This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer File: fKnhWNylWE83ofg0myiaaBLbkko.cer (raw, json) Hash identifier: Yuixy0FEby4r5hcpb3sOl3Up/72QLkq6ciUQ5ArOGPI= Subject key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA33EE31620154BC58F7692B199BAF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204784 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3e:e3:16:20:15:4b:c5:8f:76:92:b1:99:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ca9e158dca5584f37a1f8349b289a6812db924a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:dd:9e:0d:b4:3a:a6:48:81:20:06:d6:92: 7b:5d:ed:7c:d0:df:16:72:be:c2:69:e4:6a:56:c5: a9:63:78:3e:1f:46:73:78:14:e7:d8:e2:c6:ee:cd: 34:ab:0b:07:28:54:5c:16:70:95:57:e6:a0:c7:12: 75:61:d4:b1:e7:b1:fe:45:c5:f2:cd:b9:3a:73:30: 13:9a:38:5e:ec:30:b0:37:c8:e5:a0:02:01:f2:27: 9d:a1:2e:2d:8b:23:c7:b6:a5:d7:47:2c:58:54:3c: bf:67:a6:8c:27:bf:83:5b:ab:4b:c4:6b:cc:d4:84: c2:cc:ed:ad:f5:39:11:7a:60:56:37:73:2e:b7:93: a4:a0:d1:d2:18:2d:b2:0a:cb:42:18:91:3b:5f:6f: 71:a0:26:f9:71:2d:53:fd:68:bb:61:9c:9b:84:16: 36:60:e3:c3:7c:1d:93:e6:45:32:f3:92:35:80:dd: 35:c0:bf:cf:fa:4f:73:49:13:43:1c:6f:11:d4:b5: bd:1a:c0:d1:a9:7b:7a:b1:d9:ae:47:ab:22:ee:79: 18:20:6e:e3:08:b5:3c:34:df:ba:c8:dc:64:9c:ea: e9:dc:16:27:4b:dd:81:91:9b:02:08:b5:54:bd:18: bc:f9:f8:db:ef:82:ed:46:dc:5f:18:88:5d:1d:67: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204784 Signature Algorithm: sha256WithRSAEncryption 24:6d:3a:2e:94:e3:5c:c4:90:ad:ea:3e:7a:f5:4b:a7:b4:63: 03:8c:7a:f4:fe:40:f4:28:84:92:bf:6c:e6:cb:e0:6f:f1:1b: e4:f0:d7:1e:28:b5:15:24:bf:06:ea:85:40:89:17:60:b5:66: c0:55:f3:50:98:48:d7:85:52:62:1d:62:8f:95:57:57:6e:d9: 74:15:95:b5:38:f6:0f:71:2d:b8:a2:45:68:f4:d9:9f:97:74: 71:a7:8b:1f:5f:ef:35:0f:6f:4e:7a:7a:ac:4a:f2:b1:cb:ce: ab:f0:d9:64:f9:20:0b:79:71:33:2a:84:58:73:b7:e9:3b:eb: 73:7b:2e:c2:ca:f6:6c:a0:b6:ce:9d:64:97:5f:f1:45:2c:66: d2:56:d1:43:49:a8:50:6c:ab:bc:07:dc:ee:6c:e3:7c:13:2e: f1:e8:40:c6:a8:a9:e9:8c:58:9b:e9:3e:a8:d2:c0:83:1c:52: 98:fa:71:c1:ef:f7:77:57:43:3f:9f:b5:0f:28:cf:17:22:2a: dd:fc:49:d9:43:7b:73:25:ef:06:a6:76:6e:ff:df:5f:cf:00: cb:2a:de:a7:48:ce:dc:dd:5e:47:fa:b2:5a:37:9d:33:c5:35: 24:08:4d:12:58:c2:4b:df:bf:23:fb:3d:14:31:f9:70:8a:15: 81:ca:2e:a4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7oz7jFiAVS8WPdpKxmbrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2E5ZTE1OGRjYTU1ODRmMzdhMWY4MzQ5YjI4OWE2ODEyZGI5MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3bdng20OqZIgSAG1pJ7Xe180N8W cr7CaeRqVsWpY3g+H0ZzeBTn2OLG7s00qwsHKFRcFnCVV+agxxJ1YdSx57H+RcXy zbk6czATmjhe7DCwN8jloAIB8iedoS4tiyPHtqXXRyxYVDy/Z6aMJ7+DW6tLxGvM 1ITCzO2t9TkRemBWN3Mut5OkoNHSGC2yCstCGJE7X29xoCb5cS1T/Wi7YZybhBY2 YOPDfB2T5kUy85I1gN01wL/P+k9zSRNDHG8R1LW9GsDRqXt6sdmuR6si7nkYIG7j CLU8NN+6yNxknOrp3BYnS92BkZsCCLVUvRi8+fjb74LtRtxfGIhdHWcJFQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHyp4VjcpVhPN6H4NJsommgS25JKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2ZiMzRl NC1lZDYxLTRlMWQtYTQ2ZC03OGE3N2Y3YTEzNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZmIzNGU0 LWVkNjEtNGUxZC1hNDZkLTc4YTc3ZjdhMTM0Mi8xL2ZLbmhXTnlsV0U4M29mZzBt eWlhYUJMYmtrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMf8DANBgkqhkiG9w0BAQsFAAOCAQEAJG06LpTjXMSQ reo+evVLp7RjA4x69P5A9CiEkr9s5svgb/Eb5PDXHii1FSS/BuqFQIkXYLVmwFXz UJhI14VSYh1ij5VXV27ZdBWVtTj2D3EtuKJFaPTZn5d0caeLH1/vNQ9vTnp6rEry scvOq/DZZPkgC3lxMyqEWHO36Tvrc3suwsr2bKC2zp1kl1/xRSxm0lbRQ0moUGyr vAfc7mzjfBMu8ehAxqip6YxYm+k+qNLAgxxSmPpxwe/3d1dDP5+1DyjPFyIq3fxJ 2UN7cyXvBqZ2bv/fX88Ayyrep0jO3N1eR/qyWjedM8U1JAhNEljCS9+/I/s9FDH5 cIoVgcoupA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:57 2026 by rpki-client