This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer File: fFdTLhz9MccnMuRONTn_bglsKkc.cer (raw, json) Hash identifier: ZzOLVUzwRNgrcm+JjfduD1+irn2kG/GmzIwBymvYy64= Subject key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8CEDD3D08E3F5992F39F3A0BD5C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8342 AS: 8920 AS: 41066 AS: 49291 IP: 81.176.0.0 -- 81.177.55.255 IP: 81.177.64.0/21 IP: 81.177.80.0/20 IP: 81.177.128.0 -- 81.177.183.255 IP: 82.194.160.0/19 IP: 95.129.72.0/21 IP: 95.172.144.0/20 IP: 178.249.72.0/21 IP: 185.13.0.0/22 IP: 185.185.136.0/22 IP: 188.112.192.0/18 IP: 195.161.0.0/16 IP: 212.16.192.0/19 IP: 213.59.0.0 -- 213.59.111.255 IP: 213.59.176.0/21 IP: 213.241.192.0 -- 213.241.198.255 IP: 213.241.200.0 -- 213.241.255.255 IP: 217.106.0.0 -- 217.107.63.255 IP: 217.107.200.0 -- 217.107.223.255 IP: 2001:1bb0::/32 IP: 2a02:2438::/32 IP: 2a02:dbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:ed:d3:d0:8e:3f:59:92:f3:9f:3a:0b:d5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:c6:b2:f1:02:54:57:83:c1:64:bf:e7:73: d7:a7:cf:f1:9d:d3:9a:81:8e:71:51:e5:08:25:c3: 56:7c:a2:a9:17:49:2f:59:da:95:3f:34:0e:bf:26: e4:25:cf:00:05:dc:22:0d:54:9e:9a:36:6c:e9:a2: 46:ae:f0:f6:ca:8d:ab:a8:42:41:11:c5:cb:f6:a2: 00:dd:a4:53:35:11:63:04:06:b5:63:5e:0a:22:61: 51:fd:56:80:93:7c:d4:a9:86:b4:a6:2b:23:fb:db: 5c:75:a9:3d:0f:e9:f4:43:80:bc:5c:21:2d:3d:c5: 31:67:53:06:92:52:8b:53:2e:6f:c1:b7:08:22:6d: 09:d2:73:0f:67:94:4f:f7:cd:7e:21:a5:26:45:89: ff:d2:d4:bc:2d:97:a8:9d:61:a1:09:19:3a:69:1e: b7:b0:f2:97:84:c8:41:75:98:cb:59:d4:f1:68:56: 56:04:07:2c:e1:7b:6c:e8:70:7c:cc:98:1e:41:01: 17:01:17:7d:91:56:52:a4:2d:a5:4d:2c:96:a7:42: 14:77:c7:c8:a1:43:d7:4c:64:bb:e3:1a:e2:af:65: dc:cd:97:be:9a:7a:dd:e0:b8:50:8d:fe:78:3b:d3: df:2d:69:13:91:2b:b2:3b:a9:8a:fd:8d:49:40:35: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.176.0.0-81.177.55.255 81.177.64.0/21 81.177.80.0/20 81.177.128.0-81.177.183.255 82.194.160.0/19 95.129.72.0/21 95.172.144.0/20 178.249.72.0/21 185.13.0.0/22 185.185.136.0/22 188.112.192.0/18 195.161.0.0/16 212.16.192.0/19 213.59.0.0-213.59.111.255 213.59.176.0/21 213.241.192.0-213.241.198.255 213.241.200.0-213.241.255.255 217.106.0.0-217.107.63.255 217.107.200.0-217.107.223.255 IPv6: 2001:1bb0::/32 2a02:2438::/32 2a02:dbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8342 8920 41066 49291 Signature Algorithm: sha256WithRSAEncryption 76:4c:a0:a5:ad:72:13:e9:46:78:6e:32:72:99:94:e3:65:e8: b2:00:57:ee:85:41:a6:3e:c1:1a:b4:28:62:55:9f:4d:d3:4f: d1:77:29:35:14:5c:9f:e7:cc:d3:21:6e:71:b2:2a:36:fe:11: a2:af:9a:bb:31:d6:ba:10:98:30:ae:ee:96:c2:f6:cc:9f:ca: 7e:4d:78:1e:b4:55:dd:9f:e1:73:1e:b8:6f:1e:41:46:32:23: 9f:1f:4b:33:0b:4e:a2:fc:3f:53:f4:23:d4:27:a9:99:11:b4: e2:89:41:43:1d:dd:92:7a:d4:36:d9:1f:84:39:f2:ca:ce:1e: e8:bb:64:a5:0d:fb:7e:86:05:8a:7f:d7:fe:32:82:c1:83:5d: a9:e0:bb:12:0f:66:34:67:1e:dc:fb:49:18:5d:7d:36:fc:07: 3d:4a:da:10:40:c4:85:82:1c:f4:ad:f1:b5:44:35:8b:38:68: ca:77:f1:76:48:88:1c:14:47:68:74:e2:4c:32:33:5f:00:96: 01:fb:7b:3b:f3:97:93:cd:20:e2:f2:b3:8a:7c:87:1b:05:a9: e3:be:80:f1:e8:a5:06:c2:bd:9c:d4:35:c2:6a:2d:bc:8d:e6: 30:21:fe:09:02:4f:b0:8b:45:a3:99:48:60:7c:bf:03:fa:74: 87:df:b6:6b -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISAZt264zt09COP1mS8586C9XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU3NTMyZTFjZmQzMWM3MjczMmU0NGUzNTM5ZmY2ZTA5NmMyYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPGsvECVFeDwWS/53PXp8/xndOa gY5xUeUIJcNWfKKpF0kvWdqVPzQOvybkJc8ABdwiDVSemjZs6aJGrvD2yo2rqEJB EcXL9qIA3aRTNRFjBAa1Y14KImFR/VaAk3zUqYa0pisj+9tcdak9D+n0Q4C8XCEt PcUxZ1MGklKLUy5vwbcIIm0J0nMPZ5RP981+IaUmRYn/0tS8LZeonWGhCRk6aR63 sPKXhMhBdZjLWdTxaFZWBAcs4Xts6HB8zJgeQQEXARd9kVZSpC2lTSyWp0IUd8fI oUPXTGS74xrir2XczZe+mnrd4LhQjf54O9PfLWkTkSuyO6mK/Y1JQDVmZQIDAQAB o4IDbjCCA2owHQYDVR0OBBYEFHxXUy4c/THHJzLkTjU5/24JbCpHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzhkOWY3 Ny00Njg0LTRkODItYWUzOC0zMWU1MGJhYjcxNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOGQ5Zjc3 LTQ2ODQtNGQ4Mi1hZTM4LTMxZTUwYmFiNzE2ZS8xL2ZGZFRMaHo5TWNjbk11Uk9O VG5fYmdsc0trYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHfBggrBgEF BQcBBwEB/wSBzzCBzDCBrAQCAAEwgaUwCwMDBFGwAwQDUbEwAwQDUbFAAwQEUbFQ MAwDBAdRsYADBANRsbADBAVSwqADBANfgUgDBARfrJADBAOy+UgDBAK5DQADBAK5 uYgDBAa8cMADAwDDoQMEBdQQwDALAwMA1TsDBATVO2ADBAPVO7AwDAMEBtXxwAME ANXxxjALAwQD1fHIAwMB1fAwCwMDAdlqAwQG2WsAMAwDBAPZa8gDBAXZa8AwGwQC AAIwFQMFACABG7ADBQAqAiQ4AwUDKgLbwDAnBggrBgEFBQcBCAEB/wQYMBagFDAS AgIglgICItgCAwCgagIDAMCLMA0GCSqGSIb3DQEBCwUAA4IBAQB2TKClrXIT6UZ4 bjJymZTjZeiyAFfuhUGmPsEatChiVZ9N00/Rdyk1FFyf58zTIW5xsio2/hGir5q7 Mda6EJgwru6WwvbMn8p+TXgetFXdn+FzHrhvHkFGMiOfH0szC06i/D9T9CPUJ6mZ EbTiiUFDHd2SetQ22R+EOfLKzh7ou2SlDft+hgWKf9f+MoLBg12p4LsSD2Y0Zx7c +0kYXX02/Ac9StoQQMSFghz0rfG1RDWLOGjKd/F2SIgcFEdodOJMMjNfAJYB+3s7 85eTzSDi8rOKfIcbBanjvoDx6KUGwr2c1DXCai28jeYwIf4JAk+wi0WjmUhgfL8D +nSH37Zr -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:04 2026 by rpki-client