This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer (raw, json) Hash identifier: Y/G26yz0ulcNO45VDceRKQTL7aggupWoPL7ddwfCzO4= Subject key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9C8E44A75CBE0484CA26AB7914506AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:10:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.45.48.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c8:e4:4a:75:cb:e0:48:4c:a2:6a:b7:91:45:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:10:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16992f451372c7a20b624bcfaa3d9753926c5c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:0d:e2:df:81:ad:a2:5a:47:6e:c7:55:0a: a3:da:f7:c8:12:0b:1e:e9:93:55:56:7f:2e:c8:41: 8c:0b:cb:de:ae:53:0a:4e:cb:43:b1:e0:42:18:14: 76:dd:7a:08:0d:b4:fb:0b:96:a4:97:f5:d0:1c:ea: 72:b8:02:45:99:b6:e9:15:f4:42:87:67:c0:fe:7b: 95:76:be:ee:d5:9a:0a:ad:ab:f2:69:43:a5:86:3d: d4:e3:76:56:51:1c:de:13:2a:b9:30:23:13:12:6f: 0c:60:5d:fd:da:df:d4:d9:2b:fd:d8:6e:9a:df:fa: 9f:4e:e3:b2:1f:52:f9:18:08:a8:b6:61:59:cb:ca: 1b:6a:75:25:b8:59:c5:81:de:b9:b3:02:0c:4c:b8: b9:6c:d7:dc:28:2b:99:85:93:2b:9b:cf:86:14:ed: 74:d5:c0:39:ed:57:86:6d:d5:92:6e:ef:a7:e6:7b: 59:7c:e0:a0:17:65:b0:23:a8:a3:fd:cc:f0:23:fa: e7:d0:d2:2e:ee:a6:a7:12:f4:08:78:b0:39:bf:e5: cd:e5:a6:b4:67:b0:6b:6d:97:c9:61:01:4b:06:14: 58:75:10:5c:43:ae:c5:ef:54:59:71:6b:51:a9:e9: 42:ce:b7:d9:11:f7:4b:87:98:c7:3e:7e:b4:d3:71: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.48.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:6a:2c:57:cb:69:3e:ec:f1:67:06:a4:28:9d:49:59:a7:d7: ad:77:cb:10:d6:30:20:95:9c:2f:72:20:1e:51:5a:f9:aa:6d: 08:25:f5:2c:e0:39:2b:95:8f:63:9f:74:6c:0e:1d:c2:82:16: 9c:74:61:58:1c:af:3c:d5:f9:84:31:26:2f:56:97:8c:4a:39: a9:94:ea:30:11:4c:81:94:86:05:30:39:5b:89:9b:35:ed:59: 06:bc:66:d4:84:99:46:2b:23:bd:8c:3d:63:74:6d:42:9c:02: 37:75:bc:31:a4:aa:86:f5:aa:34:55:4e:92:bd:39:b8:55:c3: e3:65:28:8d:ee:a2:78:19:4c:37:f8:82:1c:c8:05:08:c0:6c: 9f:79:f9:30:dc:1a:33:9b:5f:ba:94:e6:dd:ea:91:7a:3a:9d: 87:2c:9f:6c:8a:7d:c2:b0:1e:f5:d0:ea:2e:d9:a3:67:5b:b3: f7:7d:2c:ea:74:c8:54:8d:a8:f4:96:13:28:2e:52:9b:23:c8: ae:b7:29:18:e2:c4:f7:49:af:aa:7e:f2:2a:67:a4:2a:b6:02: 1b:77:75:fc:ce:15:91:34:bc:3a:9f:d8:7d:9c:f3:9d:7e:76: 1f:f6:d2:48:21:7c:5e:79:bc:a1:6f:e5:ce:23:97:fe:26:18: ec:4a:c3:0e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv5yORKdcvgSEyiareRRQatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTAxMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjk5MmY0NTEzNzJjN2EyMGI2MjRiY2ZhYTNkOTc1MzkyNmM1YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnIN4t+BraJaR27HVQqj2vfIEgse 6ZNVVn8uyEGMC8verlMKTstDseBCGBR23XoIDbT7C5akl/XQHOpyuAJFmbbpFfRC h2fA/nuVdr7u1ZoKravyaUOlhj3U43ZWURzeEyq5MCMTEm8MYF392t/U2Sv92G6a 3/qfTuOyH1L5GAiotmFZy8obanUluFnFgd65swIMTLi5bNfcKCuZhZMrm8+GFO10 1cA57VeGbdWSbu+n5ntZfOCgF2WwI6ij/czwI/rn0NIu7qanEvQIeLA5v+XN5aa0 Z7BrbZfJYQFLBhRYdRBcQ67F71RZcWtRqelCzrfZEfdLh5jHPn6003EgawIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBaZL0UTcseiC2JLz6o9l1OSbFwWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2QzMzNi MC0zMThhLTQ2YzgtOTcyMS0zZWFhYmIwMzI1NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZDMzM2Iw LTMxOGEtNDZjOC05NzIxLTNlYWFiYjAzMjU3OS8xL0Zwa3ZSUk55eDZJTFlrdlBx ajJYVTVKc1hCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwi0wMA0GCSqGSIb3DQEBCwUAA4IBAQA8aixX y2k+7PFnBqQonUlZp9etd8sQ1jAglZwvciAeUVr5qm0IJfUs4DkrlY9jn3RsDh3C ghacdGFYHK881fmEMSYvVpeMSjmplOowEUyBlIYFMDlbiZs17VkGvGbUhJlGKyO9 jD1jdG1CnAI3dbwxpKqG9ao0VU6SvTm4VcPjZSiN7qJ4GUw3+IIcyAUIwGyfefkw 3Bozm1+6lObd6pF6Op2HLJ9sin3CsB710Oou2aNnW7P3fSzqdMhUjaj0lhMoLlKb I8iutykY4sT3Sa+qfvIqZ6QqtgIbd3X8zhWRNLw6n9h9nPOdfnYf9tJIIXxeebyh b+XOI5f+JhjsSsMO -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:32 2026 by rpki-client