This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer File: FnrFIxoNe8WCRZCgsvYh7emEdww.cer (raw, json) Hash identifier: rAwCWl7H2JnwhscGtifSHmZEryjHCorpaPMNCLQysvk= Subject key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367A5DCD40DBAF1A11FD37570C95B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206289 IP: 91.217.191.0/24 IP: 185.189.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7a:5d:cd:40:db:af:1a:11:fd:37:57:0c:95:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167ac5231a0d7bc5824590a0b2f621ede984770c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:90:51:2e:1e:49:80:6b:31:25:98:48:0e: b3:0b:2c:89:ef:db:8b:40:13:a5:11:54:a9:b4:14: 42:7f:8f:6e:3f:9b:a5:18:61:c9:77:dd:75:9e:9f: 58:aa:f0:86:96:58:b3:8c:db:64:c2:5b:fa:bd:6e: 3b:dd:0a:9f:54:96:c3:8b:6f:c9:8e:46:a0:6a:6c: 2b:f0:d6:74:39:a3:d1:89:b2:b1:b8:7c:55:c7:7c: d1:2c:a6:4e:21:3f:ac:8c:e7:bc:1b:b3:dd:04:a3: a4:dd:37:d5:38:e1:2a:68:92:1d:d5:9c:0a:bf:43: 16:6e:06:30:33:d2:b6:81:7a:f9:26:98:e6:b6:dc: 38:30:72:3c:d2:f4:50:ec:b0:07:bd:54:a3:a4:22: 71:a6:b1:90:aa:06:8d:2e:f0:15:e5:93:93:9c:7a: b4:cb:9e:2a:90:36:a9:98:88:5c:f1:5d:08:fc:64: 4a:3d:d8:3e:0b:cc:46:2c:5a:63:62:32:80:cf:41: b6:00:58:94:b7:43:b4:2b:40:8b:94:02:50:02:96: 1e:f7:d4:a1:88:d4:d1:15:03:f4:ff:e5:32:8b:0c: 9d:e5:de:ec:00:aa:7b:ad:ce:87:ce:61:54:2c:46: 06:5f:11:1d:ff:82:99:10:dc:cd:24:22:da:4a:96: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.191.0/24 185.189.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206289 Signature Algorithm: sha256WithRSAEncryption 43:02:cc:eb:c6:85:5d:6d:60:42:94:fb:21:41:af:09:d8:04: 46:53:37:a7:1e:e9:05:28:d5:94:a2:be:6a:0c:d3:95:a8:a5: 1f:1b:97:18:96:87:8f:6a:23:64:ba:22:3e:83:97:af:0a:34: 36:c5:77:26:c8:8c:67:e5:36:a5:a8:c3:7e:3a:94:b9:ef:b9: f1:ab:eb:d6:5a:51:fc:7e:af:75:16:18:03:30:ed:5f:6c:9d: 2d:47:51:df:b7:0c:88:f5:87:96:be:39:39:eb:ca:d7:21:ad: a4:8f:d6:2c:f7:a6:33:f5:97:e4:30:ad:89:df:db:22:2f:e1: 5b:cc:7e:ee:14:21:25:3d:ff:9a:81:4c:1c:c8:c6:e2:be:fd: ee:e4:04:e4:21:45:ce:11:95:b0:d3:3c:d2:86:11:4c:f8:d3: b1:a5:a4:b0:30:9f:80:11:80:f4:c4:e8:8a:2d:78:7c:c6:e8: 7b:93:09:f9:6c:f3:e7:9d:23:ea:07:ae:0b:b7:59:49:b9:e3: a9:75:c4:51:63:32:64:78:1f:23:73:5f:a9:8e:01:b9:62:03: 96:2c:77:2b:c4:46:88:17:e9:3c:e8:04:b8:30:fa:c0:0a:fe: 28:e2:18:6b:11:97:cf:cd:a4:cd:b2:6d:d5:ad:e6:09:7c:0f: 6c:73:17:37 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7NnpdzUDbrxoR/TdXDJW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjdhYzUyMzFhMGQ3YmM1ODI0NTkwYTBiMmY2MjFlZGU5ODQ3NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5aQUS4eSYBrMSWYSA6zCyyJ79uL QBOlEVSptBRCf49uP5ulGGHJd911np9YqvCGllizjNtkwlv6vW473QqfVJbDi2/J jkagamwr8NZ0OaPRibKxuHxVx3zRLKZOIT+sjOe8G7PdBKOk3TfVOOEqaJId1ZwK v0MWbgYwM9K2gXr5Jpjmttw4MHI80vRQ7LAHvVSjpCJxprGQqgaNLvAV5ZOTnHq0 y54qkDapmIhc8V0I/GRKPdg+C8xGLFpjYjKAz0G2AFiUt0O0K0CLlAJQApYe99Sh iNTRFQP0/+Uyiwyd5d7sAKp7rc6HzmFULEYGXxEd/4KZENzNJCLaSpayVQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzYxNzM4 ZS0zOTc3LTQ5NWUtYmExYS04MDM1ZjJkZmMxZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNjE3Mzhl LTM5NzctNDk1ZS1iYTFhLTgwMzVmMmRmYzFmNC8xL0ZuckZJeG9OZThXQ1JaQ2dz dlloN2VtRWR3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9m/AwQCub34MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMl0TANBgkqhkiG9w0BAQsFAAOCAQEAQwLM68aFXW1gQpT7IUGvCdgE RlM3px7pBSjVlKK+agzTlailHxuXGJaHj2ojZLoiPoOXrwo0NsV3JsiMZ+U2pajD fjqUue+58avr1lpR/H6vdRYYAzDtX2ydLUdR37cMiPWHlr45OevK1yGtpI/WLPem M/WX5DCtid/bIi/hW8x+7hQhJT3/moFMHMjG4r797uQE5CFFzhGVsNM80oYRTPjT saWksDCfgBGA9MToii14fMboe5MJ+Wzz550j6geuC7dZSbnjqXXEUWMyZHgfI3Nf qY4BuWIDlix3K8RGiBfpPOgEuDD6wAr+KOIYaxGXz82kzbJt1a3mCXwPbHMXNw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:37 2026 by rpki-client