This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer File: FvFFcn00rmYHphUwEoPu69XWKRw.cer (raw, json) Hash identifier: vEuGWbAkJj3FqpPso+Yfx78eN2WBg/3lrGqj09kREfs= Subject key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C807D65191EB3041F273088134FC01D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15635 AS: 15896 AS: 34010 AS: 34082 AS: 40986 AS: 42173 AS: 43428 AS: 203070 AS: 203219 -- 203220 AS: 204000 IP: 46.228.32.0/20 IP: 77.238.160.0/19 IP: 87.248.96.0/19 IP: 188.125.64.0/19 IP: 193.93.196.0/22 IP: 212.82.96.0/19 IP: 217.12.0.0/20 IP: 217.146.176.0/20 IP: 2a00:1288::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7d:65:19:1e:b3:04:1f:27:30:88:13:4f:c0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16f145727d34ae6607a615301283eeebd5d6291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:bb:d5:38:0f:57:07:a4:c6:28:d1:f2:29: 5f:75:4c:05:46:cf:36:46:99:12:4f:67:58:28:c8: 27:a7:78:31:d7:c1:b6:2a:33:2c:d3:66:50:62:71: c6:ee:67:8c:59:57:1b:89:7f:19:b3:9d:db:6e:88: d2:0a:8c:c9:89:2c:5b:c7:a0:28:a9:fe:39:63:32: 22:e3:8c:29:e7:6e:b0:22:d6:2d:b2:32:98:ea:ab: 31:e4:c1:be:b0:f7:aa:d8:0b:59:34:a7:df:66:00: 44:1c:7f:4a:f6:2a:3f:f1:c3:b3:2f:cc:ff:9f:2f: c3:97:79:0d:ca:16:c9:91:7e:e2:4d:1c:43:ac:01: e8:89:8e:e5:92:70:c4:c3:4f:5f:63:bd:7b:c5:1a: f7:b7:b3:05:62:6c:8b:c6:b8:be:0a:46:fd:0d:66: c9:07:4b:f4:a6:0f:30:b2:45:fd:cd:69:aa:98:aa: 7b:b7:22:5d:79:d6:e8:7b:e1:2e:88:f2:61:bf:47: 34:64:0c:3d:08:cd:ba:1f:16:eb:27:ad:83:1d:e0: 14:3f:5d:8a:17:64:67:e5:f1:96:97:b5:a3:a6:4d: 3d:ab:8e:68:6f:8d:b5:b9:ef:d2:a1:af:58:f5:34: 0b:0a:31:6d:e5:2b:95:23:11:e6:31:d6:45:19:a3: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.32.0/20 77.238.160.0/19 87.248.96.0/19 188.125.64.0/19 193.93.196.0/22 212.82.96.0/19 217.12.0.0/20 217.146.176.0/20 IPv6: 2a00:1288::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15635 15896 34010 34082 40986 42173 43428 203070 203219-203220 204000 Signature Algorithm: sha256WithRSAEncryption 25:b0:97:c4:61:1c:5d:15:8d:b1:d2:5c:b7:eb:12:ac:c3:a6: 06:46:15:6b:03:fd:da:ee:6d:40:92:71:83:6b:64:80:7d:e6: a7:41:ae:b2:ac:f6:ad:8f:eb:ce:fe:2a:cd:dd:08:e7:a1:df: f1:da:bd:53:e3:85:25:fc:3e:d6:a7:2b:18:4d:0d:f4:fb:97: ed:49:88:06:77:66:6e:8d:74:f9:b8:de:48:47:07:6e:18:1f: c4:ee:57:d9:cd:ba:f8:3f:d1:f1:cb:76:48:77:82:9b:a9:66: 82:f3:5d:5f:cd:99:5b:59:71:ec:79:dd:41:ea:5c:17:a2:df: 6e:c0:c2:53:ef:81:31:33:08:1d:53:59:04:18:c0:b3:91:43: 7a:2d:d9:48:88:38:aa:ad:2a:e7:a6:7f:a2:5e:95:9b:6f:85: 81:a1:35:09:3b:79:94:13:4a:20:02:06:fa:47:98:47:e8:5e: fe:6b:71:65:a1:34:88:d4:27:76:87:01:3b:9a:5c:ed:78:78: f5:7a:74:0c:73:a9:fc:d2:7c:43:14:3b:ad:cd:f3:1c:63:54: 0c:47:e0:1e:fe:ba:21:2e:80:7e:81:41:0d:6c:93:6f:01:83: 53:fb:8b:80:20:ba:bb:63:fc:bc:2a:f4:8a:08:05:ba:8e:d2: 0b:d7:f9:3f -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZt8gH1lGR6zBB8nMIgTT8AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmYxNDU3MjdkMzRhZTY2MDdhNjE1MzAxMjgzZWVlYmQ1ZDYyOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jO71TgPVwekxijR8ilfdUwFRs82 RpkST2dYKMgnp3gx18G2KjMs02ZQYnHG7meMWVcbiX8Zs53bbojSCozJiSxbx6Ao qf45YzIi44wp526wItYtsjKY6qsx5MG+sPeq2AtZNKffZgBEHH9K9io/8cOzL8z/ ny/Dl3kNyhbJkX7iTRxDrAHoiY7lknDEw09fY717xRr3t7MFYmyLxri+Ckb9DWbJ B0v0pg8wskX9zWmqmKp7tyJdedboe+EuiPJhv0c0ZAw9CM26HxbrJ62DHeAUP12K F2Rn5fGWl7Wjpk09q45ob421ue/Soa9Y9TQLCjFt5SuVIxHmMdZFGaPAFwIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFBbxRXJ9NK5mB6YVMBKD7uvV1ikcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzZjODA4 ZS0wMDE1LTRkNjItODFkOC1lY2I3YWUyNzIyYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNmM4MDhl LTAwMTUtNGQ2Mi04MWQ4LWVjYjdhZTI3MjJjMS8xL0Z2RkZjbjAwcm1ZSHBoVXdF b1B1NjlYV0tSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQELuQgAwQFTe6gAwQFV/hgAwQFvH1AAwQCwV3E AwQF1FJgAwQE2QwAAwQE2ZKwMA0EAgACMAcDBQAqABKIMEwGCCsGAQUFBwEIAQH/ BD0wO6A5MDcCAj0TAgI+GAIDAITaAgMAhSICAwCgGgIDAKS9AgMAqaQCAwMZPjAK AgMDGdMCAwMZ1AIDAxzgMA0GCSqGSIb3DQEBCwUAA4IBAQAlsJfEYRxdFY2x0ly3 6xKsw6YGRhVrA/3a7m1AknGDa2SAfeanQa6yrPatj+vO/irN3Qjnod/x2r1T44Ul /D7WpysYTQ30+5ftSYgGd2ZujXT5uN5IRwduGB/E7lfZzbr4P9Hxy3ZId4KbqWaC 811fzZlbWXHsed1B6lwXot9uwMJT74ExMwgdU1kEGMCzkUN6LdlIiDiqrSrnpn+i XpWbb4WBoTUJO3mUE0ogAgb6R5hH6F7+a3FloTSI1Cd2hwE7mlzteHj1enQMc6n8 0nxDFDutzfMcY1QMR+Ae/rohLoB+gUENbJNvAYNT+4uAILq7Y/y8KvSKCAW6jtIL 1/k/ -----END CERTIFICATE-----Generated at Sun Feb 8 06:25:24 2026 by rpki-client