This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer File: fbq8m8nDq4pzmius48V7AvRFkOs.cer (raw, json) Hash identifier: ccixVh85VhmQM72shTM5AD6vdTmvz0dIzjmtR5NRahY= Subject key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E391E533211BCC330E0CC0446764445 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.210.24.0/22 IP: 2a0b:50c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1e:53:32:11:bc:c3:30:e0:cc:04:46:76:44:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:2b:98:bf:3e:a3:90:19:e5:6b:cb:ed:46: b9:23:6d:12:29:01:ef:66:5d:16:0c:f1:7d:a7:b5: df:9e:6c:02:3f:61:ce:f6:11:f8:82:c8:71:fa:49: 28:a5:4a:11:41:18:d6:07:b5:4f:c7:80:a1:80:ad: aa:86:ce:d6:28:d0:e1:5a:01:86:c4:f0:04:7c:a3: 30:20:fd:8f:4b:b0:48:11:93:2c:05:bf:d0:d4:f2: 70:25:d1:57:a6:0a:34:57:fa:82:49:7a:1b:d6:bd: 14:65:11:c8:69:e5:c8:95:d8:a3:ce:7f:69:a3:19: 01:e5:a9:1c:96:95:d8:00:5d:35:d8:7b:3f:e7:37: f1:b9:93:34:8e:68:85:ba:9b:8b:0e:8d:76:a4:1d: ab:bf:c8:b4:1c:01:cc:bd:0f:af:0d:07:84:6c:ff: 98:bf:ec:03:3e:2d:93:55:08:a8:1e:64:64:ef:02: c5:f4:7a:3e:33:d3:85:cd:f4:f8:e1:75:cb:3e:9f: 2d:b6:a8:7a:d7:86:18:0e:72:cd:67:b6:28:71:e8: ea:fb:40:7f:7e:5e:66:4c:94:56:68:92:2f:3e:fa: d8:17:72:04:b2:22:f4:19:95:87:b5:31:a3:6e:55: 71:9c:e5:68:36:fa:c2:2b:4b:92:89:2e:e5:85:76: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.24.0/22 IPv6: 2a0b:50c0::/29 Signature Algorithm: sha256WithRSAEncryption 3d:ff:69:29:60:d8:99:be:3d:91:be:dc:f9:76:c7:33:0a:8c: 64:27:30:b0:d0:50:11:4e:5d:47:6c:7b:85:14:20:7f:ae:32: f9:ad:d6:6e:82:88:94:fb:71:4b:43:b2:49:04:c4:5e:93:8a: a1:1d:00:3d:7b:dc:c8:1f:ea:2f:a7:bb:e3:b6:fd:24:47:18: 5a:38:75:f2:d1:c7:38:c3:c5:75:aa:a8:97:09:65:59:d3:8a: fb:0a:82:c4:d7:8f:7b:34:49:b7:07:5d:b9:d1:dc:e6:77:f9: d4:e8:c2:ff:07:58:88:74:76:7d:4e:63:7f:a6:2c:cb:d1:49: 3d:bd:10:cb:e5:1a:e7:e2:89:ff:09:1e:ed:fe:fd:e9:73:2f: 6d:2b:4d:f5:1c:31:e5:1a:e1:66:b3:36:82:1d:86:27:eb:5a: 0d:e0:a7:65:4d:57:a9:3f:10:b4:9c:3b:b6:dc:16:02:f9:c5: 3e:75:11:69:3a:05:73:f6:3f:36:da:51:b5:e5:c8:07:70:bb: ab:67:1a:f4:80:7a:3d:46:1b:ef:fc:00:25:2d:5d:c4:77:81: d7:3e:90:67:58:8b:aa:98:1f:75:87:f9:9a:6d:2c:a1:b9:e6: 0d:63:45:44:96:c8:d3:f1:7a:ca:ff:52:9f:77:a4:57:e6:10: 2f:29:79:91 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OR5TMhG8wzDgzARGdkRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGJhYmM5YmM5YzNhYjhhNzM5YTJiYWNlM2M1N2IwMmY0NDU5MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCgrmL8+o5AZ5WvL7Ua5I20SKQHv Zl0WDPF9p7XfnmwCP2HO9hH4gshx+kkopUoRQRjWB7VPx4ChgK2qhs7WKNDhWgGG xPAEfKMwIP2PS7BIEZMsBb/Q1PJwJdFXpgo0V/qCSXob1r0UZRHIaeXIldijzn9p oxkB5akclpXYAF012Hs/5zfxuZM0jmiFupuLDo12pB2rv8i0HAHMvQ+vDQeEbP+Y v+wDPi2TVQioHmRk7wLF9Ho+M9OFzfT44XXLPp8ttqh614YYDnLNZ7Yocejq+0B/ fl5mTJRWaJIvPvrYF3IEsiL0GZWHtTGjblVxnOVoNvrCK0uSiS7lhXbJMwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFH26vJvJw6uKc5orrOPFewL0RZDrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2RkMzZl ZC00YmVhLTQwOTItYWU4Zi03MGJkNzkxYmU1NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZGQzNmVk LTRiZWEtNDA5Mi1hZThmLTcwYmQ3OTFiZTU2MC8xL2ZicThtOG5EcTRwem1pdXM0 OFY3QXZSRmtPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudIYMA0EAgACMAcDBQMqC1DAMA0GCSqGSIb3 DQEBCwUAA4IBAQA9/2kpYNiZvj2Rvtz5dsczCoxkJzCw0FARTl1HbHuFFCB/rjL5 rdZugoiU+3FLQ7JJBMRek4qhHQA9e9zIH+ovp7vjtv0kRxhaOHXy0cc4w8V1qqiX CWVZ04r7CoLE1497NEm3B1250dzmd/nU6ML/B1iIdHZ9TmN/pizL0Uk9vRDL5Rrn 4on/CR7t/v3pcy9tK031HDHlGuFmszaCHYYn61oN4KdlTVepPxC0nDu23BYC+cU+ dRFpOgVz9j822lG15cgHcLurZxr0gHo9Rhvv/AAlLV3Ed4HXPpBnWIuqmB91h/ma bSyhueYNY0VElsjT8XrK/1Kfd6RX5hAvKXmR -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:26 2026 by rpki-client