This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer File: fgX1rbuaqxB5slJG4ju71qF-Ptg.cer (raw, json) Hash identifier: nLTKaYWqpDCwJjBMQIIAGLnTuKPOXyANMdeaXvre6Xg= Subject key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C739D1810F5357E5C524BCD3A2CD92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.217.56.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:39:d1:81:0f:53:57:e5:c5:24:bc:d3:a2:cd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:5e:a0:25:d8:fe:9f:4a:5e:48:a3:3d:53: 50:df:14:05:12:2f:65:0e:4f:fd:53:88:6c:ef:cb: b1:18:96:b0:6b:0f:7e:01:39:c6:d5:3a:cf:e9:ee: 3f:05:22:16:73:8d:5b:db:5c:9e:0b:08:68:50:f6: 06:90:33:b8:c8:f7:8e:56:2c:73:02:9f:00:bd:60: 72:03:0c:85:65:b1:ce:df:07:bf:a3:ec:e0:a8:e5: 06:ef:a9:df:33:23:25:40:30:8d:b1:63:4a:b2:5a: e2:e1:78:38:9d:f8:9e:09:7e:40:db:96:7c:9a:4c: 08:0c:05:5b:11:1b:37:97:92:df:f6:9d:43:c8:c1: af:dd:c2:47:d8:5f:8b:d5:4a:94:0e:c0:73:04:32: 12:c7:5e:40:34:c8:6a:65:8c:32:b3:60:fb:59:d2: 23:6e:a5:ed:4a:f8:4f:79:f4:6c:a2:91:7a:0a:83: 58:f5:35:b8:e9:6e:de:16:5e:a7:f7:44:18:f3:6f: 36:77:99:24:5a:0f:35:28:26:c5:fa:f3:61:33:5b: 94:b2:fe:49:24:8c:48:f5:fb:6d:36:66:2a:95:bb: cd:9d:54:58:1f:68:6b:48:a5:d5:4a:83:38:4e:b5: 9a:5c:ca:ae:c3:ac:2e:22:ba:2d:0e:8b:3c:ec:2e: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.56.0/23 Signature Algorithm: sha256WithRSAEncryption 60:dc:42:15:a5:22:9c:e2:8d:cf:7f:d5:11:c1:96:4b:34:21: 3f:1f:d5:94:33:f9:2a:32:be:2e:a8:b8:1e:9c:c9:1c:5d:4a: 21:db:ac:eb:61:6f:1a:52:f4:2b:f5:fa:84:39:44:9b:da:90: 15:f4:51:83:4e:d9:fa:02:a8:58:8f:5b:46:ef:c0:97:80:e8: 2d:97:b0:7d:59:24:64:d2:40:6a:49:4e:b4:4e:63:a5:45:56: 23:ca:6f:e4:5e:70:6e:e4:cd:59:17:64:ac:9c:4a:08:9b:f8: 60:25:26:9b:2c:3d:8b:3f:ef:fd:a9:53:60:ac:a5:cf:8b:f2: ce:d0:46:2c:a6:4c:46:12:92:d1:33:96:76:aa:4b:60:72:76: be:75:01:75:15:8a:cd:44:a6:06:3b:a3:40:dc:d3:e4:1f:0a: a7:a0:b4:99:fe:c8:b3:0b:bd:8b:a3:78:bf:d0:8f:6f:4a:61: 34:4b:d1:88:5c:e2:15:ae:cd:d5:fc:d5:8f:aa:1f:e1:a3:bb: de:00:4b:4f:31:17:72:f1:8b:b9:7f:e7:15:96:c8:6f:89:8c: f3:be:e1:29:f9:11:ec:2c:b0:7d:23:a8:40:97:c0:25:05:c8: 68:31:47:88:72:18:d0:30:e6:d3:2a:70:4a:81:cc:4a:34:83: 4e:e3:26:dd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xznRgQ9TV+XFJLzTos2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTA1ZjVhZGJiOWFhYjEwNzliMjUyNDZlMjNiYmJkNmExN2UzZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTxeoCXY/p9KXkijPVNQ3xQFEi9l Dk/9U4hs78uxGJawaw9+ATnG1TrP6e4/BSIWc41b21yeCwhoUPYGkDO4yPeOVixz Ap8AvWByAwyFZbHO3we/o+zgqOUG76nfMyMlQDCNsWNKslri4Xg4nfieCX5A25Z8 mkwIDAVbERs3l5Lf9p1DyMGv3cJH2F+L1UqUDsBzBDISx15ANMhqZYwys2D7WdIj bqXtSvhPefRsopF6CoNY9TW46W7eFl6n90QY8282d5kkWg81KCbF+vNhM1uUsv5J JIxI9fttNmYqlbvNnVRYH2hrSKXVSoM4TrWaXMquw6wuIrotDos87C6FTQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH4F9a27mqsQebJSRuI7u9ahfj7YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzE4NDUw MC0zMzM2LTRjZGQtOTQzYi00ZjZjODVmZDUwZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMTg0NTAw LTMzMzYtNGNkZC05NDNiLTRmNmM4NWZkNTBmMS8xL2ZnWDFyYnVhcXhCNXNsSkc0 anU3MXFGLVB0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW9k4MA0GCSqGSIb3DQEBCwUAA4IBAQBg3EIV pSKc4o3Pf9URwZZLNCE/H9WUM/kqMr4uqLgenMkcXUoh26zrYW8aUvQr9fqEOUSb 2pAV9FGDTtn6AqhYj1tG78CXgOgtl7B9WSRk0kBqSU60TmOlRVYjym/kXnBu5M1Z F2SsnEoIm/hgJSabLD2LP+/9qVNgrKXPi/LO0EYspkxGEpLRM5Z2qktgcna+dQF1 FYrNRKYGO6NA3NPkHwqnoLSZ/sizC72Lo3i/0I9vSmE0S9GIXOIVrs3V/NWPqh/h o7veAEtPMRdy8Yu5f+cVlshviYzzvuEp+RHsLLB9I6hAl8AlBchoMUeIchjQMObT KnBKgcxKNINO4ybd -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:50 2026 by rpki-client