This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer File: ffkEqxQGbHqf5hpSHVSSoOUpZco.cer (raw, json) Hash identifier: p306s3wXbzI4v87dX26jKS9qNrSnO0gx8ju4nEpDF84= Subject key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F138C8DCE64B84ECB611EE917F17551 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201642 IP: 77.111.64.0 -- 77.111.87.255 IP: 121.127.36.0/24 IP: 185.143.237.0/24 IP: 185.249.100.0/22 IP: 194.164.0.0/23 IP: 2a14:3200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8c:8d:ce:64:b8:4e:cb:61:1e:e9:17:f1:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1a:33:d9:62:04:a0:06:cf:a3:a6:27:59:72: 3b:95:47:e5:cd:38:3c:55:c1:c7:f4:8b:20:b4:9a: d1:2c:11:36:5b:26:b3:f9:c6:bc:fd:20:26:a0:ad: 9c:d4:a4:0b:e6:68:52:c7:eb:38:f3:16:f4:55:41: 9b:da:fd:74:41:bc:39:3a:53:04:f0:04:70:d9:85: d5:8f:0e:a7:e0:78:7d:85:73:9f:d7:64:b5:78:9e: a7:fb:c7:b4:5c:13:c5:50:39:40:69:1b:65:f4:bf: 8b:27:83:2b:ae:29:c1:45:41:77:4a:27:ea:d9:71: e0:8a:d9:0c:4a:c1:d8:1a:a5:72:9e:01:f2:4b:1d: a5:e3:45:c3:2d:45:24:85:7e:32:4d:7c:8e:b1:b4: af:f2:d5:f1:0a:42:ca:c2:de:09:64:ea:02:4e:52: a6:c1:c9:55:5a:7b:81:81:b7:e3:db:15:22:f3:be: 7e:1a:a8:ec:2d:20:32:fc:c4:d1:66:73:60:27:05: 3a:51:4b:3e:48:c1:7a:fc:16:fb:9d:36:f4:76:43: 92:d6:1c:76:ec:e3:8a:41:67:ad:a4:fa:d7:d8:05: 02:ed:ce:69:26:26:43:14:32:64:97:50:49:71:39: f8:a1:92:1d:e7:8e:84:4b:6e:f6:11:80:3f:13:3d: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.64.0-77.111.87.255 121.127.36.0/24 185.143.237.0/24 185.249.100.0/22 194.164.0.0/23 IPv6: 2a14:3200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201642 Signature Algorithm: sha256WithRSAEncryption ae:ec:01:c7:27:35:d5:fe:83:21:a4:40:9a:0a:81:3c:a6:d7: 55:d0:0e:82:fb:d0:f1:db:d0:dd:4e:f7:3e:b2:9c:f8:ce:b0: 81:92:5e:93:fa:f8:f8:cf:e0:39:b0:2d:f4:02:cc:76:bf:18: e3:77:f6:70:dd:5b:10:44:4f:5a:31:68:5e:b1:03:2f:a9:a2: 70:f7:51:88:1c:c3:91:df:51:11:ae:2e:d0:76:2b:62:50:22: 61:03:cd:65:43:8a:fb:52:7b:83:2f:6b:70:90:0c:2c:7c:b0: cd:f5:e4:ae:51:28:d5:c7:d1:96:68:aa:47:19:76:4f:c1:3b: 32:98:e3:ef:da:c4:db:f9:b9:e9:12:c2:39:db:ca:a9:c5:28: cf:84:18:9b:d7:bd:f8:70:14:65:e2:8a:b5:15:99:d7:af:89: 1c:07:de:78:8a:61:65:d1:37:89:11:7e:c0:29:0e:06:e7:02: 12:8e:5f:c8:95:76:d8:61:b0:94:ed:cf:7a:05:ea:f0:a3:b3: e0:1d:76:28:c7:c4:5d:7f:1d:5c:45:2a:ea:31:4a:31:81:b5: b3:99:7c:0e:00:b3:85:20:ce:1b:7a:07:9c:af:64:cd:3c:8b: 76:3a:26:8d:13:9a:57:e6:a0:02:04:04:b2:98:f2:2b:04:64: 42:bf:05:4d -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt/E4yNzmS4TsthHukX8XVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY5MDRhYjE0MDY2YzdhOWZlNjFhNTIxZDU0OTJhMGU1Mjk2NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Roz2WIEoAbPo6YnWXI7lUflzTg8 VcHH9IsgtJrRLBE2Wyaz+ca8/SAmoK2c1KQL5mhSx+s48xb0VUGb2v10Qbw5OlME 8ARw2YXVjw6n4Hh9hXOf12S1eJ6n+8e0XBPFUDlAaRtl9L+LJ4MrrinBRUF3Sifq 2XHgitkMSsHYGqVyngHySx2l40XDLUUkhX4yTXyOsbSv8tXxCkLKwt4JZOoCTlKm wclVWnuBgbfj2xUi875+GqjsLSAy/MTRZnNgJwU6UUs+SMF6/Bb7nTb0dkOS1hx2 7OOKQWetpPrX2AUC7c5pJiZDFDJkl1BJcTn4oZId546ES272EYA/Ez049wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFH35BKsUBmx6n+YaUh1UkqDlKWXKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzUzZmIz NC0yNWRiLTQ2ODQtOTg0Zi0zYjQ0NWYyOWY1YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNTNmYjM0 LTI1ZGItNDY4NC05ODRmLTNiNDQ1ZjI5ZjViNy8xL2Zma0VxeFFHYkhxZjVocFNI VlNTb09VcFpjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmMAwDBAZNb0ADBANNb1ADBAB5fyQDBAC5j+0DBAK5 +WQDBAHCpAAwDQQCAAIwBwMFACoUMgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AxOqMA0GCSqGSIb3DQEBCwUAA4IBAQCu7AHHJzXV/oMhpECaCoE8ptdV0A6C+9Dx 29DdTvc+spz4zrCBkl6T+vj4z+A5sC30Asx2vxjjd/Zw3VsQRE9aMWhesQMvqaJw 91GIHMOR31ERri7QditiUCJhA81lQ4r7UnuDL2twkAwsfLDN9eSuUSjVx9GWaKpH GXZPwTsymOPv2sTb+bnpEsI528qpxSjPhBib1734cBRl4oq1FZnXr4kcB954imFl 0TeJEX7AKQ4G5wISjl/IlXbYYbCU7c96Berwo7PgHXYox8Rdfx1cRSrqMUoxgbWz mXwOALOFIM4begecr2TNPIt2OiaNE5pX5qACBASymPIrBGRCvwVN -----END CERTIFICATE-----Generated at Tue Feb 3 14:21:27 2026 by rpki-client