This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer (raw, json) Hash identifier: 94gh8uCIjhai8NH98A8SFCXzqqeCvsxaKJvQRW+eSck= Subject key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED1CD822F996B367E6A5014276855D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49307 IP: 185.214.66.0/24 IP: 2a11:d000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:d8:22:f9:96:b3:67:e6:a5:01:42:76:85:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:03:32:a8:cf:96:ae:89:63:02:58:02:7f: c7:56:2c:0b:81:b9:f1:8f:7f:a7:ad:fb:ca:2e:ce: 32:71:18:55:1d:07:cb:56:87:f8:b1:77:b9:b7:21: 7c:f0:b7:f8:6e:70:b4:0e:38:14:89:5f:17:6d:20: db:e9:8a:a1:ad:04:c4:13:f3:dd:23:c3:40:8a:f0: 31:62:bb:2d:8f:3e:cd:d2:9c:c1:56:0b:dc:88:e2: b5:ee:2e:c6:59:56:10:a3:b5:28:99:f8:2f:b2:88: 7d:3e:42:fb:f5:f8:6d:84:db:07:c8:10:17:92:73: 60:ad:84:40:e8:67:79:82:22:f3:1b:66:04:34:dd: f6:18:f1:ff:89:94:23:d9:56:aa:07:17:7c:8e:75: 04:9c:68:97:9f:bc:0f:fa:1a:a8:78:d6:62:91:d0: c5:66:31:39:85:b2:5f:8d:1a:5b:b9:64:0e:28:20: 4f:cc:36:19:7c:3b:e5:d7:c6:7e:99:28:2b:89:da: e5:9e:b3:a0:c0:d8:b7:67:76:e5:81:db:65:3e:8e: 81:a4:2f:3d:84:9b:13:97:a2:89:0f:6f:39:c1:c8: ba:35:9c:c7:b3:2d:ff:bb:b8:4f:63:96:ec:cc:14: 42:e7:74:54:72:29:43:31:f3:b0:f9:b6:8a:3a:e7: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.66.0/24 IPv6: 2a11:d000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49307 Signature Algorithm: sha256WithRSAEncryption 4e:1f:0a:5e:e0:14:5c:c5:10:72:a5:c4:69:6f:b7:08:28:c3: 29:00:e9:d0:64:b3:49:b2:58:13:06:48:c8:d4:5b:e3:37:71: 2b:b6:e7:cc:c6:2c:5a:92:4a:65:82:a5:43:2e:fb:62:4e:52: 3b:93:9a:da:fb:f7:d0:92:5b:dc:8a:8a:bd:15:aa:3a:f6:15: 07:a3:af:d9:3d:67:07:20:45:c1:a5:90:f2:2a:6f:24:fe:4d: fa:8f:5b:75:5b:66:28:f5:1f:95:5f:51:7c:bb:c9:68:23:74: cb:b9:61:48:cc:4d:c9:eb:c9:72:e4:f5:11:98:f0:e2:61:b2: e9:df:5a:2a:cd:88:7d:03:48:cf:cf:f0:1d:89:74:bc:6b:16: a2:c8:80:8e:93:e2:3c:aa:9e:93:c8:28:bd:9f:a7:ea:94:2a: 54:f1:ae:6d:2e:68:75:89:d0:26:07:67:c0:1d:53:6d:c3:ca: 07:46:9c:b5:2f:6b:01:7b:71:7d:2b:a5:85:32:56:e2:23:eb: f2:da:8f:f4:53:fd:02:1d:ff:71:89:87:99:a4:0e:29:3a:3e: 5c:87:7f:f5:00:58:ec:20:35:c4:92:89:24:6e:97:2d:22:98: 73:6d:76:14:f4:e0:40:84:dc:3b:9c:cb:dc:b1:f8:ae:b0:7c: f8:6f:0d:df -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57RzYIvmWs2fmpQFCdoVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM3OGQ1ZTlmNmUyMjgzMmY5NDM2ZGU0MmEwMDAwM2EzNWU1YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk90DMqjPlq6JYwJYAn/HViwLgbnx j3+nrfvKLs4ycRhVHQfLVof4sXe5tyF88Lf4bnC0DjgUiV8XbSDb6YqhrQTEE/Pd I8NAivAxYrstjz7N0pzBVgvciOK17i7GWVYQo7Uomfgvsoh9PkL79fhthNsHyBAX knNgrYRA6Gd5giLzG2YENN32GPH/iZQj2VaqBxd8jnUEnGiXn7wP+hqoeNZikdDF ZjE5hbJfjRpbuWQOKCBPzDYZfDvl18Z+mSgridrlnrOgwNi3Z3blgdtlPo6BpC89 hJsTl6KJD285wci6NZzHsy3/u7hPY5bszBRC53RUcilDMfOw+baKOufMZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH03jV6fbiKDL5Q23kKgAAOjXlrcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzRiNWM1 OC01ZThlLTRjOTctYjdjMC02NDA4OWYyMjgyNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNGI1YzU4 LTVlOGUtNGM5Ny1iN2MwLTY0MDg5ZjIyODI2Yi8xL2ZUZU5YcDl1SW9NdmxEYmVR cUFBQTZOZVd0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudZCMA0EAgACMAcDBQMqEdAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAmzANBgkqhkiG9w0BAQsFAAOCAQEATh8KXuAUXMUQ cqXEaW+3CCjDKQDp0GSzSbJYEwZIyNRb4zdxK7bnzMYsWpJKZYKlQy77Yk5SO5Oa 2vv30JJb3IqKvRWqOvYVB6Ov2T1nByBFwaWQ8ipvJP5N+o9bdVtmKPUflV9RfLvJ aCN0y7lhSMxNyevJcuT1EZjw4mGy6d9aKs2IfQNIz8/wHYl0vGsWosiAjpPiPKqe k8govZ+n6pQqVPGubS5odYnQJgdnwB1TbcPKB0actS9rAXtxfSulhTJW4iPr8tqP 9FP9Ah3/cYmHmaQOKTo+XId/9QBY7CA1xJKJJG6XLSKYc212FPTgQITcO5zL3LH4 rrB8+G8N3w== -----END CERTIFICATE-----Generated at Mon Jan 19 18:37:03 2026 by rpki-client