This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer (raw, json) Hash identifier: NVPHyHeu0JmWtoSlNcUp2EWLI5hlsheisXDEWt4rOGM= Subject key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B2D500035A0D1BFCA5D72A239AF53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204901 AS: 209861 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2d:50:00:35:a0:d1:bf:ca:5d:72:a2:39:af:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:fd:ed:fa:8e:c7:8e:14:10:eb:c6:ea:53: 6f:49:7a:bb:5b:34:29:8e:68:a6:45:08:17:63:1e: 14:2a:cb:9e:2d:8c:b5:f1:d4:e1:60:f7:69:e3:0c: 10:0c:75:0b:f2:56:86:53:52:29:92:25:4b:03:46: 90:94:46:3a:7d:0d:bd:2b:c8:07:68:c7:f7:4c:6e: dc:e3:89:23:c3:92:7d:f3:2d:b5:66:61:d3:3e:d7: 4c:11:b6:5a:74:8f:63:d2:c6:ad:c5:4b:88:0e:4e: 8a:95:57:88:d4:55:23:b0:47:ac:13:f8:99:9a:2a: 4c:2e:5e:ae:5f:6a:48:f9:30:21:7b:c9:8c:ea:11: 33:63:4b:86:ae:5f:19:5d:f2:a3:78:a7:50:25:ec: e7:9b:62:07:a0:c1:b8:73:87:ee:40:93:e7:35:7f: ea:4e:ed:4c:14:aa:7a:34:39:59:50:d3:20:72:3c: ac:e5:c9:37:9f:e6:a8:0c:bb:7c:35:33:e5:df:9a: 9b:83:1e:a6:dd:02:09:26:f9:3a:54:06:78:33:09: a5:f8:89:f3:1e:85:8d:d5:ed:11:36:cf:db:81:7f: 2a:ca:58:8e:eb:4e:ce:ad:06:d4:5e:86:a7:2b:5f: d2:c0:64:8e:b4:24:52:56:55:e8:a0:8e:c8:a2:ba: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204901 209861 Signature Algorithm: sha256WithRSAEncryption 9d:ad:46:43:7a:94:37:7c:72:77:68:18:ed:ce:9a:13:d0:7d: 40:d3:d6:8a:1c:05:dc:42:8a:0f:56:b4:87:25:cb:4e:11:1d: 25:64:ee:28:9c:c5:0d:1c:7d:2d:bf:5d:b2:23:dc:31:28:01: 5a:94:95:ab:55:bf:3c:0d:28:89:6d:25:4d:8a:0c:1e:42:fd: d3:44:29:34:c0:86:83:3a:40:24:09:7b:d9:ee:a0:d7:b4:f2: 7c:87:fd:8f:3d:80:c0:b8:64:ef:5f:05:65:6e:fa:07:70:4d: da:12:9c:60:e5:ec:32:1a:33:b5:7e:7a:a4:d0:ea:75:e2:9f: da:c7:1e:fd:03:ea:05:30:40:cd:08:50:40:7a:b9:47:40:c6: 4b:c1:44:dc:8c:3d:fc:cc:10:0d:7a:b0:fd:e7:ff:10:45:df: 37:87:b4:2c:b8:1d:a2:8b:37:fd:14:9c:45:88:52:38:be:43: 22:c3:4b:40:77:2f:6e:c9:2d:e0:ea:71:f8:a3:88:79:e7:b7: 41:3a:05:f3:38:e4:f4:a1:48:d6:92:94:ac:53:cf:c0:04:a0: 8c:d3:ba:f7:21:55:4f:f6:c3:a8:5b:b9:cf:bf:c3:d4:32:37: 7e:cf:2b:66:2e:fc:60:7d:6b:e0:f0:8f:63:8f:ab:93:a0:b3: 49:90:aa:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Wy1QADWg0b/KXXKiOa9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFlMGVhZTc3YTk4YzM2MjNkMTc4MWY5YWY0NTU3ZDM1NDFkMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2D97fqOx44UEOvG6lNvSXq7WzQp jmimRQgXYx4UKsueLYy18dThYPdp4wwQDHUL8laGU1IpkiVLA0aQlEY6fQ29K8gH aMf3TG7c44kjw5J98y21ZmHTPtdMEbZadI9j0satxUuIDk6KlVeI1FUjsEesE/iZ mipMLl6uX2pI+TAhe8mM6hEzY0uGrl8ZXfKjeKdQJeznm2IHoMG4c4fuQJPnNX/q Tu1MFKp6NDlZUNMgcjys5ck3n+aoDLt8NTPl35qbgx6m3QIJJvk6VAZ4Mwml+Inz HoWN1e0RNs/bgX8qyliO607OrQbUXoanK1/SwGSOtCRSVlXooI7IorrnAQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBYeDq53qYw2I9F4H5r0VX01QdK6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzk2OTcw OC1lNGI5LTRhYjItYjUwYi0yOWRjOTUzNjIwYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvOTY5NzA4 LWU0YjktNGFiMi1iNTBiLTI5ZGM5NTM2MjBjMS8xL0ZoNE9ybmVwakRZajBYZ2Zt dlJWZlRWQjByby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMgZQIDAzPFMA0GCSqGSIb3DQEBCwUAA4IBAQCdrUZD epQ3fHJ3aBjtzpoT0H1A09aKHAXcQooPVrSHJctOER0lZO4onMUNHH0tv12yI9wx KAFalJWrVb88DSiJbSVNigweQv3TRCk0wIaDOkAkCXvZ7qDXtPJ8h/2PPYDAuGTv XwVlbvoHcE3aEpxg5ewyGjO1fnqk0Op14p/axx79A+oFMEDNCFBAerlHQMZLwUTc jD38zBANerD95/8QRd83h7QsuB2iizf9FJxFiFI4vkMiw0tAdy9uyS3g6nH4o4h5 57dBOgXzOOT0oUjWkpSsU8/ABKCM07r3IVVP9sOoW7nPv8PUMjd+zytmLvxgfWvg 8I9jj6uToLNJkKoa -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:43 2026 by rpki-client