This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer File: f8lWpStzUEpPH_NFRxmSl6f13p0.cer (raw, json) Hash identifier: nVrHxpCVrKFi8e5fhIA6IG044GmATBqOIYCPBnVZGAc= Subject key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9875A280AF6E658A7719F44C8378A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197822 AS: 197953 AS: 198553 AS: 198555 AS: 198625 AS: 199323 AS: 199336 AS: 199368 AS: 201428 AS: 203239 AS: 207726 AS: 208539 AS: 209449 AS: 209676 AS: 211086 AS: 211129 IP: 146.247.40.0/21 IP: 2a0d:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:87:5a:28:0a:f6:e6:58:a7:71:9f:44:c8:37:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:0d:db:7a:08:b1:59:8d:b6:28:c5:36:ce: 50:4e:17:15:94:7c:16:c1:a4:9e:05:80:df:8f:31: 39:cd:ba:fa:00:67:fe:82:1b:71:74:b7:d9:5b:f4: 7e:bb:00:3e:88:1e:f9:17:4b:18:12:c9:5d:78:25: a5:f1:1d:4b:6a:c4:83:8b:7c:c1:27:4d:d4:24:e9: c6:bd:bf:10:86:e1:64:a4:b7:e5:90:18:3e:0e:05: 4d:bf:25:16:d9:ee:84:9e:61:b2:c3:21:54:15:1c: 9f:b8:fb:aa:33:d4:b2:e5:fb:7e:b1:41:61:10:89: a3:8a:0b:83:32:37:c0:51:8b:be:c2:13:19:ad:d2: 50:70:96:6c:25:bc:fe:45:d1:f0:37:f9:f3:d5:1d: 17:40:fe:b8:10:18:b6:e7:10:58:06:36:9f:af:29: 53:d4:11:21:38:b0:27:c3:51:7f:21:a1:ca:74:71: 1d:00:5e:b1:7b:fe:a7:38:93:8e:03:4e:36:21:66: 09:50:24:b7:84:8d:a6:f0:fc:a2:9c:01:1a:7d:6d: 78:96:ef:05:56:d8:eb:a0:f0:d4:e3:88:18:f0:3c: 01:1f:c7:35:0a:38:b0:fd:c4:c5:c7:83:21:6e:00: 30:4a:b1:c3:64:d6:68:89:eb:0a:74:92:38:49:90: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.40.0/21 IPv6: 2a0d:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197822 197953 198553 198555 198625 199323 199336 199368 201428 203239 207726 208539 209449 209676 211086 211129 Signature Algorithm: sha256WithRSAEncryption a1:e8:85:1e:d3:04:0c:88:0e:d8:f1:fb:47:e7:81:31:44:0c: 39:44:29:d3:f0:99:9e:20:b7:37:14:4b:80:38:41:2f:7b:be: 38:e3:f7:c4:c3:73:c6:7b:7f:62:0e:c3:c1:7e:06:15:ec:a7: 64:c6:20:69:1b:22:4a:25:b6:83:6a:dd:a3:c4:6f:5f:f9:ad: 28:28:3b:01:57:cc:6c:fe:6f:29:c1:25:6e:b2:58:f2:42:0f: b6:e8:79:7c:bb:b6:aa:9c:c9:f2:d5:bc:55:fd:aa:e8:1a:54: 11:02:af:f2:3e:d9:1a:b1:a9:0e:8b:2f:5d:4c:cf:1b:68:cd: 52:24:81:4f:ff:bf:79:3f:ae:20:f5:75:3e:af:c7:ad:a6:91: bd:e7:ea:f5:a8:16:3b:fb:09:ae:c7:a8:a5:7a:88:46:c0:f5: 24:75:3f:94:6b:30:33:2a:4a:44:55:ce:c6:6c:f8:46:44:03: e8:82:fb:df:30:d7:b1:67:c9:f8:29:4a:22:6a:55:ad:ac:4b: 60:02:c3:64:10:44:38:49:82:c8:67:75:c1:0c:5b:0e:9c:1e: 07:fd:1f:14:05:fc:04:fc:cf:a2:7f:9c:11:1c:f8:c4:0e:a1: 2e:e3:1b:5e:0b:06:61:88:5c:72:c0:cf:31:99:6e:6e:88:a0: 21:45:0a:ee -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt9yYdaKAr25lincZ9EyDeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmM5NTZhNTJiNzM1MDRhNGYxZmYzNDU0NzE5OTI5N2E3ZjVkZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn28N23oIsVmNtijFNs5QThcVlHwW waSeBYDfjzE5zbr6AGf+ghtxdLfZW/R+uwA+iB75F0sYEsldeCWl8R1LasSDi3zB J03UJOnGvb8QhuFkpLflkBg+DgVNvyUW2e6EnmGywyFUFRyfuPuqM9Sy5ft+sUFh EImjiguDMjfAUYu+whMZrdJQcJZsJbz+RdHwN/nz1R0XQP64EBi25xBYBjafrylT 1BEhOLAnw1F/IaHKdHEdAF6xe/6nOJOOA042IWYJUCS3hI2m8PyinAEafW14lu8F VtjroPDU44gY8DwBH8c1Cjiw/cTFx4MhbgAwSrHDZNZoiesKdJI4SZA/BwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFH/JVqUrc1BKTx/zRUcZkpen9d6dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzcxYWI2 OS02OTY1LTRiNzAtOTY4ZC1iYjU3YTRlZjcxNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvNzFhYjY5 LTY5NjUtNGI3MC05NjhkLWJiNTdhNGVmNzE1My8xL2Y4bFdwU3R6VUVwUEhfTkZS eG1TbDZmMTNwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDkvcoMA0EAgACMAcDBQMqDR4AMGUGCCsGAQUF BwEIAQH/BFYwVKBSMFACAwMEvgIDAwVBAgMDB5kCAwMHmwIDAwfhAgMDCpsCAwMK qAIDAwrIAgMDEtQCAwMZ5wIDAytuAgMDLpsCAwMyKQIDAzMMAgMDOI4CAwM4uTAN BgkqhkiG9w0BAQsFAAOCAQEAoeiFHtMEDIgO2PH7R+eBMUQMOUQp0/CZniC3NxRL gDhBL3u+OOP3xMNzxnt/Yg7DwX4GFeynZMYgaRsiSiW2g2rdo8RvX/mtKCg7AVfM bP5vKcElbrJY8kIPtuh5fLu2qpzJ8tW8Vf2q6BpUEQKv8j7ZGrGpDosvXUzPG2jN UiSBT/+/eT+uIPV1Pq/HraaRvefq9agWO/sJrseopXqIRsD1JHU/lGswMypKRFXO xmz4RkQD6IL73zDXsWfJ+ClKImpVraxLYALDZBBEOEmCyGd1wQxbDpweB/0fFAX8 BPzPon+cERz4xA6hLuMbXgsGYYhccsDPMZluboigIUUK7g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:33 2026 by rpki-client