This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer (raw, json) Hash identifier: zTgpnuiiCZTKfPO6i1o1pcvPIVj+xB+uEdc2pHFL8fk= Subject key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1241AB3388B2D4DBD970CA119774EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209892 IP: 78.142.224.0/22 IP: 193.28.158.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:41:ab:33:88:b2:d4:db:d9:70:ca:11:97:74:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7db8248601e33b83c01405f9be14793614859bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:43:ea:37:e4:1f:09:a9:4e:40:35:fc:1d: 99:53:0b:7c:c0:56:d5:e3:4f:9c:fb:84:f3:b6:0b: c8:fc:fb:21:4a:54:e9:f2:34:9b:d8:27:b9:b0:26: 14:9d:e5:a3:12:70:8e:b7:7e:9f:65:cd:30:a6:2e: dc:27:85:2e:55:c1:b8:28:7c:e2:3f:5d:37:0a:64: 21:ea:f7:f2:13:90:1b:da:3a:2e:87:b9:d2:3b:4d: d8:a8:26:1b:bf:42:73:a4:e4:0a:7e:5e:13:da:f3: af:b3:46:84:e5:05:3c:09:b3:09:82:96:69:14:5c: 4b:49:3d:e6:6c:e2:ce:3a:46:36:df:53:33:48:26: 75:e6:20:e0:a6:62:bf:a1:b8:a2:1a:d5:ae:8f:56: 2c:a0:82:8e:20:31:a2:90:75:f7:58:d4:e4:62:2a: 1f:1c:d8:47:f4:2d:21:90:dd:4f:75:4c:f0:0a:04: 68:9d:43:a9:b9:d7:22:e6:0b:1a:2d:8f:de:6f:20: e4:23:dc:f2:6d:76:94:48:8e:ea:ac:92:7b:c3:8a: bf:7d:67:3a:96:e8:9a:f4:1b:4a:3f:c7:06:54:25: 97:99:6d:82:b5:60:9c:16:79:dc:65:81:20:e2:0a: c4:ce:4f:ee:96:e8:d3:d7:f7:5e:35:bf:9f:08:59: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.224.0/22 193.28.158.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209892 Signature Algorithm: sha256WithRSAEncryption 6f:db:f3:6c:9f:f4:b1:08:d6:0d:6a:16:17:2b:96:54:b0:48: fb:59:de:59:cb:23:96:ba:6b:97:a0:d1:66:04:ff:53:1d:5a: b6:7f:ab:db:59:e9:ab:20:53:6d:1d:e9:40:06:ca:51:3d:38: fe:7f:ca:fc:8f:38:5b:df:ce:55:0c:d0:d5:b1:7a:02:cb:65: b6:c5:1d:a5:a7:0d:84:fd:88:b0:d1:64:59:67:06:a2:e6:0a: fa:f9:58:f0:ba:52:f6:45:ea:be:46:9a:f7:23:4a:2f:d9:a1: 9e:37:9c:3c:d1:cd:5e:7b:72:43:0e:4e:d8:65:ae:db:37:1e: 1e:b4:58:dd:60:4a:d4:3b:ce:d0:e3:ce:33:ee:60:05:e4:08: d3:6d:e2:cc:cc:7d:74:ef:57:dd:b5:6d:73:17:fe:0c:f5:9c: df:6c:14:af:a5:f1:2a:bf:31:b6:43:24:88:03:30:29:b7:89: af:6d:62:49:a2:ea:1c:28:2f:f2:e8:d4:f6:5b:69:06:c3:6d: 31:07:d6:a6:4a:c0:b1:17:fa:3c:7d:38:3a:76:a0:0b:3e:0f: be:83:d3:e8:ed:14:48:16:e4:ca:c4:cb:d0:a1:cf:09:c6:6d: 1a:03:43:06:98:05:aa:f5:db:cf:64:43:1c:68:e0:7f:e9:39: 73:eb:2e:1c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8EkGrM4iy1NvZcMoRl3TuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGI4MjQ4NjAxZTMzYjgzYzAxNDA1ZjliZTE0NzkzNjE0ODU5YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznhD6jfkHwmpTkA1/B2ZUwt8wFbV 40+c+4TztgvI/PshSlTp8jSb2Ce5sCYUneWjEnCOt36fZc0wpi7cJ4UuVcG4KHzi P103CmQh6vfyE5Ab2jouh7nSO03YqCYbv0JzpOQKfl4T2vOvs0aE5QU8CbMJgpZp FFxLST3mbOLOOkY231MzSCZ15iDgpmK/obiiGtWuj1YsoIKOIDGikHX3WNTkYiof HNhH9C0hkN1PdUzwCgRonUOpudci5gsaLY/ebyDkI9zybXaUSI7qrJJ7w4q/fWc6 luia9BtKP8cGVCWXmW2CtWCcFnncZYEg4grEzk/ulujT1/deNb+fCFmc7wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFH24JIYB4zuDwBQF+b4UeTYUhZvWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzg2ZWI4 MS1mMzYyLTRmNzYtODNhNS0wZTJkZjk2OTU1OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvODZlYjgx LWYzNjItNGY3Ni04M2E1LTBlMmRmOTY5NTU5Mi8xL2ZiZ2toZ0hqTzRQQUZBWDV2 aFI1TmhTRm05WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCTo7gAwQAwRyeMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMz5DANBgkqhkiG9w0BAQsFAAOCAQEAb9vzbJ/0sQjWDWoWFyuWVLBI +1neWcsjlrprl6DRZgT/Ux1atn+r21npqyBTbR3pQAbKUT04/n/K/I84W9/OVQzQ 1bF6AstltsUdpacNhP2IsNFkWWcGouYK+vlY8LpS9kXqvkaa9yNKL9mhnjecPNHN XntyQw5O2GWu2zceHrRY3WBK1DvO0OPOM+5gBeQI023izMx9dO9X3bVtcxf+DPWc 32wUr6XxKr8xtkMkiAMwKbeJr21iSaLqHCgv8ujU9ltpBsNtMQfWpkrAsRf6PH04 OnagCz4PvoPT6O0USBbkysTL0KHPCcZtGgNDBpgFqvXbz2RDHGjgf+k5c+suHA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:17 2026 by rpki-client