This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer File: fPl3gtbyAqcBg2capjDHOrozMH4.cer (raw, json) Hash identifier: BvH1AvdK9QZEZvVqDu/qnXVpKlbpohC/LHC0UjVNnek= Subject key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3789FBFC992851A4C4FDD8A3B5B62E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.196.152.0/22 IP: 2a0a:6e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:89:fb:fc:99:28:51:a4:c4:fd:d8:a3:b5:b6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cf97782d6f202a70183671aa630c73aba33307e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:1e:75:84:15:97:e1:2e:4b:fe:5f:2e:90: 9c:69:5c:bf:d9:5f:84:79:1c:df:c0:d2:73:b4:52: 6b:b8:d6:5b:b2:cf:b4:88:66:42:89:7b:8b:d8:40: cc:d7:6d:9a:aa:6d:6f:9e:57:0e:82:f7:0e:7c:d3: d4:f2:e3:bc:d2:b6:c4:71:d3:1e:49:6a:26:02:9c: c1:e7:1a:32:9f:6d:34:bb:a7:3f:57:fd:52:f6:89: 1e:08:15:7a:78:88:61:21:d9:b2:24:06:5e:72:fe: d6:e9:df:8d:3b:70:2e:9a:14:e5:6f:6f:af:f8:ca: 00:12:69:6c:05:91:bc:ab:34:b7:7e:c5:5b:dc:ea: f6:82:91:ae:ff:b4:88:86:4c:4c:46:8d:e6:41:ff: 50:1b:51:69:1c:95:f5:4d:e2:51:cd:c6:8b:7c:20: e8:87:46:4d:96:2d:16:35:d2:5c:71:bc:da:82:91: 35:37:4d:77:38:c5:13:70:08:5a:3a:bc:dd:ff:b4: 7d:04:87:ce:1e:0d:8b:03:6e:0c:83:88:b6:02:02: 7d:12:7e:89:7b:a0:59:d9:fd:45:18:f1:6f:a0:27: b7:42:1f:f9:21:fa:48:0e:dc:24:d2:7f:53:06:a9: e7:de:54:35:b2:04:a7:3e:f8:52:60:74:83:98:d2: 6e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.152.0/22 IPv6: 2a0a:6e40::/29 Signature Algorithm: sha256WithRSAEncryption a8:90:68:04:7c:97:ef:81:2b:c6:70:8a:06:d7:19:40:ca:1d: 72:8e:1f:b5:19:64:44:9e:1f:0f:94:1a:b0:11:53:c0:67:59: 5e:e2:ce:d3:fe:db:c4:4b:27:75:3a:3a:1a:c2:b8:1c:f3:83: 69:6c:91:a5:13:96:eb:e6:45:ab:88:fb:e5:58:08:14:a4:0e: 1d:ad:8b:f0:f6:04:45:d9:06:36:ae:c8:9b:65:84:f3:0b:10: f8:3a:b1:7f:91:6f:b1:e6:b9:84:25:6d:59:93:d2:24:90:d9: af:35:73:b5:18:8a:79:1c:79:3f:a7:38:30:41:9a:d7:5d:04: 2f:b9:04:de:71:b6:87:94:ce:65:c8:b1:74:88:a1:85:8c:2d: d3:9b:5d:29:c9:e0:11:cc:81:f2:59:a7:10:94:71:7a:f2:2a: 7c:66:99:35:78:24:c4:c4:4d:d8:cf:9b:6d:a8:81:d7:5d:f3: b2:ed:61:ad:6a:26:1f:05:89:f1:4c:f3:33:cc:28:03:52:6b: cc:9c:d5:28:7a:17:1a:32:50:ea:16:08:74:8c:da:92:b6:24: a4:80:9e:72:b2:64:36:8b:8e:96:ad:16:77:94:28:7a:c2:ac: ba:96:05:2a:d1:30:48:0c:5d:7d:90:5d:67:3d:41:77:97:7d: 93:9f:64:6c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N4n7/JkoUaTE/dijtbYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Y5Nzc4MmQ2ZjIwMmE3MDE4MzY3MWFhNjMwYzczYWJhMzMzMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kQedYQVl+EuS/5fLpCcaVy/2V+E eRzfwNJztFJruNZbss+0iGZCiXuL2EDM122aqm1vnlcOgvcOfNPU8uO80rbEcdMe SWomApzB5xoyn200u6c/V/1S9okeCBV6eIhhIdmyJAZecv7W6d+NO3AumhTlb2+v +MoAEmlsBZG8qzS3fsVb3Or2gpGu/7SIhkxMRo3mQf9QG1FpHJX1TeJRzcaLfCDo h0ZNli0WNdJccbzagpE1N013OMUTcAhaOrzd/7R9BIfOHg2LA24Mg4i2AgJ9En6J e6BZ2f1FGPFvoCe3Qh/5IfpIDtwk0n9TBqnn3lQ1sgSnPvhSYHSDmNJuNwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHz5d4LW8gKnAYNnGqYwxzq6MzB+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzE1ZWQ3 YS1kMzA3LTRhMjEtYjg2Yi0zMWExN2IzZDk2NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMTVlZDdh LWQzMDctNGEyMS1iODZiLTMxYTE3YjNkOTY0Yi8xL2ZQbDNndGJ5QXFjQmcyY2Fw akRIT3Jvek1INC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucSYMA0EAgACMAcDBQMqCm5AMA0GCSqGSIb3 DQEBCwUAA4IBAQCokGgEfJfvgSvGcIoG1xlAyh1yjh+1GWREnh8PlBqwEVPAZ1le 4s7T/tvESyd1Ojoawrgc84NpbJGlE5br5kWriPvlWAgUpA4drYvw9gRF2QY2rsib ZYTzCxD4OrF/kW+x5rmEJW1Zk9IkkNmvNXO1GIp5HHk/pzgwQZrXXQQvuQTecbaH lM5lyLF0iKGFjC3Tm10pyeARzIHyWacQlHF68ip8Zpk1eCTExE3Yz5ttqIHXXfOy 7WGtaiYfBYnxTPMzzCgDUmvMnNUoehcaMlDqFgh0jNqStiSkgJ5ysmQ2i46WrRZ3 lCh6wqy6lgUq0TBIDF19kF1nPUF3l32Tn2Rs -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client