This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer File: FmVeVZX1o8BxwSsXnbknncfbCRM.cer (raw, json) Hash identifier: eV+AD8cRFwhsIkyA7fQohFkdRy83gG455RDsBMuENX8= Subject key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4D4821716E9ABDA646F929E344755 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.26.237.0/24 IP: 2a11:c7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d4:82:17:16:e9:ab:da:64:6f:92:9e:34:47:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16655e5595f5a3c071c12b179db9279dc7db0913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:a3:34:98:d1:df:81:c7:4f:61:fc:c9:c5: ba:d5:58:1a:6c:40:5e:1b:95:ce:4a:96:e7:55:2b: 5a:b9:4e:07:82:8a:c5:4a:53:e8:2c:f5:67:d6:e0: 89:e9:77:a9:11:3d:af:6f:bd:63:59:e2:b4:ed:67: 54:6f:b9:71:7a:db:f9:d9:31:0f:7a:84:fe:75:f5: 50:f1:80:99:80:b4:1d:19:e9:48:f4:04:77:26:76: eb:63:23:e2:31:ef:12:99:5d:8b:10:88:e7:62:0e: 2c:68:ab:24:d8:eb:36:9d:38:2c:a4:e2:7d:0e:f6: 47:93:52:c8:fa:3b:5c:29:7c:10:4c:bd:d2:78:48: 45:24:61:6f:01:1c:1b:ab:48:73:d1:d3:5c:4a:2a: ee:66:56:61:a6:a8:ed:bb:9f:17:85:f2:de:6f:ea: 34:76:2d:58:0f:f5:73:92:77:28:69:95:95:5e:fe: a2:59:05:3c:19:00:69:91:e2:ea:2c:07:a6:12:75: 64:50:78:3b:ef:d6:27:aa:56:44:33:9b:11:a1:09: 57:41:77:ba:cc:06:38:36:87:7c:91:59:a3:e6:fa: 83:37:cd:fe:50:e7:a8:68:df:95:f3:f1:06:cf:f4: 9f:0e:06:4c:09:e0:f5:61:60:e0:19:f0:bd:b9:29: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.237.0/24 IPv6: 2a11:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 4c:3d:c8:85:64:ba:12:4a:70:36:f8:3c:fe:ef:54:59:5f:50: 08:4c:80:83:b1:97:8f:25:68:8c:6b:63:78:ba:50:ab:d6:43: 7e:0c:a5:c7:e8:f2:ab:0e:20:1d:72:ab:fd:e0:46:21:17:06: 46:1c:8b:3a:0c:f9:60:65:34:9f:e8:fd:ae:8f:88:37:d1:f5: 83:6f:80:d2:be:d9:41:a7:2a:de:cc:19:67:24:e8:63:c9:e8: 3b:be:ec:8f:36:f6:5e:5d:c9:96:75:3c:81:c3:fe:d9:dc:1d: 12:e9:c2:57:d0:c1:5f:3a:6a:c9:c6:22:4b:21:e3:dc:1f:31: ba:1c:28:57:76:66:76:d6:7c:88:18:df:7d:01:d1:89:2d:96: 93:e7:ff:c6:1e:54:8b:7d:b8:59:52:74:40:d7:a1:95:20:ec: e5:fe:2d:06:f3:9d:9b:70:55:36:f2:9a:d1:6b:90:b0:c2:66: 52:7a:f7:85:a3:6e:b8:a2:b7:2f:db:ea:82:48:bf:b5:88:ec: a3:77:da:b7:8e:58:3c:af:a6:e7:3d:14:09:2d:70:a1:2e:e4: 95:15:e0:c0:ec:ea:3a:16:30:22:0c:6c:52:ad:a1:7a:6a:87: fb:1b:2d:f1:48:0a:e3:d2:32:96:4d:02:e9:ec:54:70:24:28: de:92:66:f5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pNSCFxbpq9pkb5KeNEdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjY1NWU1NTk1ZjVhM2MwNzFjMTJiMTc5ZGI5Mjc5ZGM3ZGIwOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPyjNJjR34HHT2H8ycW61VgabEBe G5XOSpbnVStauU4HgorFSlPoLPVn1uCJ6XepET2vb71jWeK07WdUb7lxetv52TEP eoT+dfVQ8YCZgLQdGelI9AR3JnbrYyPiMe8SmV2LEIjnYg4saKsk2Os2nTgspOJ9 DvZHk1LI+jtcKXwQTL3SeEhFJGFvARwbq0hz0dNcSiruZlZhpqjtu58XhfLeb+o0 di1YD/VzkncoaZWVXv6iWQU8GQBpkeLqLAemEnVkUHg779YnqlZEM5sRoQlXQXe6 zAY4Nod8kVmj5vqDN83+UOeoaN+V8/EGz/SfDgZMCeD1YWDgGfC9uSkTfQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBZlXlWV9aPAccErF525J53H2wkTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzY3MTlj ZC04NjRhLTQyZjAtODE4Zi1kZDQ4MDQ4NDBkZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNjcxOWNk LTg2NGEtNDJmMC04MThmLWRkNDgwNDg0MGRkNi8xL0ZtVmVWWlgxbzhCeHdTc1hu YmtubmNmYkNSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwhrtMA0EAgACMAcDBQMqEcfAMA0GCSqGSIb3 DQEBCwUAA4IBAQBMPciFZLoSSnA2+Dz+71RZX1AITICDsZePJWiMa2N4ulCr1kN+ DKXH6PKrDiAdcqv94EYhFwZGHIs6DPlgZTSf6P2uj4g30fWDb4DSvtlBpyrezBln JOhjyeg7vuyPNvZeXcmWdTyBw/7Z3B0S6cJX0MFfOmrJxiJLIePcHzG6HChXdmZ2 1nyIGN99AdGJLZaT5//GHlSLfbhZUnRA16GVIOzl/i0G852bcFU28prRa5CwwmZS eveFo264orcv2+qCSL+1iOyjd9q3jlg8r6bnPRQJLXChLuSVFeDA7Oo6FjAiDGxS raF6aof7Gy3xSArj0jKWTQLp7FRwJCjekmb1 -----END CERTIFICATE-----Generated at Mon Jan 12 01:37:47 2026 by rpki-client