiYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjA1ZTA4 LTA3NjItNGRjNy1hNGIwLTU4MDVkM2YzZGJiMi8xL0ZUOGtHRDFzbFJoWkdUU2Vi cEpUTnpaRGU1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwrv9MA0EAgACMAcDBQMqE+lAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMUjANBgkqhkiG9w0BAQsFAAOCAQEAgy4DwE8XzMPP ba5tRIwrG4RBTe+F5ZCJ5H+n0tmEySCWZlTtI750yHu+cbBnJVG9WmpDZoGEgJMy NR4VGh1UcO9sdUZ8x67DytFY5MnDSqSWp6p58RlWoA/DeMMBdESSe+eeVJEIYE6J e/TYSgSREL9SmyPK4Ht+X2Q/Z1kzcLSQlg4424jdxa1fFvmG8W7x0gYIAJe/GA3S 6ww3ulgrSx0WwlQ+J0MTgwn4cdCgx+124XVXBbw019Zz+W0gAeiV01yqQnS/sci4 QRlWhyQ0Fd1iJOOlBfbEM9Qdtrr/qvZvbUfTTJ863oyefIQ8tdVCx7ZlwwG54g/H J9oj/CL21A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:06 2026 by rpki-client