This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer File: fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer (raw, json) Hash identifier: UOnQ4B2tsAS39oMBHKLjhCUrwdn9pa8P0qdsQ4CUUe0= Subject key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DD9B06025ABAEA2CCA496E3F1BEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42355 AS: 43196 AS: 43557 AS: 50490 AS: 57735 IP: 37.75.160.0/19 IP: 77.68.128.0/17 IP: 78.156.96.0/19 IP: 83.137.120.0/21 IP: 85.191.128.0/17 IP: 85.203.128.0/17 IP: 89.249.0.0/20 IP: 91.194.154.0/23 IP: 92.246.0.0/19 IP: 95.138.208.0/20 IP: 139.45.0.0/17 IP: 178.21.88.0/21 IP: 178.157.192.0/18 IP: 185.17.216.0/22 IP: 185.101.88.0/22 IP: 188.114.128.0/18 IP: 217.198.208.0/20 IP: 2a00:1f98::/29 IP: 2a02:25c8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dd:9b:06:02:5a:ba:ea:2c:ca:49:6e:3f:1b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:13:df:6a:e0:6b:9d:48:bd:4c:e9:2a:dd: 93:35:ef:21:e1:eb:c6:12:43:b2:c0:7e:03:a9:82: 50:3a:bc:2d:df:7d:a3:d4:e5:4e:2c:2e:a7:60:ed: 3c:8b:41:32:fe:03:1f:af:81:37:4e:79:a2:63:4c: 52:b3:1b:2f:39:8c:15:a8:04:ac:76:80:a7:50:d3: e4:28:50:d6:07:9b:03:0e:d6:6a:34:ba:e6:45:a8: 92:44:11:86:be:10:74:7a:d8:25:85:9c:58:fd:a6: 96:01:d3:04:3d:b3:8e:c6:47:89:71:c9:8a:a1:bc: 75:e4:37:66:a5:af:81:b4:5d:6a:af:74:db:9a:9f: 1e:7c:22:a4:f9:d9:8b:ed:b4:55:6a:a2:0c:56:47: 11:57:92:57:41:8b:e7:7f:eb:be:f8:f2:50:be:a9: 23:c3:b1:56:b6:05:d6:38:8a:b1:eb:f0:5d:df:6c: 06:78:b5:3e:21:4d:3e:8d:c8:c8:14:9c:71:24:35: 95:73:ee:2f:f8:32:7f:09:af:3d:28:9d:90:47:b7: d9:03:34:8a:c1:2b:4d:71:bb:d9:0c:1e:56:99:57: 6c:fb:d5:9e:95:38:81:f1:ac:a8:c5:d1:b2:03:ce: 0c:ef:13:f7:7e:9e:7d:44:8d:13:71:90:87:37:cc: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.160.0/19 77.68.128.0/17 78.156.96.0/19 83.137.120.0/21 85.191.128.0/17 85.203.128.0/17 89.249.0.0/20 91.194.154.0/23 92.246.0.0/19 95.138.208.0/20 139.45.0.0/17 178.21.88.0/21 178.157.192.0/18 185.17.216.0/22 185.101.88.0/22 188.114.128.0/18 217.198.208.0/20 IPv6: 2a00:1f98::/29 2a02:25c8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42355 43196 43557 50490 57735 Signature Algorithm: sha256WithRSAEncryption 5e:1a:f6:40:a4:da:48:79:64:19:c3:69:ed:84:10:57:12:52: fd:1e:34:ea:0b:1b:d6:a5:3e:4c:96:42:f5:70:93:9b:12:ca: fc:3e:4a:e0:4f:a4:94:d5:9c:f8:17:f8:5b:2b:8a:0c:00:44: 27:92:4d:5a:18:de:ee:b5:df:13:96:6b:76:e7:99:5d:55:23: 00:81:c2:3f:ec:74:bd:9a:4f:56:e7:86:c3:02:b2:47:e3:47: 7c:ef:c4:a8:5f:87:13:36:fb:ab:1b:5f:67:99:f7:bf:cc:57: 13:92:ae:50:85:db:90:d7:7b:8f:72:bb:a7:58:7e:d5:f0:ee: 24:6c:32:88:3b:7e:85:fb:a5:a2:e1:c4:e2:09:cd:9f:7b:a0: 7e:57:af:c3:c6:f3:d1:83:6f:6d:1c:c9:a9:7b:87:b3:b6:41: 11:27:b4:1e:0c:db:70:21:d5:40:3a:a4:a5:e1:77:bf:62:10: ab:22:21:37:bc:e2:15:71:4b:08:55:d2:92:fc:63:15:be:19: f2:96:50:cf:0b:91:2f:9c:34:9b:c6:3c:c8:b6:be:0f:62:b0: 61:f7:6a:05:86:7a:f6:7d:cb:92:44:ea:2d:02:ae:ee:3f:14: 24:1b:42:f2:62:e9:9a:91:13:f8:1b:96:6a:1e:8b:b7:c4:14: 83:21:a9:33 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAZt4NN2bBgJauuosykluPxvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzY3ZWUzZGU4ODE1NjJlZWE3ZGYyZTMyMzJjZGIzMmI1NGZlMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgcT32rga51IvUzpKt2TNe8h4evG EkOywH4DqYJQOrwt332j1OVOLC6nYO08i0Ey/gMfr4E3TnmiY0xSsxsvOYwVqASs doCnUNPkKFDWB5sDDtZqNLrmRaiSRBGGvhB0etglhZxY/aaWAdMEPbOOxkeJccmK obx15Ddmpa+BtF1qr3Tbmp8efCKk+dmL7bRVaqIMVkcRV5JXQYvnf+u++PJQvqkj w7FWtgXWOIqx6/Bd32wGeLU+IU0+jcjIFJxxJDWVc+4v+DJ/Ca89KJ2QR7fZAzSK wStNcbvZDB5WmVds+9WelTiB8ayoxdGyA84M7xP3fp59RI0TcZCHN8xHAQIDAQAB o4IDLTCCAykwHQYDVR0OBBYEFHxn7j3ogVYu6n3y4yMs2zK1T+A3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzVmYWI3 NS01ZjM1LTQ2NGQtOWYwZC0zZWQyZWNlYjRmNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNWZhYjc1 LTVmMzUtNDY0ZC05ZjBkLTNlZDJlY2ViNGY2Yy8xL2ZHZnVQZWlCVmk3cWZmTGpJ eXpiTXJWUDREYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGXBggrBgEF BQcBBwEB/wSBhzCBhDBsBAIAATBmAwQFJUugAwQHTUSAAwQFTpxgAwQDU4l4AwQH Vb+AAwQHVcuAAwQEWfkAAwQBW8KaAwQFXPYAAwQEX4rQAwQHiy0AAwQDshVYAwQG sp3AAwQCuRHYAwQCuWVYAwQGvHKAAwQE2cbQMBQEAgACMA4DBQMqAB+YAwUDKgIl yDAuBggrBgEFBQcBCAEB/wQfMB2gGzAZAgMApXMCAwCovAIDAKolAgMAxToCAwDh hzANBgkqhkiG9w0BAQsFAAOCAQEAXhr2QKTaSHlkGcNp7YQQVxJS/R406gsb1qU+ TJZC9XCTmxLK/D5K4E+klNWc+Bf4WyuKDABEJ5JNWhje7rXfE5ZrdueZXVUjAIHC P+x0vZpPVueGwwKyR+NHfO/EqF+HEzb7qxtfZ5n3v8xXE5KuUIXbkNd7j3K7p1h+ 1fDuJGwyiDt+hfulouHE4gnNn3ugflevw8bz0YNvbRzJqXuHs7ZBESe0HgzbcCHV QDqkpeF3v2IQqyIhN7ziFXFLCFXSkvxjFb4Z8pZQzwuRL5w0m8Y8yLa+D2KwYfdq BYZ69n3LkkTqLQKu7j8UJBtC8mLpmpET+BuWah6Lt8QUgyGpMw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:29 2026 by rpki-client