This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer (raw, json) Hash identifier: yy9bT9v97IjmEPMROheYubkLQDkdCKeN65wIfYCpMiI= Subject key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ACFAAFAB6FDE5E535684DB5F1B35A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.172.80.0/22 IP: 2a0b:700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cf:aa:fa:b6:fd:e5:e5:35:68:4d:b5:f1:b3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:0d:13:76:a0:27:c5:bb:d9:23:83:96:87: e9:a5:ab:99:1b:2c:87:33:90:99:5c:20:e4:36:66: 47:f1:3f:c8:6d:a7:b9:3b:cf:60:ab:e8:65:0b:51: c6:4c:2a:85:42:ba:89:f6:3d:42:d5:ab:ba:76:c9: 6b:40:14:95:54:2a:01:96:26:b1:3d:41:f4:af:08: ed:8a:86:ed:75:02:57:db:f4:bc:2c:2e:f8:90:97: 4d:f3:4a:95:d0:ab:a1:d4:48:5c:a7:e0:1a:6f:77: f9:19:8d:8a:bf:fe:10:01:bb:32:03:3c:16:7a:98: 06:98:96:36:2b:61:12:28:6c:91:87:d3:3e:01:fe: e5:47:2a:9c:a3:f6:75:01:43:7a:9f:26:73:34:1d: dc:41:c5:b8:8a:08:bd:63:77:cd:f5:32:1a:95:cc: 0a:4f:09:a4:4c:8e:df:b7:d5:50:3a:8f:db:70:63: 63:01:b6:e8:71:67:05:f4:36:07:cb:df:8d:10:b0: d7:32:5b:7b:68:4c:65:2a:4d:1b:04:8e:2d:8a:22: 10:38:c0:2a:fc:56:32:7b:e0:82:bb:27:74:8b:c7: 7c:ac:e0:8e:ad:a7:1d:4c:95:08:cf:e6:69:07:41: 14:63:cb:95:b4:dc:39:3c:de:b9:61:32:96:0b:81: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.80.0/22 IPv6: 2a0b:700::/29 Signature Algorithm: sha256WithRSAEncryption 99:2f:ae:38:f6:85:b6:d8:0b:fb:77:ac:65:a9:62:96:4e:c7: 08:57:bd:31:4f:62:a8:70:b6:69:60:f6:d0:f0:41:b1:50:73: dd:c8:ad:05:b4:19:ff:ce:0f:ee:30:47:71:e6:30:d0:b8:7c: b5:91:93:aa:c0:c1:33:7d:ef:42:63:4a:19:59:52:f9:f0:5d: 61:12:6d:c1:7c:54:c3:e7:18:69:91:9a:0d:b0:f4:cb:dc:22: a8:de:d2:19:ec:7f:c0:e0:5c:cb:84:4d:8a:ce:30:2d:3e:49: 6b:15:2a:26:bf:f2:c8:19:96:3b:8f:4c:5c:42:9c:cd:79:51: b5:b5:d3:17:d2:6e:4a:99:55:7a:b0:3e:b7:56:9b:ad:49:56: 36:f7:75:6c:07:d0:15:99:ab:d2:a5:49:58:22:03:64:07:4b: 2a:f6:aa:9c:dc:a9:47:63:26:1b:c1:ac:50:e0:7b:c6:d3:56: 35:96:cc:e1:50:dc:b3:ff:0d:89:e5:a5:1a:10:59:ae:c3:71: 5a:5b:52:05:ab:f8:a3:97:b3:7e:b0:cc:ea:01:f1:05:b6:fd: e7:11:5a:27:cc:57:72:9f:9f:15:05:d0:27:5a:9c:00:63:a0: e4:9f:ec:64:b7:b1:b7:81:a6:e0:34:f6:24:5e:55:34:15:02: de:57:a8:97 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6Ws+q+rb95eU1aE218bNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Q4NDczZTNkOWVkNDIzYzQxZTdhODU4ZjRjMGYwZmI4MGMwN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstINE3agJ8W72SODlofppauZGyyH M5CZXCDkNmZH8T/Ibae5O89gq+hlC1HGTCqFQrqJ9j1C1au6dslrQBSVVCoBliax PUH0rwjtiobtdQJX2/S8LC74kJdN80qV0Kuh1Ehcp+Aab3f5GY2Kv/4QAbsyAzwW epgGmJY2K2ESKGyRh9M+Af7lRyqco/Z1AUN6nyZzNB3cQcW4igi9Y3fN9TIalcwK TwmkTI7ft9VQOo/bcGNjAbbocWcF9DYHy9+NELDXMlt7aExlKk0bBI4tiiIQOMAq /FYye+CCuyd0i8d8rOCOracdTJUIz+ZpB0EUY8uVtNw5PN65YTKWC4HQ+QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHzYRz49ntQjxB56hY9MDw+4DAe6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzhlZmMy ZS05ZDk2LTQxYTAtYjI4Ny05NzU3Njk0ZDI5MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvOGVmYzJl LTlkOTYtNDFhMC1iMjg3LTk3NTc2OTRkMjkxZC8xL2ZOaEhQajJlMUNQRUhucUZq MHdQRDdnTUI3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaxQMA0EAgACMAcDBQMqCwcAMA0GCSqGSIb3 DQEBCwUAA4IBAQCZL6449oW22Av7d6xlqWKWTscIV70xT2KocLZpYPbQ8EGxUHPd yK0FtBn/zg/uMEdx5jDQuHy1kZOqwMEzfe9CY0oZWVL58F1hEm3BfFTD5xhpkZoN sPTL3CKo3tIZ7H/A4FzLhE2KzjAtPklrFSomv/LIGZY7j0xcQpzNeVG1tdMX0m5K mVV6sD63VputSVY293VsB9AVmavSpUlYIgNkB0sq9qqc3KlHYyYbwaxQ4HvG01Y1 lszhUNyz/w2J5aUaEFmuw3FaW1IFq/ijl7N+sMzqAfEFtv3nEVonzFdyn58VBdAn WpwAY6Dkn+xkt7G3gabgNPYkXlU0FQLeV6iX -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:26 2026 by rpki-client