This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer File: cFngOgjhdBb2ZUYweYg0mZG4Si4.cer (raw, json) Hash identifier: l8txhOGzZe8KtZDcK4F3LUxsh4eS1zZEQY+2ULUzRZA= Subject key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3751F808D8BDBC5CFA18889C7527CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42605 IP: 83.136.72.0/21 IP: 167.17.80.0/21 IP: 185.111.192.0/22 IP: 194.149.246.0 -- 194.149.255.255 IP: 195.35.87.0 -- 195.35.89.255 IP: 2a02:b28::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:51:f8:08:d8:bd:bc:5c:fa:18:88:9c:75:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7059e03a08e17416f66546307988349991b84a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:4c:31:96:c8:02:c0:8b:e0:08:e4:00:88: 71:62:e1:92:00:6c:4d:fc:39:a3:3e:64:9f:52:a2: c1:a6:05:1e:b7:35:6b:04:be:84:18:80:1e:29:85: 87:9d:05:16:8c:8a:9b:e7:ee:52:46:77:ef:b7:a0: b3:5d:53:a2:30:22:3a:d5:2b:c1:c9:70:2c:71:9c: 92:da:42:dc:48:1a:03:31:3e:8f:95:18:1e:74:5d: 6b:32:28:80:1a:b3:ba:8c:18:1a:60:a2:1d:69:fb: ee:99:c8:7f:bd:3e:d5:30:ac:4c:a4:77:f5:b2:cf: ab:26:95:8e:19:f2:e4:c2:b5:58:26:25:a7:81:9f: 43:90:f7:93:78:75:00:22:a4:fa:41:4e:f1:54:19: 0d:63:9f:c5:0a:80:6d:b3:1b:2d:a6:80:14:62:64: f0:f4:86:39:8b:65:40:7e:13:74:02:a3:d5:b6:c2: cc:90:0c:71:d4:7e:3f:9d:cd:15:f2:3a:f5:7a:9f: e8:55:7e:e0:5e:64:61:eb:4a:78:fb:ce:71:65:56: a6:2c:95:e1:68:52:a3:95:a8:e9:1b:96:d9:f9:39: e9:05:e4:3d:61:8f:73:b9:fd:8d:fb:92:e3:5e:b4: 18:ea:2b:b1:4f:7b:a0:b0:1b:ce:06:52:ef:b9:5d: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.72.0/21 167.17.80.0/21 185.111.192.0/22 194.149.246.0-194.149.255.255 195.35.87.0-195.35.89.255 IPv6: 2a02:b28::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42605 Signature Algorithm: sha256WithRSAEncryption 82:91:e1:5e:54:6c:46:44:a7:b6:ed:3e:41:da:cc:88:a1:e9: a0:32:58:be:67:cd:0e:d3:f7:f2:8b:1a:12:9b:ac:d4:59:38: 2a:9b:11:2d:be:79:e5:fb:7d:cf:7a:e6:19:ab:94:e5:d6:96: 53:3c:7a:0c:ad:f8:c0:12:43:86:81:b9:0e:32:4d:c0:51:af: 40:75:d3:02:5b:0b:18:13:48:13:a1:bf:d5:fd:a7:ab:b9:9c: 40:d4:e7:0a:d8:ae:e1:4e:76:b3:38:74:31:61:71:9f:46:2d: 72:b7:bf:7d:23:b5:74:97:32:dd:aa:1a:21:f1:92:54:c3:7e: 91:b0:38:85:e4:4c:24:0f:63:37:e6:74:00:97:e2:b7:d4:8f: e4:be:ad:9c:a0:c7:1a:24:7d:fe:e9:f5:46:49:82:da:0c:c8: f8:a1:62:86:fe:df:2c:1d:f0:e3:d8:8f:00:97:16:58:02:29: 4a:bf:13:fa:57:66:97:7d:cb:f8:6a:79:3d:81:13:f2:c0:f7: e3:c6:15:3c:35:c5:e7:89:ed:42:27:8f:f9:6e:87:93:bd:e6: 9a:63:72:75:02:8b:97:d5:dd:a8:93:c9:b3:c8:c8:10:19:ce: 71:a5:51:5d:0f:db:29:76:93:43:a9:ba:9f:52:ef:ee:4e:c8: 87:b8:35:9d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt+N1H4CNi9vFz6GIicdSfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDU5ZTAzYTA4ZTE3NDE2ZjY2NTQ2MzA3OTg4MzQ5OTkxYjg0YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphMMZbIAsCL4AjkAIhxYuGSAGxN /DmjPmSfUqLBpgUetzVrBL6EGIAeKYWHnQUWjIqb5+5SRnfvt6CzXVOiMCI61SvB yXAscZyS2kLcSBoDMT6PlRgedF1rMiiAGrO6jBgaYKIdafvumch/vT7VMKxMpHf1 ss+rJpWOGfLkwrVYJiWngZ9DkPeTeHUAIqT6QU7xVBkNY5/FCoBtsxstpoAUYmTw 9IY5i2VAfhN0AqPVtsLMkAxx1H4/nc0V8jr1ep/oVX7gXmRh60p4+85xZVamLJXh aFKjlajpG5bZ+TnpBeQ9YY9zuf2N+5LjXrQY6iuxT3ugsBvOBlLvuV1OlwIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFHBZ4DoI4XQW9mVGMHmINJmRuEouMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzA2NWRi YS1lZWY5LTQ4MGQtYTg4MC05MTc1Yzg0MDhlNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvMDY1ZGJh LWVlZjktNDgwZC1hODgwLTkxNzVjODQwOGU1ZS8xL2NGbmdPZ2poZEJiMlpVWXdl WWcwbVpHNFNpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAzBAIAATAtAwQDU4hIAwQDpxFQAwQCuW/AMAsDBAHClfYDAwHC lDAMAwQAwyNXAwQBwyNYMA0EAgACMAcDBQMqAgsoMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCmbTANBgkqhkiG9w0BAQsFAAOCAQEAgpHhXlRsRkSntu0+QdrMiKHp oDJYvmfNDtP38osaEpus1Fk4KpsRLb555ft9z3rmGauU5daWUzx6DK34wBJDhoG5 DjJNwFGvQHXTAlsLGBNIE6G/1f2nq7mcQNTnCtiu4U52szh0MWFxn0Ytcre/fSO1 dJcy3aoaIfGSVMN+kbA4heRMJA9jN+Z0AJfit9SP5L6tnKDHGiR9/un1RkmC2gzI +KFihv7fLB3w49iPAJcWWAIpSr8T+ldml33L+Gp5PYET8sD348YVPDXF54ntQieP +W6Hk73mmmNydQKLl9XdqJPJs8jIEBnOcaVRXQ/bKXaTQ6m6n1Lv7k7Ih7g1nQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:03 2026 by rpki-client