This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer (raw, json) Hash identifier: y+6KqP9GCY4MrdqczpmOhhCXZ3LCv9Dvqlwuq+l+GR8= Subject key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E69E65CB587656A3B8170BD90B6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202297 IP: 45.139.224.0/22 IP: 2001:678:aa4::/48 IP: 2001:678:aa8::/48 IP: 2a04:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e6:9e:65:cb:58:76:56:a3:b8:17:0b:d9:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:20:b3:a7:94:28:62:d8:bf:c1:44:a6:c8: 1e:fe:fb:cc:2d:87:d8:8e:a4:b9:a6:45:bf:54:37: 72:c4:92:44:8c:58:44:d3:c6:2e:1f:17:f6:a1:35: 63:1e:0e:e2:c5:89:70:0a:62:f1:47:12:b5:79:fb: f0:dc:11:40:d6:b4:4c:e2:ba:67:24:8d:a6:49:0c: 58:be:c7:59:53:b5:33:47:8e:2a:b3:ac:5d:24:4e: 11:75:79:0b:20:56:ad:20:5b:7e:ce:20:da:2b:5b: 21:7e:27:25:13:14:f6:cc:79:8b:47:57:e0:a6:90: 52:5b:3e:4f:19:b3:1c:cb:eb:9b:d8:06:ed:4a:36: 57:79:9a:05:c8:9a:90:00:29:37:de:e6:f3:a3:9d: de:6d:66:7b:42:f7:1d:b7:96:4e:df:d4:4f:fb:78: 36:f8:d5:8f:38:b6:8a:0b:b9:7a:20:21:ea:6a:f4: 81:dd:97:6f:1f:d7:19:a0:99:34:2e:16:12:bd:98: 2b:04:71:aa:6a:f7:91:7c:c9:a1:d1:22:95:bc:c0: 20:d5:61:a0:d4:51:6d:b3:98:fa:10:61:cd:9c:da: 16:ca:67:ba:82:73:03:c9:02:b5:6e:0a:2f:25:77: 65:79:3c:94:de:1d:90:30:88:5a:04:67:dc:d6:3a: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.224.0/22 IPv6: 2001:678:aa4::/48 2001:678:aa8::/48 2a04:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202297 Signature Algorithm: sha256WithRSAEncryption 7c:98:d3:d4:73:d6:84:17:b8:fc:a7:9f:86:0b:7f:de:54:3a: 49:f3:3d:4b:78:a4:3b:21:31:d7:44:32:76:9e:13:a3:a0:0a: ec:9e:a3:c7:99:30:e3:b4:c9:a7:f2:68:88:bb:a6:02:98:b6: 3c:7a:ca:e9:80:ae:1a:c2:ef:39:ae:43:a4:3f:c5:0b:53:31: 5d:bb:37:26:45:36:b4:f8:34:6a:8d:c6:d9:63:a4:8d:d2:61: aa:d3:68:98:4c:4d:e9:9b:a9:cb:ab:d3:a8:82:4d:9a:e4:39: 9a:22:f6:c6:06:d1:d0:0c:b2:91:dd:de:c4:59:05:9e:97:3c: 2e:f5:52:75:8d:96:b3:73:78:07:3e:38:8c:62:e4:47:da:01: a7:c5:2b:22:15:8d:6e:27:b9:2d:4e:d2:1d:8f:bd:8d:be:2c: a7:5a:26:da:b9:63:cd:01:08:19:bf:aa:cc:36:0e:b9:66:18: f8:4a:76:64:c7:b7:f4:9d:a4:39:52:e5:24:ca:ad:2b:3c:27: 9e:e8:83:99:dc:d6:7b:c8:7a:42:2a:d9:5e:ac:74:6e:f8:38: eb:47:7e:3c:bc:79:97:a4:df:d2:4c:46:48:8c:a2:fd:fd:34: 50:8c:37:13:a3:fd:be:04:6f:ec:a2:4d:a6:a7:f3:0e:3f:cc: bd:0a:42:a5 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3WOaeZctYdlajuBcL2QtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA0YzI1YzJmOGI0N2U1ZGFmNTJkMWM0YzVhNTA5OTlkZDBhMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZEgs6eUKGLYv8FEpsge/vvMLYfY jqS5pkW/VDdyxJJEjFhE08YuHxf2oTVjHg7ixYlwCmLxRxK1efvw3BFA1rRM4rpn JI2mSQxYvsdZU7UzR44qs6xdJE4RdXkLIFatIFt+ziDaK1shficlExT2zHmLR1fg ppBSWz5PGbMcy+ub2AbtSjZXeZoFyJqQACk33ubzo53ebWZ7Qvcdt5ZO39RP+3g2 +NWPOLaKC7l6ICHqavSB3ZdvH9cZoJk0LhYSvZgrBHGqaveRfMmh0SKVvMAg1WGg 1FFts5j6EGHNnNoWyme6gnMDyQK1bgovJXdleTyU3h2QMIhaBGfc1jqqxwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFH0Ewlwvi0fl2vUtHExaUJmd0KCpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4Lzk3MWNj NC01NGQ1LTRjMjgtYTFjMy1lNjNlOTRjYmEwOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTcxY2M0 LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8xL2ZRVENYQy1MUi1YYTlTMGNU RnBRbVozUW9Lay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAMBAIAATAGAwQCLYvgMB8EAgACMBkDBwAgAQZ4CqQDBwAgAQZ4 CqgDBQMqBP8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWOTANBgkqhkiG9w0B AQsFAAOCAQEAfJjT1HPWhBe4/Kefhgt/3lQ6SfM9S3ikOyEx10Qydp4To6AK7J6j x5kw47TJp/JoiLumApi2PHrK6YCuGsLvOa5DpD/FC1MxXbs3JkU2tPg0ao3G2WOk jdJhqtNomExN6Zupy6vTqIJNmuQ5miL2xgbR0Ayykd3exFkFnpc8LvVSdY2Ws3N4 Bz44jGLkR9oBp8UrIhWNbie5LU7SHY+9jb4sp1om2rljzQEIGb+qzDYOuWYY+Ep2 ZMe39J2kOVLlJMqtKzwnnuiDmdzWe8h6QirZXqx0bvg460d+PLx5l6Tf0kxGSIyi /f00UIw3E6P9vgRv7KJNpqfzDj/MvQpCpQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:22 2026 by rpki-client