This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer (raw, json) Hash identifier: pbeeatQzxwWf34QlDlSB7UIdFX9u6+6H+ksH9SIk3S4= Subject key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA476E3475876049AA5AD0AFC6B04D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49381 IP: 91.229.196.0/22 IP: 193.169.44.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:76:e3:47:58:76:04:9a:a5:ad:0a:fc:6b:04:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:d6:23:cb:dc:62:27:6b:18:9f:d4:2d:13: 8e:f2:9c:d3:82:91:60:35:ae:06:3d:07:ff:aa:13: 3c:77:ce:86:b1:d7:08:5c:2a:a3:52:ec:c0:15:09: f0:b9:34:69:2e:53:d0:17:66:25:91:e8:54:68:cb: a3:03:4c:68:79:c2:6b:3f:8c:d0:26:37:a1:7f:73: dd:2d:98:ec:37:7b:9f:d4:9f:f9:b0:aa:69:09:aa: 48:02:1a:ca:13:fc:c5:2b:6a:5e:5a:58:aa:1c:02: 81:00:a6:1c:49:9a:c1:dc:eb:ac:88:e5:98:fb:4d: d3:5e:ef:1b:a8:be:32:30:45:29:f2:8b:4b:34:00: 0f:d3:3b:e7:e9:e0:cd:53:bb:b7:5a:f7:10:f8:0f: 06:dd:b2:da:b0:9a:75:5a:21:4a:cb:87:8d:ea:1a: f5:55:95:59:45:7c:b5:64:d3:8a:52:cc:ca:a0:0b: 71:85:51:76:11:39:ee:5f:ce:31:06:c0:d2:c9:59: 8c:cd:92:70:f1:75:21:8f:51:65:23:f6:4c:b8:8d: 21:36:d1:54:b1:df:f2:bc:a6:30:6f:1b:97:4d:0d: 73:98:9c:85:4f:c5:3d:47:eb:71:14:9a:37:b8:9d: 16:39:f5:d5:d1:99:26:1c:44:c1:52:c6:cd:d9:89: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.196.0/22 193.169.44.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49381 Signature Algorithm: sha256WithRSAEncryption 94:a7:cb:3d:25:9a:95:b6:c9:6b:a3:a8:1c:13:6e:eb:4c:d4: 0d:51:00:dd:ca:e8:fd:66:87:e4:b4:4d:2b:fb:e8:b0:f2:a3: 4e:a8:35:28:54:d3:aa:8c:5a:73:f2:16:a6:df:e3:10:86:59: 97:04:04:42:65:96:33:e3:ef:1b:0a:2b:ce:b6:3f:36:d1:5f: e5:f6:1a:aa:a5:6b:81:fb:ba:76:4a:9e:2f:7c:05:08:96:de: e9:7a:91:ed:3f:c1:d8:3f:47:ca:3f:bf:a1:c2:20:34:f3:8e: a4:e1:ae:1f:54:21:d8:fd:2b:cd:39:40:21:0a:3f:e0:98:b3: ed:0f:17:d2:18:41:e9:10:a4:89:ca:8e:49:21:86:1d:1e:05: 1c:83:fe:ab:60:fa:0c:06:5c:7f:46:b0:0b:54:94:aa:01:c3: 60:ed:ad:43:13:ea:61:bb:e6:a8:af:cc:fa:26:fc:e4:2f:b4: d9:e3:27:0f:f9:6a:6a:14:25:2b:db:78:52:62:2c:3a:3c:52: bb:66:33:81:f1:c1:d5:91:32:24:2f:b1:c9:16:28:97:5e:d8: 70:68:48:d8:50:3e:2d:e4:9f:12:b5:bf:ec:4a:df:06:4c:fe: bc:0b:7d:21:07:46:5e:83:f7:70:50:30:c2:e5:6f:50:8a:69: 65:de:f2:c0 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7pHbjR1h2BJqlrQr8awTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjk3Njc1ODVkY2VmNzNlMWZhOWY2NGRhNmM3ZjI3NmVkODdhNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/WI8vcYidrGJ/ULROO8pzTgpFg Na4GPQf/qhM8d86GsdcIXCqjUuzAFQnwuTRpLlPQF2YlkehUaMujA0xoecJrP4zQ Jjehf3PdLZjsN3uf1J/5sKppCapIAhrKE/zFK2peWliqHAKBAKYcSZrB3OusiOWY +03TXu8bqL4yMEUp8otLNAAP0zvn6eDNU7u3WvcQ+A8G3bLasJp1WiFKy4eN6hr1 VZVZRXy1ZNOKUszKoAtxhVF2ETnuX84xBsDSyVmMzZJw8XUhj1FlI/ZMuI0hNtFU sd/yvKYwbxuXTQ1zmJyFT8U9R+txFJo3uJ0WOfXV0ZkmHETBUsbN2Ymc/wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFBaXZ1hdzvc+H6n2TabH8nbth6cfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2U4ZGI2 Yy04MWFlLTRjZTItYWYzMC00N2I2MzA5NTNjNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZThkYjZj LTgxYWUtNGNlMi1hZjMwLTQ3YjYzMDk1M2M1MC8xL0ZwZG5XRjNPOXo0ZnFmWk5w c2Z5ZHUySHB4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+XEAwQBwaksMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDA5TANBgkqhkiG9w0BAQsFAAOCAQEAlKfLPSWalbbJa6OoHBNu60zU DVEA3cro/WaH5LRNK/vosPKjTqg1KFTTqoxac/IWpt/jEIZZlwQEQmWWM+PvGwor zrY/NtFf5fYaqqVrgfu6dkqeL3wFCJbe6XqR7T/B2D9Hyj+/ocIgNPOOpOGuH1Qh 2P0rzTlAIQo/4Jiz7Q8X0hhB6RCkicqOSSGGHR4FHIP+q2D6DAZcf0awC1SUqgHD YO2tQxPqYbvmqK/M+ib85C+02eMnD/lqahQlK9t4UmIsOjxSu2YzgfHB1ZEyJC+x yRYol17YcGhI2FA+LeSfErW/7ErfBkz+vAt9IQdGXoP3cFAwwuVvUIppZd7ywA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:33 2026 by rpki-client