This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer File: FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer (raw, json) Hash identifier: 7Jtibsgh0VYZpH5+PyMrQLaeA/1CQSvqypxuGsntTUc= Subject key identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C22E896ABBACF198CFA39D8860C83E5F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 09:49:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48105 AS: 57758 IP: 185.167.204.0/22 IP: 2a0b:b600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:e8:96:ab:ba:cf:19:8c:fa:39:d8:86:0c:83:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 09:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:f3:17:6b:98:ec:79:69:3b:a0:fa:04:57: b6:ed:5f:de:03:c3:e9:06:8e:b5:9c:e9:46:9a:46: 5d:98:17:10:3e:b5:d6:a0:05:14:d0:b3:3e:b1:22: 14:67:37:48:d0:28:50:7d:51:87:4e:fc:bb:f5:d0: 59:b7:f4:29:d3:04:87:0b:cb:6f:70:d7:82:8f:96: 0a:90:d9:5f:bb:e3:82:25:c9:a6:16:b1:94:eb:dc: 91:0d:71:ec:11:0f:e1:a6:f7:b0:d2:59:9b:57:c9: f6:c1:ac:e6:51:a2:49:1b:5f:ce:7d:04:32:8f:88: d8:2e:18:3c:4c:d4:77:b4:31:21:ef:71:77:eb:14: bf:91:fa:28:84:a2:5b:90:80:72:37:3e:45:5c:28: 0e:42:e6:31:59:04:de:13:6a:cb:7d:14:c8:42:78: 25:6c:0b:dc:59:96:0f:89:5f:48:73:73:9a:fd:6d: 1d:e1:e1:e5:d7:48:30:5c:13:d0:28:1a:42:71:a0: be:82:9e:e1:4f:d9:75:bc:ce:e2:a3:42:3c:5a:c3: 48:8c:d2:11:ba:60:37:68:68:d0:f0:8d:06:fe:1c: f0:90:6c:42:39:a3:96:5f:9a:96:d9:87:78:bd:d1: 10:67:07:8b:04:7e:68:72:26:35:24:16:89:45:03: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.204.0/22 IPv6: 2a0b:b600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48105 57758 Signature Algorithm: sha256WithRSAEncryption 00:a1:58:ee:a1:82:5f:3c:2f:4a:28:e0:99:a1:8f:f0:36:f0: 04:0c:52:b7:1b:b9:37:5c:4c:53:2a:76:c9:53:d1:6d:1f:29: 44:9a:76:75:54:15:08:36:06:1f:de:1d:f9:90:fc:0d:77:5b: 57:29:6e:cf:30:0f:31:1f:88:9b:8c:49:b3:41:e4:8d:78:55: a4:92:d0:5f:95:3b:94:5b:66:54:4a:f4:5f:e8:87:2e:b5:37: b1:96:61:d5:d8:d2:03:9a:58:98:8c:62:c0:bc:bc:3e:fa:06: 8e:67:df:d0:3f:f0:13:6f:fa:92:e7:4e:a0:65:8d:0f:5d:ab: 0c:18:58:b4:19:3e:80:ea:70:3f:f2:5a:45:69:96:33:9f:b0: 08:1c:61:55:32:91:95:0a:c6:19:d5:e6:b9:7e:2d:55:fc:0f: a4:71:fd:5a:44:ae:9c:c2:cb:b9:f9:3d:94:63:cc:c7:a2:8a: 91:a5:21:ed:0d:9c:6e:a9:f5:31:cc:56:a7:30:6c:5d:ea:13: 95:e7:27:d2:cb:40:38:e0:6a:9f:c2:34:16:be:b5:15:3e:72: ba:14:02:da:d0:c7:b8:3a:7c:fb:83:eb:05:1a:d2:36:c7:d0: 71:3f:38:6a:31:32:5f:83:b0:95:08:1d:d7:28:67:d1:06:14: d6:6f:96:69 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZwi6Jarus8ZjPo52IYMg+XwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMDk0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTZmNjdkNTAwY2E5NmE0OGQwZTRiNmE0N2M0MWIyMzNiNzQ2NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/zF2uY7HlpO6D6BFe27V/eA8Pp Bo61nOlGmkZdmBcQPrXWoAUU0LM+sSIUZzdI0ChQfVGHTvy79dBZt/Qp0wSHC8tv cNeCj5YKkNlfu+OCJcmmFrGU69yRDXHsEQ/hpvew0lmbV8n2wazmUaJJG1/OfQQy j4jYLhg8TNR3tDEh73F36xS/kfoohKJbkIByNz5FXCgOQuYxWQTeE2rLfRTIQngl bAvcWZYPiV9Ic3Oa/W0d4eHl10gwXBPQKBpCcaC+gp7hT9l1vM7io0I8WsNIjNIR umA3aGjQ8I0G/hzwkGxCOaOWX5qW2Yd4vdEQZweLBH5ociY1JBaJRQP60wIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFBVvZ9UAypakjQ5LakfEGyM7dGa9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzE4MzE4 Mi00MzBiLTRkNjgtOTE0OS0zNTEzOTkyZWJlYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTgzMTgy LTQzMGItNGQ2OC05MTQ5LTM1MTM5OTJlYmVhOS8xL0ZXOW4xUURLbHFTTkRrdHFS OFFiSXp0MFpyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuafMMA0EAgACMAcDBQMqC7YAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwC76QIDAOGeMA0GCSqGSIb3DQEBCwUAA4IBAQAAoVju oYJfPC9KKOCZoY/wNvAEDFK3G7k3XExTKnbJU9FtHylEmnZ1VBUINgYf3h35kPwN d1tXKW7PMA8xH4ibjEmzQeSNeFWkktBflTuUW2ZUSvRf6IcutTexlmHV2NIDmliY jGLAvLw++gaOZ9/QP/ATb/qS506gZY0PXasMGFi0GT6A6nA/8lpFaZYzn7AIHGFV MpGVCsYZ1ea5fi1V/A+kcf1aRK6cwsu5+T2UY8zHooqRpSHtDZxuqfUxzFanMGxd 6hOV5yfSy0A44GqfwjQWvrUVPnK6FALa0Me4Onz7g+sFGtI2x9BxPzhqMTJfg7CV CB3XKGfRBhTWb5Zp -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:16 2026 by rpki-client