This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer File: fewnmwUBcwaYowvNzqOuR3yVczE.cer (raw, json) Hash identifier: a2gHSxL8s4DzBGiEr4bV/tenwJHy6fRiJIUaQ/vV+1A= Subject key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783430F09C18E326904A4139DEB84CCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41605 IP: 185.82.148.0/22 IP: 2a03:68e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:30:f0:9c:18:e3:26:90:4a:41:39:de:b8:4c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dec279b0501730698a30bcdcea3ae477c957331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:e8:76:4a:9a:cd:59:00:fa:2f:2d:65:47: ab:47:37:f2:49:08:e4:52:b0:af:60:9a:4c:4f:d9: c2:c0:ea:3a:b6:af:d2:80:9c:57:10:85:7b:ce:5d: 83:b7:b2:e6:e5:f8:4c:17:18:58:7d:a1:23:64:29: 38:d2:e9:49:42:9a:18:f4:ae:b8:29:3d:bc:ec:f1: c0:4b:db:98:40:8c:4e:e6:6c:2b:b6:d6:0f:97:73: f5:4c:e6:77:cf:ec:dc:84:2c:1f:05:e0:c4:56:e7: 86:fe:1c:ff:9f:6c:1a:7c:9d:13:4b:6d:1d:1d:b4: 0b:9f:86:6b:ae:39:72:22:16:62:49:aa:5d:fa:43: 6c:99:d1:f1:5e:2d:a6:4e:05:2c:76:19:b8:a4:b9: 4b:db:d3:05:12:ac:ef:1e:16:09:3e:c9:81:62:2a: fc:b2:f1:ba:59:0e:15:3a:dc:12:ae:1d:5f:e7:e6: 14:2e:52:69:6d:e7:79:59:37:24:01:78:33:15:44: fb:de:ca:b7:00:66:2c:97:36:e7:c8:f0:48:09:3d: 89:26:86:a3:a5:39:e3:49:40:8b:eb:f5:9d:a0:14: a3:0a:50:08:21:fa:58:38:8c:81:10:05:0d:e8:f7: 3f:35:f4:33:13:6a:ea:a3:da:9a:86:ac:da:95:db: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.148.0/22 IPv6: 2a03:68e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41605 Signature Algorithm: sha256WithRSAEncryption 6b:69:e5:8a:76:5f:a2:0c:b1:5a:7a:28:77:23:61:49:b1:17: ec:a1:9b:37:b3:b8:88:12:1a:ff:dc:14:85:a8:21:d8:29:94: 74:8d:77:e8:17:f0:a3:17:cf:d0:08:6d:65:88:9c:c1:a7:1b: 86:9a:13:84:90:07:d8:83:d1:a4:49:2e:0b:13:e2:9b:79:8d: c2:01:97:ea:f0:99:eb:5e:29:77:eb:e8:e6:c1:ec:7a:ec:d1: ae:b5:12:ab:b3:e2:d5:c1:56:4b:ca:b4:de:3d:94:e8:04:ef: 8e:86:0b:2b:87:f8:d6:d8:f9:d3:c7:44:30:e7:6d:c6:d1:59: e9:92:85:60:45:59:e6:5f:3a:ff:0f:f1:00:75:41:ff:4b:a3: de:4b:2b:bb:76:40:8b:60:ad:bb:1d:1b:a0:87:f8:69:a3:8a: b1:b0:dd:0c:60:a3:79:b4:95:a0:14:8c:78:6d:e7:d6:ee:85: 4a:9d:4f:3e:51:7f:e8:cf:e3:50:ec:a6:50:b2:9d:52:be:ab: d3:d8:b2:2b:6e:a1:4f:23:4a:08:da:a0:6d:1b:75:d0:a4:85: d9:43:cd:63:5d:45:4f:de:cb:9a:57:07:93:ca:85:a7:06:24: a9:a7:0b:15:2d:9e:f8:ab:af:bc:37:6f:6a:6b:b9:47:b8:31: 93:d3:95:08 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NDDwnBjjJpBKQTneuEzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGVjMjc5YjA1MDE3MzA2OThhMzBiY2RjZWEzYWU0NzdjOTU3MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JTodkqazVkA+i8tZUerRzfySQjk UrCvYJpMT9nCwOo6tq/SgJxXEIV7zl2Dt7Lm5fhMFxhYfaEjZCk40ulJQpoY9K64 KT287PHAS9uYQIxO5mwrttYPl3P1TOZ3z+zchCwfBeDEVueG/hz/n2wafJ0TS20d HbQLn4ZrrjlyIhZiSapd+kNsmdHxXi2mTgUsdhm4pLlL29MFEqzvHhYJPsmBYir8 svG6WQ4VOtwSrh1f5+YULlJpbed5WTckAXgzFUT73sq3AGYslzbnyPBICT2JJoaj pTnjSUCL6/WdoBSjClAIIfpYOIyBEAUN6Pc/NfQzE2rqo9qahqzalduJiQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2RlYjk3 Yi1kZWYxLTQ2NDYtYTVlZC1kODllNjQxMTgzZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZGViOTdi LWRlZjEtNDY0Ni1hNWVkLWQ4OWU2NDExODNmMy8xL2Zld25td1VCY3dhWW93dk56 cU91UjN5VmN6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVKUMA0EAgACMAcDBQAqA2jgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCihTANBgkqhkiG9w0BAQsFAAOCAQEAa2nlinZfogyx WnoodyNhSbEX7KGbN7O4iBIa/9wUhagh2CmUdI136BfwoxfP0AhtZYicwacbhpoT hJAH2IPRpEkuCxPim3mNwgGX6vCZ614pd+vo5sHseuzRrrUSq7Pi1cFWS8q03j2U 6ATvjoYLK4f41tj508dEMOdtxtFZ6ZKFYEVZ5l86/w/xAHVB/0uj3ksru3ZAi2Ct ux0boIf4aaOKsbDdDGCjebSVoBSMeG3n1u6FSp1PPlF/6M/jUOymULKdUr6r09iy K26hTyNKCNqgbRt10KSF2UPNY11FT97LmlcHk8qFpwYkqacLFS2e+KuvvDdvamu5 R7gxk9OVCA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:22 2026 by rpki-client