This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer File: fQIT4-fr5hcKNgCo465k7ZYsDjY.cer (raw, json) Hash identifier: kStkYpS8NHKz9SPrK9MMnCKh6v821yIhFurfkYOgvn8= Subject key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36222E49208A5979BBE53A16C27161 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50719 AS: 60587 IP: 5.206.200.0/21 IP: 45.82.168.0/22 IP: 46.151.200.0/21 IP: 91.222.92.0/22 IP: 91.227.230.0/23 IP: 91.227.236.0/22 IP: 180.149.40.0/22 IP: 185.29.88.0/22 IP: 193.105.214.0/24 IP: 195.191.252.0/23 IP: 2001:67c:17c::/48 IP: 2001:7f8:71::/48 IP: 2a00:a6a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:22:2e:49:20:8a:59:79:bb:e5:3a:16:c2:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:88:5f:64:ef:c7:3d:92:02:75:cf:50:94: 13:7d:eb:05:16:54:5f:44:f9:bc:b3:9b:f1:78:4d: 33:38:cd:79:ac:3d:26:df:81:3c:f2:d4:c2:9a:65: 95:01:94:58:1a:ea:bb:09:23:fa:34:33:71:f8:3e: ba:21:6c:f8:ad:9f:d6:24:fb:7f:54:9b:65:65:e5: 9c:b7:d7:90:fb:da:a1:43:3e:97:ac:72:9f:93:99: 2b:be:a3:63:8e:1f:5e:da:8c:0a:ab:d4:b0:c0:80: aa:2a:5a:37:44:4d:bb:91:ca:1f:44:e6:2b:80:3a: 88:85:3d:35:12:8f:3a:68:1a:34:35:3c:30:ad:0e: 7a:67:f8:4c:d2:06:62:2b:d6:18:0b:b2:47:20:62: 09:10:aa:cb:c9:d6:90:7a:4f:7e:36:1f:e9:29:96: 6d:31:4d:9e:4f:f1:8c:af:9b:9a:df:93:9e:b5:e6: 76:97:00:62:ab:ad:b2:30:59:ea:dd:a5:10:6f:aa: 00:8e:d7:2d:6a:7e:f7:d5:d1:ac:98:e1:4f:b1:b9: c9:23:28:f5:c2:48:53:26:cd:b5:1a:4c:82:6d:1f: c3:4b:d6:39:be:f3:81:ae:dc:ae:2d:51:1d:42:16: aa:c4:98:62:96:85:fa:9a:0f:90:d3:4a:29:b2:1c: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.200.0/21 45.82.168.0/22 46.151.200.0/21 91.222.92.0/22 91.227.230.0/23 91.227.236.0/22 180.149.40.0/22 185.29.88.0/22 193.105.214.0/24 195.191.252.0/23 IPv6: 2001:67c:17c::/48 2001:7f8:71::/48 2a00:a6a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50719 60587 Signature Algorithm: sha256WithRSAEncryption ae:65:66:2b:d1:10:4f:c4:5d:a7:30:af:24:c1:dd:71:90:d9: 08:cd:41:76:6d:44:a6:97:1d:a0:fc:82:a9:18:20:20:f9:51: 82:8c:dc:aa:8a:08:55:fd:46:64:b8:01:c0:e7:1e:4e:04:82: 60:d0:b6:de:61:b2:98:73:ee:d6:1c:c2:a4:0c:33:37:60:f7: 73:52:bc:dd:f6:fa:4a:48:24:ea:51:59:2f:cb:18:31:15:f5: 2d:ca:00:09:66:85:1a:75:5b:c5:4a:a2:4e:68:40:61:0a:aa: d0:bc:ef:b9:1d:42:56:a4:53:31:0c:aa:b9:c3:96:a1:e3:75: 55:1f:c3:1d:ca:38:90:84:26:17:8d:1d:3f:ae:17:44:56:24: e7:34:61:30:58:b2:b6:cf:cd:8f:15:38:a4:37:02:5d:8a:40: e2:43:72:5f:20:19:fd:70:b2:6a:f5:9b:c8:c8:9b:8c:f4:8c: 51:ff:1b:1c:9f:9c:b5:89:85:8a:2c:5d:f4:fb:0c:a4:1b:62: c0:dd:ee:e5:ca:1e:af:7b:90:81:d3:ab:51:8c:ae:e5:4e:24: fa:09:cb:fc:7f:f8:b2:17:e7:58:5c:be:b4:71:46:10:25:ca: 1f:ec:f5:28:10:c2:4b:12:db:4e:26:38:bf:62:3b:e0:21:97: ae:0b:49:70 -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISAZt7NiIuSSCKWXm75ToWwnFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDAyMTNlM2U3ZWJlNjE3MGEzNjAwYThlM2FlNjRlZDk2MmMwZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGqIX2Tvxz2SAnXPUJQTfesFFlRf RPm8s5vxeE0zOM15rD0m34E88tTCmmWVAZRYGuq7CSP6NDNx+D66IWz4rZ/WJPt/ VJtlZeWct9eQ+9qhQz6XrHKfk5krvqNjjh9e2owKq9SwwICqKlo3RE27kcofROYr gDqIhT01Eo86aBo0NTwwrQ56Z/hM0gZiK9YYC7JHIGIJEKrLydaQek9+Nh/pKZZt MU2eT/GMr5ua35OeteZ2lwBiq62yMFnq3aUQb6oAjtctan731dGsmOFPsbnJIyj1 wkhTJs21GkyCbR/DS9Y5vvOBrtyuLVEdQhaqxJhiloX6mg+Q00opshwbIQIDAQAB o4IC/DCCAvgwHQYDVR0OBBYEFH0CE+Pn6+YXCjYAqOOuZO2WLA42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzgyMWRj Mi02NzY2LTQ5ODgtYjc3Ny0wMzUzMjE0MGVmNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvODIxZGMy LTY3NjYtNDk4OC1iNzc3LTAzNTMyMTQwZWY1Mi8xL2ZRSVQ0LWZyNWhjS05nQ280 NjVrN1pZc0RqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUF BwEHAQH/BGcwZTBCBAIAATA8AwQDBc7IAwQCLVKoAwQDLpfIAwQCW95cAwQBW+Pm AwQCW+PsAwQCtJUoAwQCuR1YAwQAwWnWAwQBw7/8MB8EAgACMBkDBwAgAQZ8AXwD BwAgAQf4AHEDBQAqAKagMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDGHwIDAOyr MA0GCSqGSIb3DQEBCwUAA4IBAQCuZWYr0RBPxF2nMK8kwd1xkNkIzUF2bUSmlx2g /IKpGCAg+VGCjNyqighV/UZkuAHA5x5OBIJg0LbeYbKYc+7WHMKkDDM3YPdzUrzd 9vpKSCTqUVkvyxgxFfUtygAJZoUadVvFSqJOaEBhCqrQvO+5HUJWpFMxDKq5w5ah 43VVH8MdyjiQhCYXjR0/rhdEViTnNGEwWLK2z82PFTikNwJdikDiQ3JfIBn9cLJq 9ZvIyJuM9IxR/xscn5y1iYWKLF30+wykG2LA3e7lyh6ve5CB06tRjK7lTiT6Ccv8 f/iyF+dYXL60cUYQJcof7PUoEMJLEttOJji/YjvgIZeuC0lw -----END CERTIFICATE-----Generated at Mon Jan 26 23:47:37 2026 by rpki-client