This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer File: FqThByM1EnDNjJzGSwlkiOZOIw4.cer (raw, json) Hash identifier: DWPS0cuPEzKW/e31U/SRwH8bkGV1rPxl3yYdUgfBsw0= Subject key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC9913AF3E7964077DF94415B4FA08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.45.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:99:13:af:3e:79:64:07:7d:f9:44:15:b4:fa:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a4e10723351270cd8c9cc64b096488e64e230e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:82:c3:b7:6f:9d:e6:80:83:a1:8c:9a:18: 87:ae:45:17:d0:18:50:3b:15:70:9d:8e:0d:d3:68: 3d:a3:dc:f4:d9:e4:38:54:85:8f:52:c6:9f:c9:64: c1:ab:fa:c2:fe:49:f1:03:c8:55:3b:3b:8c:6c:37: 34:36:ff:0a:2b:83:73:f7:6a:30:c7:36:aa:c3:08: bc:dc:25:30:18:19:09:21:d5:b8:73:63:6e:14:f9: 53:1e:a5:22:1b:73:88:af:24:4b:b0:72:be:ad:0e: b2:5b:bc:31:e7:ce:33:d4:d9:1f:64:1d:7a:b2:39: 23:ed:37:5d:ff:f6:55:8d:7d:d2:b2:f1:5e:a2:80: f6:a7:cb:70:66:12:82:6e:77:fa:99:c2:10:3c:e2: 91:ff:3b:81:19:1e:02:d9:df:a9:0b:59:4b:6c:f7: 48:dd:69:fe:52:f9:16:93:bd:1d:2a:0e:8b:d4:c7: c0:f8:61:46:cb:cd:99:3c:12:b1:eb:18:a7:7e:46: 9b:43:b8:89:44:5e:2d:8b:d5:0e:32:f7:fd:66:86: d3:f1:cb:f8:ce:e8:a2:ad:d9:63:f6:01:72:1a:2c: ae:02:33:06:97:af:1a:08:40:fc:ab:d2:ab:ec:c9: 73:7d:32:b8:8e:45:99:a8:5a:ce:e1:44:fe:c1:8c: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.103.0/24 Signature Algorithm: sha256WithRSAEncryption 66:d2:06:d3:eb:19:1f:55:e1:93:97:bf:1f:ca:ae:08:af:28: ee:97:bc:a1:1d:c4:b4:54:7f:de:6c:2b:96:9e:39:d3:4b:2d: 9d:dc:b3:e3:0e:ec:4a:dc:f7:a8:8b:ea:fb:a2:cd:78:29:38: 4a:e2:84:82:9b:35:36:41:b9:ab:0c:28:85:6d:57:8d:32:15: 7b:80:fa:16:6b:0f:af:42:54:d6:3d:04:5e:46:3d:64:62:7c: 59:f0:ca:88:c9:35:5c:da:1d:d7:fe:e2:47:f1:b9:8b:fd:90: a9:8d:61:39:d7:29:02:2a:44:70:fa:66:31:55:9a:e8:e8:08: 11:5a:d2:8c:6d:c3:66:a9:0f:3d:c2:63:95:29:eb:47:e9:58: 45:e4:1e:f8:ec:31:57:47:98:28:ec:85:58:92:98:29:42:47: cf:ab:73:80:a0:47:57:f9:ec:2a:b5:d2:18:57:3b:9a:c4:36: b7:f2:99:99:f7:b8:23:ba:8c:e0:65:ae:ee:f3:31:76:95:46: f4:e1:b5:65:c4:7c:03:3d:22:6b:50:a9:c1:e6:cf:de:32:cf: cf:d6:30:7c:01:4d:aa:0a:51:ae:24:05:ff:52:22:d0:fd:c6: d7:c3:0f:a6:78:63:58:da:ec:ee:05:e1:eb:10:52:9e:2d:78: 21:3d:20:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57JkTrz55ZAd9+UQVtPoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmE0ZTEwNzIzMzUxMjcwY2Q4YzljYzY0YjA5NjQ4OGU2NGUyMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06Cw7dvneaAg6GMmhiHrkUX0BhQ OxVwnY4N02g9o9z02eQ4VIWPUsafyWTBq/rC/knxA8hVOzuMbDc0Nv8KK4Nz92ow xzaqwwi83CUwGBkJIdW4c2NuFPlTHqUiG3OIryRLsHK+rQ6yW7wx584z1NkfZB16 sjkj7Tdd//ZVjX3SsvFeooD2p8twZhKCbnf6mcIQPOKR/zuBGR4C2d+pC1lLbPdI 3Wn+UvkWk70dKg6L1MfA+GFGy82ZPBKx6xinfkabQ7iJRF4ti9UOMvf9ZobT8cv4 zuiirdlj9gFyGiyuAjMGl68aCED8q9Kr7MlzfTK4jkWZqFrO4UT+wYycAQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBak4QcjNRJwzYycxksJZIjmTiMOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzI3NWRj NS02ZjE1LTQ1ZmUtOTQxZi05YjY0NDQ0ZmY2ODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMjc1ZGM1 LTZmMTUtNDVmZS05NDFmLTliNjQ0NDRmZjY4OC8xL0ZxVGhCeU0xRW5ETmpKekdT d2xraU9aT0l3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwi1nMA0GCSqGSIb3DQEBCwUAA4IBAQBm0gbT 6xkfVeGTl78fyq4Iryjul7yhHcS0VH/ebCuWnjnTSy2d3LPjDuxK3Peoi+r7os14 KThK4oSCmzU2QbmrDCiFbVeNMhV7gPoWaw+vQlTWPQReRj1kYnxZ8MqIyTVc2h3X /uJH8bmL/ZCpjWE51ykCKkRw+mYxVZro6AgRWtKMbcNmqQ89wmOVKetH6VhF5B74 7DFXR5go7IVYkpgpQkfPq3OAoEdX+ewqtdIYVzuaxDa38pmZ97gjuozgZa7u8zF2 lUb04bVlxHwDPSJrUKnB5s/eMs/P1jB8AU2qClGuJAX/UiLQ/cbXww+meGNY2uzu BeHrEFKeLXghPSAm -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:02 2026 by rpki-client