This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer File: fZ9lKePCbtCMlfdP5j17Lush9XE.cer (raw, json) Hash identifier: ABoI9GgewXU5y0+uBWNov4d8rizG2ZUE8eVCNWa2JFg= Subject key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1358CCD3DE67CAC540B661E3867664 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.208.59.0/24 IP: 141.98.208.0/24 IP: 185.5.129.0/24 IP: 185.221.60.0/24 IP: 194.26.132.0/24 IP: 194.99.64.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:58:cc:d3:de:67:ca:c5:40:b6:61:e3:86:76:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:66:b0:72:92:f7:fb:82:93:1e:16:2e:04: d1:23:cd:cc:95:15:2c:3e:36:46:85:bd:96:74:2d: c1:2e:96:84:12:50:b2:3e:b9:7a:db:86:ae:dd:4b: 1e:b8:40:36:a8:9a:fc:bd:c4:75:c6:c4:7e:39:bb: ba:7d:da:15:0f:2b:28:92:c9:9d:48:22:73:ad:f9: 96:74:62:e2:12:90:00:d9:a3:06:b2:85:a0:77:3a: 0f:1e:c2:5a:2c:9a:79:03:a9:45:81:91:05:13:0f: e1:03:bb:b2:cb:c9:ac:35:9a:9b:22:c3:99:d6:b4: 84:61:d4:d6:39:84:10:27:6c:db:bd:74:f0:e9:b3: b6:4a:d1:fd:c0:f4:5a:c7:3e:2c:7a:90:19:02:54: dc:c9:2e:cd:73:d7:50:33:51:1b:25:81:7d:48:f2: f5:4f:8a:24:7d:a0:7a:fd:2c:d7:f8:0c:c7:0d:44: 97:86:15:25:1e:9c:f7:b7:4c:9c:de:5c:cd:56:82: d2:28:4b:8e:81:b7:be:df:d2:3d:c2:ed:08:ac:19: 00:5f:c5:f0:7b:81:26:60:df:2f:42:33:9b:07:7f: b2:85:df:3f:c6:e4:9c:73:dd:5a:44:b6:a5:b6:cb: 9b:ea:73:fa:05:35:a9:98:6d:98:a1:98:4e:31:3a: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.59.0/24 141.98.208.0/24 185.5.129.0/24 185.221.60.0/24 194.26.132.0/24 194.99.64.0/24 Signature Algorithm: sha256WithRSAEncryption 16:16:b8:f8:f9:0b:3e:8b:71:0a:89:82:2e:4f:6c:6e:22:4b: 50:c6:da:44:92:29:49:85:29:ad:c6:6a:57:8c:cb:08:29:a7: ce:a4:91:0b:40:a9:c0:e9:e5:5d:bd:1b:15:5c:d5:91:bc:20: 32:3a:9f:72:9c:c4:63:16:55:a9:6e:cd:53:a3:a8:12:bc:7a: 15:8c:32:bd:37:c6:36:b4:6d:49:dd:f8:98:5c:95:d2:a1:3c: 92:be:93:69:97:78:53:09:43:56:3c:1b:37:59:37:b1:20:dc: 82:2f:9e:64:ec:b7:f0:f3:b6:bb:59:c6:e0:50:7e:85:50:c7: 06:b1:be:bb:b8:1c:ec:04:8e:8d:ad:c1:8d:19:5e:d9:d4:12: 9e:36:78:42:f9:70:81:8e:ae:0e:41:5f:c3:a3:26:dd:a6:06: ee:03:03:3f:79:74:4b:11:fc:21:70:4d:9d:78:96:02:e0:fe: 2d:3c:ed:e1:dc:04:62:d8:b4:5c:98:bd:c4:5b:66:53:d1:84: 46:c4:69:88:f0:71:23:04:11:2f:01:7f:b3:18:80:76:54:18: 08:c8:b6:dd:a5:86:ff:be:0b:95:8c:63:2e:1f:86:2a:10:e5: 34:e0:16:c4:79:90:eb:c7:41:e1:1c:fa:10:c6:9f:3c:6f:4c: 37:ce:4f:b9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt8E1jM095nysVAtmHjhnZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDlmNjUyOWUzYzI2ZWQwOGM5NWY3NGZlNjNkN2IyZWViMjFmNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QZmsHKS9/uCkx4WLgTRI83MlRUs PjZGhb2WdC3BLpaEElCyPrl624au3UseuEA2qJr8vcR1xsR+Obu6fdoVDysoksmd SCJzrfmWdGLiEpAA2aMGsoWgdzoPHsJaLJp5A6lFgZEFEw/hA7uyy8msNZqbIsOZ 1rSEYdTWOYQQJ2zbvXTw6bO2StH9wPRaxz4sepAZAlTcyS7Nc9dQM1EbJYF9SPL1 T4okfaB6/SzX+AzHDUSXhhUlHpz3t0yc3lzNVoLSKEuOgbe+39I9wu0IrBkAX8Xw e4EmYN8vQjObB3+yhd8/xuScc91aRLaltsub6nP6BTWpmG2YoZhOMTpybwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFH2fZSnjwm7QjJX3T+Y9ey7rIfVxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzI2N2I1 MS05YWRiLTQwMzgtYjI0Yy05MjYyNDBhYTVmMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMjY3YjUx LTlhZGItNDAzOC1iMjRjLTkyNjI0MGFhNWYwNS8xL2ZaOWxLZVBDYnRDTWxmZFA1 ajE3THVzaDlYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQAW9A7AwQAjWLQAwQAuQWBAwQAud08AwQAwhqE AwQAwmNAMA0GCSqGSIb3DQEBCwUAA4IBAQAWFrj4+Qs+i3EKiYIuT2xuIktQxtpE kilJhSmtxmpXjMsIKafOpJELQKnA6eVdvRsVXNWRvCAyOp9ynMRjFlWpbs1To6gS vHoVjDK9N8Y2tG1J3fiYXJXSoTySvpNpl3hTCUNWPBs3WTexINyCL55k7Lfw87a7 WcbgUH6FUMcGsb67uBzsBI6NrcGNGV7Z1BKeNnhC+XCBjq4OQV/DoybdpgbuAwM/ eXRLEfwhcE2deJYC4P4tPO3h3ARi2LRcmL3EW2ZT0YRGxGmI8HEjBBEvAX+zGIB2 VBgIyLbdpYb/vguVjGMuH4YqEOU04BbEeZDrx0HhHPoQxp88b0w3zk+5 -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:21 2026 by rpki-client