This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer File: ffkEqxQGbHqf5hpSHVSSoOUpZco.cer (raw, json) Hash identifier: DNQSZQth/PRMloat9OuOU4/CLiZb3coiDx9zcpSeLos= Subject key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B30CBDEFA21975358EC03835167960EB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 09:30:25 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 201642 IP: 77.111.64.0 -- 77.111.87.255 IP: 121.127.36.0/24 IP: 185.143.237.0/24 IP: 185.249.100.0/22 IP: 194.164.0.0/23 IP: 2a14:3200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:cb:de:fa:21:97:53:58:ec:03:83:51:67:96:0e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 09:30:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1a:33:d9:62:04:a0:06:cf:a3:a6:27:59:72: 3b:95:47:e5:cd:38:3c:55:c1:c7:f4:8b:20:b4:9a: d1:2c:11:36:5b:26:b3:f9:c6:bc:fd:20:26:a0:ad: 9c:d4:a4:0b:e6:68:52:c7:eb:38:f3:16:f4:55:41: 9b:da:fd:74:41:bc:39:3a:53:04:f0:04:70:d9:85: d5:8f:0e:a7:e0:78:7d:85:73:9f:d7:64:b5:78:9e: a7:fb:c7:b4:5c:13:c5:50:39:40:69:1b:65:f4:bf: 8b:27:83:2b:ae:29:c1:45:41:77:4a:27:ea:d9:71: e0:8a:d9:0c:4a:c1:d8:1a:a5:72:9e:01:f2:4b:1d: a5:e3:45:c3:2d:45:24:85:7e:32:4d:7c:8e:b1:b4: af:f2:d5:f1:0a:42:ca:c2:de:09:64:ea:02:4e:52: a6:c1:c9:55:5a:7b:81:81:b7:e3:db:15:22:f3:be: 7e:1a:a8:ec:2d:20:32:fc:c4:d1:66:73:60:27:05: 3a:51:4b:3e:48:c1:7a:fc:16:fb:9d:36:f4:76:43: 92:d6:1c:76:ec:e3:8a:41:67:ad:a4:fa:d7:d8:05: 02:ed:ce:69:26:26:43:14:32:64:97:50:49:71:39: f8:a1:92:1d:e7:8e:84:4b:6e:f6:11:80:3f:13:3d: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.64.0-77.111.87.255 121.127.36.0/24 185.143.237.0/24 185.249.100.0/22 194.164.0.0/23 IPv6: 2a14:3200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201642 Signature Algorithm: sha256WithRSAEncryption 27:1c:12:10:f0:d2:d8:eb:6d:89:2b:f4:09:ae:be:85:fb:13: ca:a0:3e:14:71:33:65:66:70:e3:e5:46:28:6a:f0:12:f4:b7: 34:46:81:08:62:06:de:32:85:6f:bd:4f:61:6c:da:77:7f:84: 52:cd:a1:6f:b0:c5:60:1e:6c:f6:0e:6d:48:81:76:e3:0e:00: 76:c9:cf:66:7a:1b:c6:b5:64:df:ce:4b:86:a2:cc:66:30:66: a5:4e:56:a9:1b:33:20:9a:0a:e8:27:7b:16:b2:03:c9:bd:f8: a1:d5:a7:bb:cb:fa:64:ed:ea:bb:d5:a7:86:9d:14:87:30:e0: d5:38:64:9b:ad:b0:de:55:8e:0c:b1:93:88:42:58:d2:9e:9e: d9:a5:37:26:3b:99:20:cd:67:85:da:8f:6e:b4:f8:2e:28:bd: 30:69:ae:6a:ea:3b:83:60:d7:88:c9:90:75:92:90:69:b0:ed: 78:1c:61:7a:7c:aa:cb:e0:06:87:a1:13:d5:51:71:6f:1e:1b: 17:90:e0:0f:92:6b:c3:f0:dd:c5:e0:6a:9c:58:8b:0b:75:9e: 9a:7a:2a:62:1e:73:e2:d2:01:1e:18:5a:19:e9:36:df:ea:fa: 0e:3c:d2:ec:31:40:d3:75:00:ae:26:7c:49:ae:06:c2:a9:76: be:e0:56:de -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZswy976IZdTWOwDg1Fnlg6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MDkzMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY5MDRhYjE0MDY2YzdhOWZlNjFhNTIxZDU0OTJhMGU1Mjk2NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Roz2WIEoAbPo6YnWXI7lUflzTg8 VcHH9IsgtJrRLBE2Wyaz+ca8/SAmoK2c1KQL5mhSx+s48xb0VUGb2v10Qbw5OlME 8ARw2YXVjw6n4Hh9hXOf12S1eJ6n+8e0XBPFUDlAaRtl9L+LJ4MrrinBRUF3Sifq 2XHgitkMSsHYGqVyngHySx2l40XDLUUkhX4yTXyOsbSv8tXxCkLKwt4JZOoCTlKm wclVWnuBgbfj2xUi875+GqjsLSAy/MTRZnNgJwU6UUs+SMF6/Bb7nTb0dkOS1hx2 7OOKQWetpPrX2AUC7c5pJiZDFDJkl1BJcTn4oZId546ES272EYA/Ez049wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFH35BKsUBmx6n+YaUh1UkqDlKWXKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzUzZmIz NC0yNWRiLTQ2ODQtOTg0Zi0zYjQ0NWYyOWY1YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNTNmYjM0 LTI1ZGItNDY4NC05ODRmLTNiNDQ1ZjI5ZjViNy8xL2Zma0VxeFFHYkhxZjVocFNI VlNTb09VcFpjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmMAwDBAZNb0ADBANNb1ADBAB5fyQDBAC5j+0DBAK5 +WQDBAHCpAAwDQQCAAIwBwMFACoUMgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AxOqMA0GCSqGSIb3DQEBCwUAA4IBAQAnHBIQ8NLY622JK/QJrr6F+xPKoD4UcTNl ZnDj5UYoavAS9Lc0RoEIYgbeMoVvvU9hbNp3f4RSzaFvsMVgHmz2Dm1IgXbjDgB2 yc9mehvGtWTfzkuGosxmMGalTlapGzMgmgroJ3sWsgPJvfih1ae7y/pk7eq71aeG nRSHMODVOGSbrbDeVY4MsZOIQljSnp7ZpTcmO5kgzWeF2o9utPguKL0waa5q6juD YNeIyZB1kpBpsO14HGF6fKrL4AaHoRPVUXFvHhsXkOAPkmvD8N3F4GqcWIsLdZ6a eipiHnPi0gEeGFoZ6Tbf6voOPNLsMUDTdQCuJnxJrgbCqXa+4Fbe -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:55 2025 by rpki-client