This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer File: fGlngv8SGuWm2dXPo4R5dotr8L0.cer (raw, json) Hash identifier: 6SrO/XANe+kF4FEi+2bSBWc1g06Dps25a04C3CxR1kg= Subject key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1312290342FD76D19D40AB55FD44B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20720 IP: 85.233.80.0/20 IP: 109.73.192.0/20 IP: 217.198.0.0/20 IP: 2a11:700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:12:29:03:42:fd:76:d1:9d:40:ab:55:fd:44:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:41:df:47:04:c2:56:21:12:29:cc:48:cb: 3b:bb:1c:a2:18:10:1a:1e:13:fa:44:c6:1a:91:91: b4:10:5a:d5:23:49:0d:55:d8:b6:72:e5:48:c5:c8: 8e:2b:9b:fd:0e:40:05:09:11:cf:06:97:4e:41:73: f6:9d:c5:8d:6d:17:9a:81:02:46:d0:82:d5:1c:74: 92:30:32:a3:df:be:33:d2:25:8e:33:3b:fe:ed:a6: 1e:76:24:b2:0f:57:be:64:92:0b:53:50:6e:b5:14: 80:c2:19:ac:e5:ef:a5:99:fe:20:84:6d:e6:09:ea: 9b:f2:e0:88:4c:c0:a7:7d:f0:6b:38:92:68:0d:ba: 1f:07:dc:49:62:93:27:3d:45:8f:73:58:11:94:d1: 52:4a:e5:42:4d:f4:cc:8c:c9:82:06:13:ad:fc:47: c4:f2:1c:6c:9a:dd:d9:11:8c:09:40:3b:32:dd:df: 34:b9:30:ac:2e:b6:2c:f5:2a:04:19:a6:1b:b0:6f: b1:68:fb:42:35:a0:37:eb:dd:3f:10:30:45:a2:8e: 91:14:8b:6b:b7:c2:48:5b:a0:7a:14:0d:ce:00:fa: 4c:c5:05:0b:18:ce:38:5e:ff:98:3e:4c:e7:19:13: dc:d9:c4:99:92:32:f6:f8:81:48:44:ec:78:35:fb: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.233.80.0/20 109.73.192.0/20 217.198.0.0/20 IPv6: 2a11:700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20720 Signature Algorithm: sha256WithRSAEncryption 92:2b:69:95:f1:24:57:d9:d4:53:bc:83:fd:8c:27:8e:3a:56: 2e:0b:a4:ff:80:38:9d:00:3f:e2:39:e3:b6:77:26:ec:71:b5: b0:49:2a:4f:53:00:4f:e3:77:e4:67:ea:4e:94:48:bb:d0:3a: c3:15:36:aa:68:51:a7:f1:04:1f:9a:9b:ec:a5:61:8d:07:4b: 5d:23:de:b6:8b:88:07:c8:84:1e:38:02:f1:e7:81:74:88:5e: bd:11:52:f6:22:10:01:48:41:08:c7:c2:10:7a:f2:6d:50:b8: bb:40:15:71:4c:4e:ce:a4:20:76:06:36:48:6d:8e:2a:5e:de: af:7e:d0:e4:49:8a:d3:e8:1a:74:b5:af:f4:40:64:7e:4b:43: c5:5f:cd:92:15:cc:7e:37:09:b9:72:6f:c1:47:6e:57:41:90: ca:c4:39:ea:d1:02:19:9f:d2:94:69:db:43:c4:b1:ac:38:5e: 8e:4a:53:63:af:97:d9:0c:98:4b:08:85:5f:32:0a:98:c7:bf: b7:31:29:72:c6:02:7f:41:11:db:06:1e:3a:77:86:65:c4:c2: 17:92:30:4f:3d:07:f5:f7:cd:29:15:fb:e6:fc:75:2f:02:81: c9:32:90:de:f6:6a:7a:09:b8:4c:bd:75:59:51:55:e3:7b:ef: 7a:7f:20:87 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8ExIpA0L9dtGdQKtV/US2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzY5Njc4MmZmMTIxYWU1YTZkOWQ1Y2ZhMzg0Nzk3NjhiNmJmMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1BB30cEwlYhEinMSMs7uxyiGBAa HhP6RMYakZG0EFrVI0kNVdi2cuVIxciOK5v9DkAFCRHPBpdOQXP2ncWNbReagQJG 0ILVHHSSMDKj374z0iWOMzv+7aYediSyD1e+ZJILU1ButRSAwhms5e+lmf4ghG3m Ceqb8uCITMCnffBrOJJoDbofB9xJYpMnPUWPc1gRlNFSSuVCTfTMjMmCBhOt/EfE 8hxsmt3ZEYwJQDsy3d80uTCsLrYs9SoEGaYbsG+xaPtCNaA3690/EDBFoo6RFItr t8JIW6B6FA3OAPpMxQULGM44Xv+YPkznGRPc2cSZkjL2+IFIROx4NfuTOwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFHxpZ4L/EhrlptnVz6OEeXaLa/C9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzhlYzhl MC05YjkzLTQ4ZmMtOTYyYS02ZjgzNmYzNWY1OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOGVjOGUw LTliOTMtNDhmYy05NjJhLTZmODM2ZjM1ZjU5NC8xL2ZHbG5ndjhTR3VXbTJkWFBv NFI1ZG90cjhMMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEVelQAwQEbUnAAwQE2cYAMA0EAgACMAcDBQMq EQcAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlDwMA0GCSqGSIb3DQEBCwUAA4IB AQCSK2mV8SRX2dRTvIP9jCeOOlYuC6T/gDidAD/iOeO2dybscbWwSSpPUwBP43fk Z+pOlEi70DrDFTaqaFGn8QQfmpvspWGNB0tdI962i4gHyIQeOALx54F0iF69EVL2 IhABSEEIx8IQevJtULi7QBVxTE7OpCB2BjZIbY4qXt6vftDkSYrT6Bp0ta/0QGR+ S0PFX82SFcx+Nwm5cm/BR25XQZDKxDnq0QIZn9KUadtDxLGsOF6OSlNjr5fZDJhL CIVfMgqYx7+3MSlyxgJ/QRHbBh46d4ZlxMIXkjBPPQf1980pFfvm/HUvAoHJMpDe 9mp6CbhMvXVZUVXje+96fyCH -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:08 2026 by rpki-client