This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer (raw, json) Hash identifier: ViAUt1cKIedrS9N5HZr+NvEnnn+f1O+QLVxHCP8gWbY= Subject key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791043E81E780993DEFE7ECF547E41A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.248.180.0/22 IP: 193.186.5.0 -- 193.186.6.255 IP: 2a0d:ee80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:43:e8:1e:78:09:93:de:fe:7e:cf:54:7e:41:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:0e:b0:0c:2f:31:67:ca:9c:3a:25:c8:8a: 58:30:4f:8f:06:03:9a:a2:b9:d1:5d:7e:75:55:b0: 66:de:2b:32:71:7c:88:c2:eb:0c:2b:5f:18:30:bd: 96:35:5e:e6:3b:a0:3d:d2:74:25:df:88:50:f5:39: 98:ac:c9:d6:a7:62:9f:03:7f:db:ae:63:22:e7:05: e5:46:31:de:63:f5:49:46:89:94:36:29:4d:31:10: 7e:36:85:c2:08:81:54:0e:01:18:46:10:c9:8c:83: 6b:06:6a:74:c4:07:4c:e7:38:c1:97:68:a8:74:83: e8:ab:2e:b1:e6:46:10:a8:b7:b2:f4:70:af:c5:9e: af:75:19:04:3e:ff:59:93:78:df:65:7a:1d:d9:8c: af:c4:b3:8b:87:e3:01:85:50:a4:c4:fe:ce:05:26: f6:c6:66:ee:3d:13:a8:a8:77:1f:24:5f:32:4a:1c: e2:db:94:26:d3:57:25:10:7e:c1:eb:31:a1:85:50: 50:3a:ff:1c:b3:1f:d3:9d:a5:77:14:d1:d5:fa:c8: df:8c:1a:7d:80:2e:83:f8:99:68:35:ff:d7:fa:a0: c1:f2:07:29:55:fa:1a:4b:3f:dc:69:f5:c2:4e:35: fd:c4:9a:2f:be:e2:f5:be:a3:66:60:80:0f:5e:2e: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.180.0/22 193.186.5.0-193.186.6.255 IPv6: 2a0d:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 98:7f:5f:c7:8f:a2:cf:69:d6:4e:15:8a:1c:b8:a9:27:fd:4a: 95:5c:92:77:50:79:d6:ca:46:97:a4:8b:73:f2:d5:92:03:5b: e2:f7:b6:ea:ae:83:a3:0b:bc:9b:be:25:d3:f9:f1:71:78:76: df:a7:a9:8a:13:37:5a:64:c9:0b:31:66:eb:d4:ad:09:e2:22: 04:8c:4e:88:90:88:79:b5:4a:39:35:79:bb:c8:74:66:8f:1d: 43:2d:85:d6:5e:21:a6:52:01:4f:09:f3:79:37:97:98:24:ba: f9:41:88:fb:2d:1c:6b:f1:65:f7:93:a5:05:1e:78:01:df:ca: a3:e3:33:20:ef:c7:51:b8:83:d7:29:6b:0e:a4:1b:32:1e:7a: 97:26:35:b7:7e:0f:db:67:5d:81:50:8b:29:2a:73:2f:cc:f3: b7:5e:18:eb:37:1d:fa:5d:a7:3a:09:0a:d5:a0:46:9d:6f:4d: e2:c7:54:5d:6e:0e:0b:67:af:ca:7b:4a:cf:49:b3:08:a3:38: 69:ec:f9:30:fd:00:ca:76:5b:71:bf:af:c3:bc:c0:7a:3f:ab: 71:9e:cb:ae:3a:85:19:fb:9f:9c:92:42:71:3a:f6:10:b4:4a: c8:16:dc:60:95:c8:09:77:37:f0:2e:bd:d6:66:68:09:fb:ae: 50:1d:91:ed -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt5EEPoHngJk97+fs9UfkGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjA5MjA2M2EyYTdkYzYwOWUyYjZmOWNjMGRhZjA0ZjFlOThiOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EOsAwvMWfKnDolyIpYME+PBgOa ornRXX51VbBm3isycXyIwusMK18YML2WNV7mO6A90nQl34hQ9TmYrMnWp2KfA3/b rmMi5wXlRjHeY/VJRomUNilNMRB+NoXCCIFUDgEYRhDJjINrBmp0xAdM5zjBl2io dIPoqy6x5kYQqLey9HCvxZ6vdRkEPv9Zk3jfZXod2YyvxLOLh+MBhVCkxP7OBSb2 xmbuPROoqHcfJF8yShzi25Qm01clEH7B6zGhhVBQOv8csx/TnaV3FNHV+sjfjBp9 gC6D+JloNf/X+qDB8gcpVfoaSz/cafXCTjX9xJovvuL1vqNmYIAPXi6ExwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBYJIGOip9xgnitvnMDa8E8emLntMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzdjMzYz YS05YmE3LTRkNDUtODNiNy02MGQzZmUxOWMzYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvN2MzNjNh LTliYTctNGQ0NS04M2I3LTYwZDNmZTE5YzNiYy8xL0Zna2dZNktuM0dDZUsyLWN3 TnJ3VHg2WXVlMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCufi0MAwDBADBugUDBADBugYwDQQCAAIwBwMF ACoN7oAwDQYJKoZIhvcNAQELBQADggEBAJh/X8ePos9p1k4Vihy4qSf9SpVckndQ edbKRpeki3Py1ZIDW+L3tuqug6MLvJu+JdP58XF4dt+nqYoTN1pkyQsxZuvUrQni IgSMToiQiHm1Sjk1ebvIdGaPHUMthdZeIaZSAU8J83k3l5gkuvlBiPstHGvxZfeT pQUeeAHfyqPjMyDvx1G4g9cpaw6kGzIeepcmNbd+D9tnXYFQiykqcy/M87deGOs3 HfpdpzoJCtWgRp1vTeLHVF1uDgtnr8p7Ss9JswijOGns+TD9AMp2W3G/r8O8wHo/ q3Gey646hRn7n5ySQnE69hC0SsgW3GCVyAl3N/AuvdZmaAn7rlAdke0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:52 2026 by rpki-client