This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer File: fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer (raw, json) Hash identifier: s7bO57rvRcafmbyV9SAIjFtQVh7yuKiiIKibOYcq86A= Subject key identifier: 7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C27AA093C2BB91C4967CD6BA97BEA5863 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 04 Feb 2026 07:59:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215580 IP: 185.90.88.0/22 IP: 2a05:d7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:aa:09:3c:2b:b9:1c:49:67:cd:6b:a9:7b:ea:58:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 4 07:59:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d37046ff204d06194c90b5a29006c7c486d5d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:c8:89:90:7a:21:9c:e6:e6:de:09:c4:b6: d1:88:0b:b2:f2:29:13:b7:87:7c:c6:db:ab:f4:a6: fe:b2:29:ef:64:49:07:a7:ff:3f:d8:5b:48:ad:a7: 66:0c:c4:65:f6:04:c0:46:36:dc:fc:dc:e1:af:06: c7:72:0d:be:a9:7d:ac:3d:4d:22:2c:e1:84:02:27: aa:df:55:7f:8d:66:ac:a6:db:17:07:ca:df:93:7e: 92:45:61:b9:ce:82:f3:df:29:bb:87:1b:71:c8:eb: c0:cb:9e:f8:61:ff:27:ce:04:c7:5c:64:9c:7a:27: 54:5c:29:da:ae:90:3b:9b:be:00:58:a7:29:43:a5: 2b:ae:4c:4c:79:23:94:fc:3b:eb:1b:3d:32:fd:9e: 9e:5c:e6:58:f2:c2:ae:88:41:e5:97:82:a4:ea:69: 9e:7e:ec:1f:8e:4b:c1:67:ab:cb:a7:1d:45:9b:aa: 16:39:03:78:0e:cb:e4:4d:30:0c:90:49:c4:aa:90: b6:26:d0:f6:dc:db:e9:04:e0:2d:88:2e:ef:14:2f: e4:12:3e:63:71:5d:8b:43:79:c8:00:d0:da:71:bc: 0a:01:21:83:30:91:74:7b:fb:30:45:22:33:db:02: f4:e6:d1:00:59:31:b2:bc:8a:e3:5e:81:7d:d7:7d: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.88.0/22 IPv6: 2a05:d7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215580 Signature Algorithm: sha256WithRSAEncryption 78:14:e4:74:3d:5c:e9:39:03:69:20:75:61:85:1c:be:ab:20: 32:69:e3:c7:ee:c1:37:9a:26:fa:f5:66:3e:f4:5f:2f:4a:6f: b4:d6:49:d1:79:78:d2:30:72:f1:fb:1e:2c:2f:7f:0d:f6:03: 47:0f:93:74:74:06:dc:1f:f6:23:94:a6:f2:90:ed:8d:c1:55: 7a:96:67:15:48:c0:2d:de:20:53:ed:7a:25:c7:bb:f3:29:6f: fa:ff:a0:3b:08:53:00:21:f0:55:d2:fb:95:0a:a5:12:5e:5f: 2b:83:b6:de:4b:ef:e6:30:c2:78:ef:9a:8e:2b:6f:5c:e8:b3: 42:1c:4f:95:9b:64:66:30:eb:11:0f:a5:b9:f7:b0:b3:43:11: c0:f8:b8:f3:2f:e0:c6:e2:92:1a:50:9c:a9:78:05:29:27:a1: 5a:7f:62:7b:4a:ad:24:43:58:67:55:68:24:01:e3:9e:3a:d8: 27:71:ec:fd:f3:84:76:f1:b1:36:f5:02:e6:bc:e4:0f:14:03: b1:20:f2:8d:c5:89:cd:c7:99:01:ad:8e:31:97:76:f5:db:8f: a8:2f:ad:b7:b8:80:eb:e7:72:5f:58:17:53:72:02:22:9e:bf: 4e:d3:86:6a:47:5e:9d:be:3f:15:36:4b:4b:58:51:ef:de:3b: ec:58:11:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwnqgk8K7kcSWfNa6l76lhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA0MDc1OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM3MDQ2ZmYyMDRkMDYxOTRjOTBiNWEyOTAwNmM3YzQ4NmQ1ZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA883IiZB6IZzm5t4JxLbRiAuy8ikT t4d8xtur9Kb+sinvZEkHp/8/2FtIradmDMRl9gTARjbc/NzhrwbHcg2+qX2sPU0i LOGEAieq31V/jWasptsXB8rfk36SRWG5zoLz3ym7hxtxyOvAy574Yf8nzgTHXGSc eidUXCnarpA7m74AWKcpQ6UrrkxMeSOU/DvrGz0y/Z6eXOZY8sKuiEHll4Kk6mme fuwfjkvBZ6vLpx1Fm6oWOQN4DsvkTTAMkEnEqpC2JtD23NvpBOAtiC7vFC/kEj5j cV2LQ3nIANDacbwKASGDMJF0e/swRSIz2wL05tEAWTGyvIrjXoF9131/pQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH03BG/yBNBhlMkLWikAbHxIbV0xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2EyNmQ0 MC0wN2M5LTRjYWItYTVlZS1iNGFiOTFhZTVjYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYTI2ZDQw LTA3YzktNGNhYi1hNWVlLWI0YWI5MWFlNWNhMC8xL2ZUY0ViX0lFMEdHVXlRdGFL UUJzZkVodFhURS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVpYMA0EAgACMAcDBQMqBdfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKHDANBgkqhkiG9w0BAQsFAAOCAQEAeBTkdD1c6TkD aSB1YYUcvqsgMmnjx+7BN5om+vVmPvRfL0pvtNZJ0Xl40jBy8fseLC9/DfYDRw+T dHQG3B/2I5Sm8pDtjcFVepZnFUjALd4gU+16Jce78ylv+v+gOwhTACHwVdL7lQql El5fK4O23kvv5jDCeO+ajitvXOizQhxPlZtkZjDrEQ+lufews0MRwPi48y/gxuKS GlCcqXgFKSehWn9ie0qtJENYZ1VoJAHjnjrYJ3Hs/fOEdvGxNvUC5rzkDxQDsSDy jcWJzceZAa2OMZd29duPqC+tt7iA6+dyX1gXU3ICIp6/TtOGakdenb4/FTZLS1hR 79477FgR/g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client