This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer File: fTssMztylVesC-AnQLIiltgCv4E.cer (raw, json) Hash identifier: of4+dIRNENF/BdLSCDKUoK+WBzd7P72GX9uayI5tGrI= Subject key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4F047BA480939A3EECE68255E832E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207242 IP: 185.162.24.0/22 IP: 185.194.44.0/22 IP: 185.195.84.0/22 IP: 185.195.224.0/22 IP: 185.242.72.0/22 IP: 2a07:ca40::/29 IP: 2a0a:4440::/32 IP: 2a0a:5640::/32 IP: 2a0a:5f40::/32 IP: 2a0c:c380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f0:47:ba:48:09:39:a3:ee:ce:68:25:5e:83:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d3b2c333b729557ac0be02740b22296d802bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:f8:28:b8:ab:34:5e:f0:9d:0d:5d:a7:86: dc:7a:34:5a:f3:c5:02:82:fa:7f:5b:01:fe:a8:b6: a8:24:78:1f:6b:f1:f5:e2:e9:59:0c:3e:61:f9:61: 29:df:fd:2c:9f:89:0f:74:5a:d6:2b:2e:88:97:e8: f0:d1:58:12:11:20:76:90:f5:21:8f:93:bd:86:12: 16:e7:42:bd:68:e0:8d:fa:84:78:c5:4e:d8:45:93: 3e:ce:54:7a:11:89:c3:9b:b0:0f:c4:6e:18:2f:7e: e1:a2:5d:cc:ca:2c:0e:69:7e:27:9c:82:08:45:e0: ce:b8:77:49:ab:38:0c:a1:1b:e0:e7:75:6a:a8:5a: 93:94:18:3d:e2:4d:0d:f4:b9:c9:c2:81:68:ff:4c: 08:9f:51:fc:cc:8e:84:8c:59:96:c2:82:4e:9a:26: c8:04:44:87:2e:3a:64:a1:d2:f9:43:63:61:cb:61: 80:28:45:04:0c:2b:30:75:5d:d4:58:fe:46:c8:e2: c4:c4:9f:32:5d:be:d6:a5:a0:94:70:04:96:7a:4a: bc:35:b1:07:01:c4:4d:58:eb:9b:08:72:bf:09:06: fd:91:63:2c:bf:d7:1f:27:16:51:c5:52:c6:b2:e7: 8f:1d:b4:6e:6d:76:14:62:cd:2b:68:08:aa:b8:e6: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.24.0/22 185.194.44.0/22 185.195.84.0/22 185.195.224.0/22 185.242.72.0/22 IPv6: 2a07:ca40::/29 2a0a:4440::/32 2a0a:5640::/32 2a0a:5f40::/32 2a0c:c380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207242 Signature Algorithm: sha256WithRSAEncryption 69:6f:af:ca:92:44:e7:9b:ae:f4:0d:97:ba:2c:57:bf:b5:8b: 32:47:b0:2f:9c:f4:03:2a:c5:e8:29:d1:2a:87:f5:5b:e6:ba: 7c:5b:25:f3:7b:eb:7f:8c:20:91:9d:de:cd:ec:ec:21:ac:95: 40:27:62:ce:ec:f1:0d:3a:9f:a9:09:cb:4c:9d:be:cd:7f:fa: cf:98:36:ae:2e:65:7d:89:87:b8:08:02:3b:ec:e7:68:36:d3: f1:0f:45:d0:a5:d0:03:b4:8f:b7:a0:60:be:b7:0c:e2:cc:52: fd:cf:69:ec:1c:5b:ad:ce:05:82:d5:0f:fc:1c:46:c9:2d:01: 56:79:8a:65:b1:fc:bb:9e:32:fe:b0:43:9c:c6:d1:4d:55:43: 78:7c:41:a9:36:17:ef:bb:bd:a4:73:74:c9:b4:58:5b:07:ff: 5c:c5:7b:53:32:b3:e0:75:32:38:93:54:90:cd:a0:6d:e7:73: 5a:5d:79:03:dc:0a:47:af:d5:8b:66:1a:f8:fe:f7:35:8e:29: bc:70:e9:03:cb:fc:9b:8e:33:82:81:ab:3d:73:30:d9:15:0e: 80:22:97:f7:9b:8e:3c:17:15:b6:4a:2f:cb:ef:12:d5:3d:d4: da:6c:83:7e:e1:44:cd:fe:42:3b:22:07:20:be:38:73:c6:49: c3:85:ab:94 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt7pPBHukgJOaPuzmglXoMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDNiMmMzMzNiNzI5NTU3YWMwYmUwMjc0MGIyMjI5NmQ4MDJiZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCH4KLirNF7wnQ1dp4bcejRa88UC gvp/WwH+qLaoJHgfa/H14ulZDD5h+WEp3/0sn4kPdFrWKy6Il+jw0VgSESB2kPUh j5O9hhIW50K9aOCN+oR4xU7YRZM+zlR6EYnDm7APxG4YL37hol3MyiwOaX4nnIII ReDOuHdJqzgMoRvg53VqqFqTlBg94k0N9LnJwoFo/0wIn1H8zI6EjFmWwoJOmibI BESHLjpkodL5Q2Nhy2GAKEUEDCswdV3UWP5GyOLExJ8yXb7WpaCUcASWekq8NbEH AcRNWOubCHK/CQb9kWMsv9cfJxZRxVLGsuePHbRubXYUYs0raAiquOYSnwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFH07LDM7cpVXrAvgJ0CyIpbYAr+BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzZiMWI2 NC0yNTY0LTQ3YTctYjFjMS01MjgzNWRiNjUxMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNmIxYjY0 LTI1NjQtNDdhNy1iMWMxLTUyODM1ZGI2NTEyYy8xL2ZUc3NNenR5bFZlc0MtQW5R TElpbHRnQ3Y0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTAkBAIAATAeAwQCuaIYAwQCucIsAwQCucNUAwQCucPgAwQCufJI MCkEAgACMCMDBQMqB8pAAwUAKgpEQAMFACoKVkADBQAqCl9AAwUAKgzDgDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMDKYowDQYJKoZIhvcNAQELBQADggEBAGlvr8qS ROebrvQNl7osV7+1izJHsC+c9AMqxegp0SqH9VvmunxbJfN763+MIJGd3s3s7CGs lUAnYs7s8Q06n6kJy0ydvs1/+s+YNq4uZX2Jh7gIAjvs52g20/EPRdCl0AO0j7eg YL63DOLMUv3PaewcW63OBYLVD/wcRsktAVZ5imWx/LueMv6wQ5zG0U1VQ3h8Qak2 F++7vaRzdMm0WFsH/1zFe1Mys+B1MjiTVJDNoG3nc1pdeQPcCkev1YtmGvj+9zWO Kbxw6QPL/JuOM4KBqz1zMNkVDoAil/ebjjwXFbZKL8vvEtU91Npsg37hRM3+Qjsi ByC+OHPGScOFq5Q= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:57 2026 by rpki-client