This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer File: fBbp1X79rNP3vH6YSWtxn63Frkg.cer (raw, json) Hash identifier: Rnxiwex09ssUOP5IIFNmlRcnZWF1TxPcuqTce1yjirQ= Subject key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B3F8E623582C60C3E54754A4C10B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197909 IP: 94.154.2.0/24 IP: 185.240.72.0/22 IP: 193.35.80.0/22 IP: 2a07:2680::/29 IP: 2a0c:7580::/29 IP: 2a0d:6140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b3:f8:e6:23:58:2c:60:c3:e5:47:54:a4:c1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:c7:0e:45:55:84:98:d3:47:bc:32:86:ef: 0c:47:ae:fe:98:29:e0:f8:7c:d0:09:ac:c9:1b:19: 4d:48:ce:d2:e5:02:06:0a:c8:80:03:79:c1:9b:ff: 20:cf:f2:b3:39:31:98:9f:46:0c:50:6b:ce:c9:d2: 41:79:39:39:71:19:08:4c:24:ec:4d:50:5a:d1:b2: e5:f9:cc:21:e8:83:05:c6:0c:09:d0:e7:6e:42:f9: 41:bc:13:13:54:54:a8:f4:ac:f6:22:40:9a:ca:c9: 89:66:83:29:a5:ba:b6:99:90:0f:10:93:d7:f7:1f: 08:ef:b7:4a:94:17:c8:07:a9:aa:8b:fa:8b:b4:9b: 05:24:13:cb:a0:07:4c:1f:5f:f7:87:70:90:51:61: cd:4b:36:bc:19:ae:84:28:19:25:3a:0d:0e:c0:c6: 30:21:d8:ff:3e:b8:98:9e:2d:05:45:15:10:32:9d: 69:52:9c:1d:d2:b3:3b:fe:c2:db:43:3f:ca:6d:12: 8e:28:5c:23:9b:15:90:74:77:fd:f1:26:56:1a:65: cd:3a:5d:c7:49:4b:9d:5e:d9:2e:5b:f6:d9:7d:7c: b2:94:1a:7d:19:70:c7:cc:83:af:06:f6:ea:28:94: e3:20:8c:2e:e2:bf:88:19:09:5f:8b:e7:05:ca:78: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.2.0/24 185.240.72.0/22 193.35.80.0/22 IPv6: 2a07:2680::/29 2a0c:7580::/29 2a0d:6140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197909 Signature Algorithm: sha256WithRSAEncryption 8d:6c:98:74:ba:e3:38:55:15:76:a2:11:54:8b:7d:e0:02:f8: e4:3f:5d:cc:bd:a3:af:84:ff:fa:8e:5f:d4:e1:79:07:89:75: 52:13:e6:57:a7:f8:36:54:80:39:0a:6c:89:fc:da:65:b6:66: f4:0d:65:ae:b9:94:02:5b:8d:86:b8:c8:13:a9:b6:cd:59:2a: 0b:51:5c:bb:ed:fd:b8:35:5d:7a:5a:45:56:18:fd:34:55:0d: 0c:e5:9a:78:85:9f:13:0c:ec:4b:f3:17:a7:08:f2:ba:c0:ae: 38:3a:34:05:26:39:25:fc:5d:05:6b:9e:68:6a:5d:9d:cb:30: 8c:55:92:db:0e:3d:87:72:f7:a0:38:c7:f9:d4:e0:87:1f:11: c1:4c:b1:f8:f4:0a:00:b1:64:be:7e:89:c0:6d:f6:e9:7e:3c: 5a:1f:48:27:5d:4d:0b:e8:32:0b:21:50:cc:9d:e9:f8:26:f3: bb:1e:fe:aa:d3:c0:6d:75:57:31:d1:78:96:6f:1a:c4:88:95: 06:df:39:75:f0:37:d0:ad:46:d5:f1:65:e0:28:26:b4:f1:6c: 80:46:be:2d:df:1c:88:44:44:26:e0:a7:00:18:e9:d4:68:9d: 89:32:8b:99:6f:ee:90:61:f3:a6:db:93:f0:67:55:8e:ad:76: 74:fb:bd:3f -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt5ELP45iNYLGDD5UdUpMELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzE2ZTlkNTdlZmRhY2QzZjdiYzdlOTg0OTZiNzE5ZmFkYzVhZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgszHDkVVhJjTR7wyhu8MR67+mCng +HzQCazJGxlNSM7S5QIGCsiAA3nBm/8gz/KzOTGYn0YMUGvOydJBeTk5cRkITCTs TVBa0bLl+cwh6IMFxgwJ0OduQvlBvBMTVFSo9Kz2IkCaysmJZoMppbq2mZAPEJPX 9x8I77dKlBfIB6mqi/qLtJsFJBPLoAdMH1/3h3CQUWHNSza8Ga6EKBklOg0OwMYw Idj/PriYni0FRRUQMp1pUpwd0rM7/sLbQz/KbRKOKFwjmxWQdHf98SZWGmXNOl3H SUudXtkuW/bZfXyylBp9GXDHzIOvBvbqKJTjIIwu4r+IGQlfi+cFynh13QIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFHwW6dV+/azT97x+mElrcZ+txa5IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2YxOTdk MC1hNTQwLTQ4ODItYTY3YS1iOGEyMzJlZmYyZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZjE5N2Qw LWE1NDAtNDg4Mi1hNjdhLWI4YTIzMmVmZjJmNi8xL2ZCYnAxWDc5ck5QM3ZINllT V3R4bjYzRnJrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQAXpoCAwQCufBIAwQCwSNQMBsEAgACMBUDBQMq ByaAAwUDKgx1gAMFAyoNYUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwUVMA0G CSqGSIb3DQEBCwUAA4IBAQCNbJh0uuM4VRV2ohFUi33gAvjkP13MvaOvhP/6jl/U 4XkHiXVSE+ZXp/g2VIA5CmyJ/Npltmb0DWWuuZQCW42GuMgTqbbNWSoLUVy77f24 NV16WkVWGP00VQ0M5Zp4hZ8TDOxL8xenCPK6wK44OjQFJjkl/F0Fa55oal2dyzCM VZLbDj2HcvegOMf51OCHHxHBTLH49AoAsWS+fonAbfbpfjxaH0gnXU0L6DILIVDM nen4JvO7Hv6q08BtdVcx0XiWbxrEiJUG3zl18DfQrUbV8WXgKCa08WyARr4t3xyI REQm4KcAGOnUaJ2JMouZb+6QYfOm25PwZ1WOrXZ0+70/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:53 2026 by rpki-client