This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer File: f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer (raw, json) Hash identifier: S4YEsBRl1pQ8h/cbZFP0nQM22w9C7UwAEiGrVbO2wpU= Subject key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C04B0CDC6EC484EE7BB14B8774310A133 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 13:00:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42423 IP: 45.13.176.0/22 IP: 45.86.240.0/22 IP: 45.91.4.0/22 IP: 45.93.128.0/22 IP: 45.95.220.0/22 IP: 45.131.104.0/22 IP: 45.133.152.0/23 IP: 45.135.224.0/22 IP: 45.139.68.0/22 IP: 45.145.16.0/22 IP: 45.150.80.0/22 IP: 62.68.93.0/24 IP: 80.91.221.0/24 IP: 89.39.203.0/24 IP: 95.214.38.0/23 IP: 128.0.58.0/23 IP: 193.36.162.0/23 IP: 193.168.184.0/22 IP: 194.1.167.0/24 IP: 212.87.200.0/22 IP: 2a06:a740::/29 IP: 2a09:1400::/29 IP: 2a0e:4840::/29 IP: 2a0f:56c0::/29 IP: 2a10:f600::/29 IP: 2a11:7100::/29 IP: 2a13:6240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b0:cd:c6:ec:48:4e:e7:bb:14:b8:77:43:10:a1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 13:00:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:39:07:93:6d:62:9e:58:85:79:fc:54:8e:37: 9a:63:de:a8:fe:37:11:ce:57:85:da:a4:bc:25:e9: 34:fc:21:71:99:be:6e:b1:9a:21:cc:97:7e:86:d8: 8d:e8:ea:e0:ba:34:66:2c:a3:41:c8:d0:fe:09:5e: 06:17:f7:a4:df:dd:d4:3b:fe:4d:48:1e:8f:22:c7: 9d:8c:bd:55:ee:18:1d:f1:97:2b:9a:bb:48:85:2c: 43:d4:92:62:68:a6:e5:29:b7:13:24:ff:06:ed:d6: 7f:21:cf:bf:0f:28:71:b8:e8:15:8f:a6:18:36:85: f8:34:f3:c2:35:c7:26:69:e9:b2:33:8c:f9:22:83: 9d:ec:fe:29:c6:9b:02:8e:d1:7b:a6:41:e7:70:8d: 21:71:a1:68:7c:b5:7f:26:4b:94:1b:7b:69:1a:a2: fb:a9:a5:78:23:00:e3:b7:fe:c2:be:dd:d4:3a:75: 75:12:03:5f:ff:40:10:b7:81:65:13:da:94:fe:43: c6:66:46:31:50:8c:f7:9a:7f:dd:2a:05:fc:4f:a3: 57:98:61:90:23:8b:b7:8d:e1:ce:0c:a4:ba:d9:61: 33:9b:2f:c2:ef:fb:6d:1e:80:42:b1:e4:8e:3b:b0: 5b:bb:56:c0:90:b3:3e:f6:72:46:f7:66:50:3b:b8: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.176.0/22 45.86.240.0/22 45.91.4.0/22 45.93.128.0/22 45.95.220.0/22 45.131.104.0/22 45.133.152.0/23 45.135.224.0/22 45.139.68.0/22 45.145.16.0/22 45.150.80.0/22 62.68.93.0/24 80.91.221.0/24 89.39.203.0/24 95.214.38.0/23 128.0.58.0/23 193.36.162.0/23 193.168.184.0/22 194.1.167.0/24 212.87.200.0/22 IPv6: 2a06:a740::/29 2a09:1400::/29 2a0e:4840::/29 2a0f:56c0::/29 2a10:f600::/29 2a11:7100::/29 2a13:6240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42423 Signature Algorithm: sha256WithRSAEncryption 90:b5:5d:a7:9f:66:e5:e8:37:5b:97:a9:81:55:af:96:f7:03: ea:50:ff:6c:fb:09:0b:4d:7a:10:ee:dc:33:89:12:05:7e:ea: dd:bd:ad:a0:f9:25:4a:b0:a1:b3:0c:f4:ce:9f:50:df:cb:c5: ac:ce:78:da:7e:72:f2:32:de:bc:4a:72:c1:8b:8f:2f:c7:14: 1b:e1:98:fa:97:64:e7:fb:f4:1c:1f:d1:ab:d4:3c:69:c7:c7: 00:bd:22:0d:7d:4d:73:48:f8:e8:f3:b7:4b:80:43:26:70:78: bf:88:32:79:e3:bf:93:d7:ce:87:ec:73:2e:1f:63:23:f6:04: d3:60:f2:d6:5b:d0:c2:6b:86:f0:78:e5:ce:0f:0d:83:17:a9: 68:f4:49:72:bc:5d:e1:2d:9b:19:a4:f0:05:71:34:da:cd:0c: c2:61:61:ec:a0:79:62:c6:71:9c:45:df:49:10:59:6e:cc:51: 99:c5:b8:24:c6:65:5f:de:c3:d7:ae:d2:95:6a:10:d7:0f:44: 88:38:94:c4:49:75:c7:d5:ba:08:dc:3d:6a:9e:e8:1d:48:29: bb:b2:a9:18:63:3b:7d:55:77:4d:2f:2f:7b:1f:34:a5:69:9d: 7a:2e:e3:bf:43:26:17:90:09:b5:88:da:00:31:e3:bf:49:53: c3:74:7f:fb -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISAZwEsM3G7EhO57sUuHdDEKEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTMwMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmVhMzdmZGZlMjliMzQxNzNlOTdmMWI2MzdhNDRlYzQxYWNlYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DkHk21inliFefxUjjeaY96o/jcR zleF2qS8Jek0/CFxmb5usZohzJd+htiN6OrgujRmLKNByND+CV4GF/ek393UO/5N SB6PIsedjL1V7hgd8ZcrmrtIhSxD1JJiaKblKbcTJP8G7dZ/Ic+/DyhxuOgVj6YY NoX4NPPCNccmaemyM4z5IoOd7P4pxpsCjtF7pkHncI0hcaFofLV/JkuUG3tpGqL7 qaV4IwDjt/7Cvt3UOnV1EgNf/0AQt4FlE9qU/kPGZkYxUIz3mn/dKgX8T6NXmGGQ I4u3jeHODKS62WEzmy/C7/ttHoBCseSOO7Bbu1bAkLM+9nJG92ZQO7jYEQIDAQAB o4IDajCCA2YwHQYDVR0OBBYEFH/qN/3+KbNBc+l/G2N6ROxBrOu4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAzZGQ0 OGViLWQxMzYtNGYwZS1hZjhhLTU3YTZiZGQ5M2E5ZC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNk ZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvN0ZFQTM3RkRGRTI5 QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjCBzAYIKwYBBQUHAQcBAf8EgbwwgbkwfgQCAAEw eAMEAi0NsAMEAi1W8AMEAi1bBAMEAi1dgAMEAi1f3AMEAi2DaAMEAS2FmAMEAi2H 4AMEAi2LRAMEAi2REAMEAi2WUAMEAD5EXQMEAFBb3QMEAFknywMEAV/WJgMEAYAA OgMEAcEkogMEAsGouAMEAMIBpwMEAtRXyDA3BAIAAjAxAwUDKganQAMFAyoJFAAD BQMqDkhAAwUDKg9WwAMFAyoQ9gADBQMqEXEAAwUDKhNiQDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMApbcwDQYJKoZIhvcNAQELBQADggEBAJC1XaefZuXoN1uXqYFV r5b3A+pQ/2z7CQtNehDu3DOJEgV+6t29raD5JUqwobMM9M6fUN/LxazOeNp+cvIy 3rxKcsGLjy/HFBvhmPqXZOf79Bwf0avUPGnHxwC9Ig19TXNI+Ojzt0uAQyZweL+I Mnnjv5PXzofscy4fYyP2BNNg8tZb0MJrhvB45c4PDYMXqWj0SXK8XeEtmxmk8AVx NNrNDMJhYeygeWLGcZxF30kQWW7MUZnFuCTGZV/ew9eu0pVqENcPRIg4lMRJdcfV ugjcPWqe6B1IKbuyqRhjO31Vd00vL3sfNKVpnXou479DJheQCbWI2gAx479JU8N0 f/s= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client