This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer File: fWjefEcC_lCTLX7NovJ4OR9Lms4.cer (raw, json) Hash identifier: hUH5r4Md47+bNgEIFMtg/MOYjH3WMR9MOwZnpDkfKEg= Subject key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4DDBC6CB55D3A3B2C20F387175C5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59701 AS: 200997 IP: 79.171.144.0/21 IP: 185.147.72.0/22 IP: 195.5.160.0/24 IP: 2a06:d480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:dd:bc:6c:b5:5d:3a:3b:2c:20:f3:87:17:5c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:e4:1b:12:7c:da:d8:74:e1:30:9c:f6:28: 25:82:c0:11:99:3b:63:87:86:3b:22:be:0b:c7:8c: db:87:15:8d:ed:8c:6b:82:44:7c:37:d2:88:7b:76: 3b:0f:10:94:31:cc:2f:c0:e7:c4:47:7b:2f:92:ec: 70:e0:2c:2f:6c:64:ec:55:d6:24:ea:a0:3e:a9:01: bc:e2:55:5c:7e:d8:b5:bb:1e:a3:83:b0:b6:08:10: 6f:3b:30:ad:51:4f:c4:15:e3:5d:0d:31:43:07:24: 7c:95:c5:b7:91:84:16:36:a0:b9:59:0a:27:19:5f: fc:d8:57:cf:95:de:a6:5c:d8:f5:28:52:6d:dd:cf: fe:df:2e:92:bc:48:d8:4c:83:d9:76:e9:da:de:c4: 8f:bf:0c:c3:a7:4a:b6:9b:b2:8b:b1:80:6e:62:00: a5:f3:08:2b:04:83:d3:58:0c:50:93:58:44:df:db: 04:b3:1d:33:c4:6a:d5:0f:99:1d:eb:da:18:04:67: 66:ac:dc:c8:07:2a:32:e4:81:71:6d:7d:68:29:46: a6:5b:74:77:23:14:3f:aa:04:aa:ff:57:25:09:ef: fc:e4:5e:e7:6a:66:49:56:51:00:f6:7a:61:c3:c8: 83:14:4f:1a:45:bd:1b:44:2a:34:4c:4f:66:85:48: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.144.0/21 185.147.72.0/22 195.5.160.0/24 IPv6: 2a06:d480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59701 200997 Signature Algorithm: sha256WithRSAEncryption a0:c8:4b:c7:70:72:b8:b6:3e:92:fc:a1:9f:c1:95:bd:d1:71: 97:66:ce:ed:e8:ee:6d:b9:96:cc:a7:d5:74:10:27:08:82:20: a7:cd:a1:03:9c:18:03:6b:a3:e5:ca:2f:b2:4a:4a:03:95:6e: 9a:1e:22:c4:09:cf:8a:1c:42:e8:e3:4f:c5:22:15:56:48:8b: 8c:10:9b:3c:84:58:75:4c:7a:49:a0:3d:48:80:ac:5c:31:a6: fb:cd:36:73:f2:ec:6d:e7:75:4d:8f:5f:ff:b9:df:8a:8b:03: 46:a1:0b:aa:02:e1:51:1a:30:f1:9c:d6:6d:be:59:39:3b:8c: 6f:ff:d0:36:8c:d5:fd:43:4b:13:58:da:35:60:a6:45:ea:8a: 70:a0:87:b8:c3:11:f7:9a:55:d1:20:c0:98:d8:28:c6:2b:7a: ab:23:06:ff:30:cd:20:d3:b9:87:f5:1f:57:94:c6:89:e7:17: fc:24:c4:f0:89:2c:4b:65:59:36:e8:f7:00:92:14:86:22:23: 23:c6:24:8e:74:b3:2f:f8:c9:06:01:08:20:c1:24:e4:e3:5a: 93:5e:1f:3b:14:d2:f6:d3:7a:f9:f7:41:94:e4:a3:e3:41:60: 81:70:e8:5d:3d:af:b5:04:30:9e:bb:a4:6c:12:21:20:ca:16: 42:6d:a9:5a -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt+pN28bLVdOjssIPOHF1xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDY4ZGU3YzQ3MDJmZTUwOTMyZDdlY2RhMmYyNzgzOTFmNGI5YWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y7kGxJ82th04TCc9iglgsARmTtj h4Y7Ir4Lx4zbhxWN7YxrgkR8N9KIe3Y7DxCUMcwvwOfER3svkuxw4CwvbGTsVdYk 6qA+qQG84lVcfti1ux6jg7C2CBBvOzCtUU/EFeNdDTFDByR8lcW3kYQWNqC5WQon GV/82FfPld6mXNj1KFJt3c/+3y6SvEjYTIPZduna3sSPvwzDp0q2m7KLsYBuYgCl 8wgrBIPTWAxQk1hE39sEsx0zxGrVD5kd69oYBGdmrNzIByoy5IFxbX1oKUamW3R3 IxQ/qgSq/1clCe/85F7namZJVlEA9nphw8iDFE8aRb0bRCo0TE9mhUgjdwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFH1o3nxHAv5Qky1+zaLyeDkfS5rOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzgyYmU5 OS01MTk1LTQ3NzQtODI1NC0wYzAyNDZjNmY2MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvODJiZTk5 LTUxOTUtNDc3NC04MjU0LTBjMDI0NmM2ZjYyMy8xL2ZXamVmRWNDX2xDVExYN05v dko0T1I5TG1zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDT6uQAwQCuZNIAwQAwwWgMA0EAgACMAcDBQMq BtSAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDpNQIDAxElMA0GCSqGSIb3DQEB CwUAA4IBAQCgyEvHcHK4tj6S/KGfwZW90XGXZs7t6O5tuZbMp9V0ECcIgiCnzaED nBgDa6Plyi+ySkoDlW6aHiLECc+KHELo40/FIhVWSIuMEJs8hFh1THpJoD1IgKxc Mab7zTZz8uxt53VNj1//ud+KiwNGoQuqAuFRGjDxnNZtvlk5O4xv/9A2jNX9Q0sT WNo1YKZF6opwoIe4wxH3mlXRIMCY2CjGK3qrIwb/MM0g07mH9R9XlMaJ5xf8JMTw iSxLZVk26PcAkhSGIiMjxiSOdLMv+MkGAQggwSTk41qTXh87FNL203r590GU5KPj QWCBcOhdPa+1BDCeu6RsEiEgyhZCbala -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:09 2026 by rpki-client