This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer (raw, json) Hash identifier: 27L0OtdDnIcXvbvxloBUAJtgOKdFKz1qLX7yKtbuov8= Subject key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1586B9018DD39CEF2242E7A861C680 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215592 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:86:b9:01:8d:d3:9c:ef:22:42:e7:a8:61:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1617d0afeabbf339b06db283c4b8e027a04abcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:de:24:a6:1b:92:22:2f:41:c0:55:a2:a1: e7:a5:c0:f9:3c:6b:26:7b:2c:14:84:4a:dc:36:57: 05:da:30:90:4e:78:7c:38:23:f1:ec:d8:9e:98:a7: 53:ad:e9:e1:4b:dd:51:c4:c2:bb:c0:a1:8d:39:84: 3f:77:5e:f5:61:d5:88:03:2d:2f:8f:04:a1:a8:7c: 5a:66:53:b4:0c:36:3c:4d:7b:1a:c7:ad:3d:06:1c: c7:53:00:6e:c1:46:54:08:8e:19:a7:18:a8:8e:bd: a6:ff:4e:38:8d:81:ee:03:0c:59:d7:f7:5c:0d:60: c5:40:2a:e0:eb:3e:1d:ef:1b:8c:45:44:c8:99:25: 06:e1:c1:4f:bb:e6:18:86:af:0c:ea:ce:fb:e8:9b: 3a:b5:24:84:c1:e0:fc:b5:60:85:8c:60:3a:5a:7e: 3d:6b:3b:19:f3:80:ae:e0:2d:86:bd:33:75:fd:1a: 11:f8:8d:6c:06:4c:5e:23:36:43:fe:d2:25:0d:23: c7:a4:58:46:25:ea:97:ce:55:03:50:e0:83:87:2e: ce:8e:9b:a9:4e:65:15:61:b5:2f:01:05:44:d5:b6: aa:a2:c9:c5:3a:6e:09:53:71:16:41:9c:a1:d8:12: b0:3f:cb:3f:3d:0b:ce:25:56:cd:1e:ec:cf:22:95: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215592 Signature Algorithm: sha256WithRSAEncryption 5b:3d:9d:c2:a2:7d:2b:51:3e:b7:e4:dd:42:bb:da:03:09:e5: b1:6e:4e:ae:31:51:28:77:00:be:90:0e:9c:3f:0b:11:ca:02: b7:cd:18:45:ea:af:4b:84:ba:b7:24:24:f5:f2:f2:b7:33:a2: 4b:59:77:be:9a:17:10:b1:32:c1:b8:da:f2:8e:d9:6c:67:02: 5e:63:69:3e:78:46:f5:41:96:76:2d:44:d8:c8:09:0d:93:34: 1a:b9:da:2a:2f:7f:b8:95:a7:75:ee:9e:6a:44:12:1b:8e:02: 4c:8d:db:fd:19:ec:ec:b8:32:75:a2:d7:fd:69:d0:7d:50:01: 31:bd:5a:52:fd:33:7a:9a:28:3a:6d:1a:b5:0a:a8:52:89:e6: 5c:e1:37:a2:db:52:e3:86:a7:55:0a:d4:eb:df:08:2e:d0:05: 21:ae:dc:fd:10:f3:1b:a2:dd:c3:fc:ad:6f:2e:f8:6f:0b:9c: 03:0b:d7:27:44:76:d1:d5:70:81:95:1e:dd:da:4e:72:84:16: bc:05:ad:8d:dd:9f:08:ad:cc:cd:f4:c7:69:37:9e:62:6e:26: cc:fa:61:93:e7:53:6d:01:02:eb:88:55:88:18:42:01:13:d2: 92:40:5c:a1:77:3d:34:e1:a2:69:de:c0:50:e1:e3:72:a0:82: 98:90:eb:cf -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FYa5AY3TnO8iQueoYcaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjE3ZDBhZmVhYmJmMzM5YjA2ZGIyODNjNGI4ZTAyN2EwNGFiY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyzeJKYbkiIvQcBVoqHnpcD5PGsm eywUhErcNlcF2jCQTnh8OCPx7NiemKdTrenhS91RxMK7wKGNOYQ/d171YdWIAy0v jwShqHxaZlO0DDY8TXsax609BhzHUwBuwUZUCI4Zpxiojr2m/044jYHuAwxZ1/dc DWDFQCrg6z4d7xuMRUTImSUG4cFPu+YYhq8M6s776Js6tSSEweD8tWCFjGA6Wn49 azsZ84Cu4C2GvTN1/RoR+I1sBkxeIzZD/tIlDSPHpFhGJeqXzlUDUOCDhy7Ojpup TmUVYbUvAQVE1baqosnFOm4JU3EWQZyh2BKwP8s/PQvOJVbNHuzPIpXM3wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBYX0K/qu/M5sG2yg8S44CegSryuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2E0YTJj ZC01ZGJmLTQwMjktYThhMS1kN2YyMWZjMTM1MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYTRhMmNk LTVkYmYtNDAyOS1hOGExLWQ3ZjIxZmMxMzUwZS8xL0ZoZlFyLXE3OHptd2JiS0R4 TGpnSjZCS3ZLNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKKDANBgkqhkiG9w0BAQsFAAOCAQEAWz2dwqJ9K1E+ t+TdQrvaAwnlsW5OrjFRKHcAvpAOnD8LEcoCt80YReqvS4S6tyQk9fLytzOiS1l3 vpoXELEywbja8o7ZbGcCXmNpPnhG9UGWdi1E2MgJDZM0GrnaKi9/uJWnde6eakQS G44CTI3b/Rns7LgydaLX/WnQfVABMb1aUv0zepooOm0atQqoUonmXOE3ottS44an VQrU698ILtAFIa7c/RDzG6Ldw/ytby74bwucAwvXJ0R20dVwgZUe3dpOcoQWvAWt jd2fCK3MzfTHaTeeYm4mzPphk+dTbQEC64hViBhCARPSkkBcoXc9NOGiad7AUOHj cqCCmJDrzw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:12 2026 by rpki-client