This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer File: ffyQHUowe9oPOwv2XTEEaCINxeE.cer (raw, json) Hash identifier: FGJfHGaEonAnVQ5aHC7ttBBV2oWxQokThF9QcYhamSs= Subject key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5FEB63905EC06D93D1E9203F763A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57212 IP: 185.212.28.0/22 IP: 2a0b:6ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5f:eb:63:90:5e:c0:6d:93:d1:e9:20:3f:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:ed:88:cb:f1:a4:f1:c6:48:cb:ed:d0:83: 20:d4:9d:88:aa:28:6a:eb:94:c8:b6:06:d7:13:e6: 95:7d:8b:c9:a6:e6:77:31:f4:3c:6c:78:b2:a6:d5: c0:8d:4c:2a:b2:e7:16:71:24:5c:67:9e:a8:50:30: 88:03:d7:c9:16:a8:f3:2c:55:71:dd:e3:24:f5:c6: 13:7f:a7:76:ba:fc:1e:21:60:d7:a1:28:43:3c:fc: 8a:bb:bd:1a:3a:cd:c6:81:9f:6d:ce:36:fd:74:27: 81:bc:67:59:24:1f:7c:cc:24:57:ac:19:64:ab:be: cd:ac:8f:02:2c:00:6f:09:37:c2:cd:e7:55:48:7a: 22:5d:a7:9a:e2:b5:01:6e:03:24:ad:f7:30:6d:55: 79:4e:cd:1d:91:8e:f9:d6:b3:18:9f:9b:1d:ab:9b: ad:31:c3:ef:b6:56:82:05:3c:39:31:42:11:ed:70: a7:16:ff:ae:1e:eb:97:22:c6:c5:24:a7:34:32:29: 82:d0:bb:7b:34:d9:30:31:97:11:b4:36:83:a6:be: e0:bc:03:06:63:15:7b:67:29:de:6f:fb:0d:44:6e: ad:c7:d3:a8:08:5e:be:43:54:95:a3:10:f5:11:58: 3e:a0:1a:39:a7:e1:27:cf:dc:c0:d5:1a:1a:92:30: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.28.0/22 IPv6: 2a0b:6ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57212 Signature Algorithm: sha256WithRSAEncryption 4c:a0:63:8e:51:d8:a3:c5:63:b7:64:8d:5d:83:55:7b:9c:d9: ca:80:e0:f5:e2:54:37:58:49:ff:9c:64:55:be:5c:5f:04:bf: 1c:1b:a0:c9:ff:74:02:45:d6:4d:5f:e1:09:cf:c7:e8:4f:d1: 90:21:29:fc:91:a9:80:c7:c7:78:92:44:62:53:03:d8:3d:e7: f2:d6:80:64:7f:ff:9d:8f:44:19:b5:1a:37:df:6a:5f:28:35: aa:b7:38:52:18:6a:04:4f:a8:0c:94:ed:45:15:47:46:1c:dc: 69:4b:45:61:65:0a:b6:3f:17:33:8b:83:4b:39:34:d8:9f:11: 6e:f1:3c:0b:23:dc:b2:08:c0:55:80:24:01:09:38:a0:39:10: ff:29:ba:ec:6a:9e:17:39:b9:48:d1:27:1d:34:f1:b9:34:34: 03:8c:14:d4:1c:8d:45:e5:2a:92:46:95:74:a3:d1:0b:19:9b: ad:fe:ab:28:f7:e5:cb:25:8f:d7:d2:be:de:06:6a:0d:ac:18: 98:45:de:40:17:a6:2d:8f:10:d7:4b:39:7f:90:99:7d:b4:42: 3f:cb:1c:d0:57:02:78:ac:f4:ea:dc:7c:e3:8b:0d:7e:35:32: 2a:1b:5f:d3:f4:40:be:f9:e3:31:c5:77:ba:d6:7a:b1:9d:97: 99:df:7c:b8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fl/rY5BewG2T0ekgP3Y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGZjOTAxZDRhMzA3YmRhMGYzYjBiZjY1ZDMxMDQ2ODIyMGRjNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7HtiMvxpPHGSMvt0IMg1J2Iqihq 65TItgbXE+aVfYvJpuZ3MfQ8bHiyptXAjUwqsucWcSRcZ56oUDCIA9fJFqjzLFVx 3eMk9cYTf6d2uvweIWDXoShDPPyKu70aOs3GgZ9tzjb9dCeBvGdZJB98zCRXrBlk q77NrI8CLABvCTfCzedVSHoiXaea4rUBbgMkrfcwbVV5Ts0dkY751rMYn5sdq5ut McPvtlaCBTw5MUIR7XCnFv+uHuuXIsbFJKc0MimC0Lt7NNkwMZcRtDaDpr7gvAMG YxV7Zyneb/sNRG6tx9OoCF6+Q1SVoxD1EVg+oBo5p+Enz9zA1RoakjC/wwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH38kB1KMHvaDzsL9l0xBGgiDcXhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2E0Nzdl OS01YWQwLTQ0M2UtYTc0Mi04MTkwZGQ3YzIxYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvYTQ3N2U5 LTVhZDAtNDQzZS1hNzQyLTgxOTBkZDdjMjFjNC8xL2ZmeVFIVW93ZTlvUE93djJY VEVFYUNJTnhlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudQcMA0EAgACMAcDBQMqC27AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDffDANBgkqhkiG9w0BAQsFAAOCAQEATKBjjlHYo8Vj t2SNXYNVe5zZyoDg9eJUN1hJ/5xkVb5cXwS/HBugyf90AkXWTV/hCc/H6E/RkCEp /JGpgMfHeJJEYlMD2D3n8taAZH//nY9EGbUaN99qXyg1qrc4UhhqBE+oDJTtRRVH RhzcaUtFYWUKtj8XM4uDSzk02J8RbvE8CyPcsgjAVYAkAQk4oDkQ/ym67GqeFzm5 SNEnHTTxuTQ0A4wU1ByNReUqkkaVdKPRCxmbrf6rKPflyyWP19K+3gZqDawYmEXe QBemLY8Q10s5f5CZfbRCP8sc0FcCeKz06tx844sNfjUyKhtf0/RAvvnjMcV3utZ6 sZ2Xmd98uA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:46 2026 by rpki-client