This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer File: fggLq1W_NHMYjCDHNmpssETHGVw.cer (raw, json) Hash identifier: sCfdTkGLpngh3JjuUbLYasA6O0kDoNvSVH86CElw6To= Subject key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783484A1CD9B8581EB9181EE98B43D1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39563 IP: 85.8.131.0/24 IP: 185.80.8.0/22 IP: 185.231.16.0/22 IP: 2a03:5f20::/32 IP: 2a0c:3900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:a1:cd:9b:85:81:eb:91:81:ee:98:b4:3d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e080bab55bf3473188c20c7366a6cb044c7195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:8f:7c:00:47:4a:2d:05:6b:9c:0a:88:48: 10:32:95:70:73:c4:2f:c8:ca:f0:62:70:9f:a0:67: f7:5a:e4:21:b2:0f:52:04:ff:28:55:49:1c:dc:cc: 9b:3f:ee:45:27:24:0a:b0:17:e4:96:04:9b:fb:32: 3f:ec:9e:05:3f:69:ce:23:83:67:1b:6a:13:b5:35: bb:28:6c:19:48:cc:2e:77:70:dd:9a:2b:b9:7e:ae: 81:55:4d:9f:37:da:0e:c9:73:c8:2c:75:04:08:f9: 59:9a:7f:80:7f:4e:ed:1a:e2:58:2c:2d:5e:de:4a: 99:75:a5:8e:f1:29:c3:94:28:f5:7c:1a:20:b9:1f: 15:38:55:d8:7d:f0:66:7e:b0:ff:d7:eb:14:f3:45: 00:d8:7e:3b:ba:99:af:f7:fb:1d:fe:42:9e:76:d7: 5f:01:68:4e:3b:b0:b6:6d:3f:48:61:1a:fd:c0:b1: b8:80:e7:a3:a8:06:79:38:10:b7:1b:a8:f1:d5:df: 07:0f:b5:60:70:8a:0d:25:06:16:74:7b:fb:19:f5: 12:5d:1b:91:d6:70:ab:59:68:f4:34:37:69:8c:98: 70:b8:6d:cb:02:8d:d1:9b:d7:87:81:9a:49:db:98: 2c:29:62:b8:03:e6:9f:67:f8:25:be:83:b8:4e:4a: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.131.0/24 185.80.8.0/22 185.231.16.0/22 IPv6: 2a03:5f20::/32 2a0c:3900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39563 Signature Algorithm: sha256WithRSAEncryption ad:c7:0d:cb:ec:ad:a6:d4:a6:08:33:0d:c3:c4:1c:42:3b:7c: 44:3c:f6:7d:42:6e:ec:ab:75:53:06:e5:0d:68:00:3f:fd:6e: 6a:9d:14:dd:c5:f1:a4:d3:01:4d:02:bc:cc:d0:d1:a0:9d:17: 32:28:af:31:85:0c:a8:59:82:34:44:7d:69:36:85:20:24:f4: c0:4d:c6:15:b0:9e:12:b1:96:ee:1c:f9:99:b9:f9:5f:c8:1c: 10:18:22:5e:bf:0a:28:0f:d1:63:7a:9f:ab:db:d1:be:50:a3: 9a:70:32:c8:1e:16:a9:ea:9d:0a:2b:42:ae:80:87:8c:e4:85: ed:23:53:b0:76:e4:5e:49:80:4a:e5:6a:31:c9:78:a7:02:ed: e0:b3:ba:8f:12:fd:d8:68:0b:64:97:26:bf:ac:03:9d:ea:00: 60:f3:e6:ad:2f:c9:41:e7:06:37:c4:56:fa:13:a3:5b:e1:73: 79:65:54:a8:57:d9:49:d4:13:59:45:e5:65:0d:0e:1b:33:af: f8:f8:b2:24:9b:bd:2d:79:cf:50:de:53:72:b0:1f:a2:e6:f4: b3:47:28:d4:31:1f:ee:17:83:4d:5d:f6:c5:7a:ce:72:d5:46: 01:6a:a7:70:75:dc:6e:27:11:db:1d:ba:83:47:f5:fb:b6:50: 78:89:6b:ef -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt4NIShzZuFgeuRge6YtD0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTA4MGJhYjU1YmYzNDczMTg4YzIwYzczNjZhNmNiMDQ0YzcxOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZyPfABHSi0Fa5wKiEgQMpVwc8Qv yMrwYnCfoGf3WuQhsg9SBP8oVUkc3MybP+5FJyQKsBfklgSb+zI/7J4FP2nOI4Nn G2oTtTW7KGwZSMwud3Ddmiu5fq6BVU2fN9oOyXPILHUECPlZmn+Af07tGuJYLC1e 3kqZdaWO8SnDlCj1fBoguR8VOFXYffBmfrD/1+sU80UA2H47upmv9/sd/kKedtdf AWhOO7C2bT9IYRr9wLG4gOejqAZ5OBC3G6jx1d8HD7VgcIoNJQYWdHv7GfUSXRuR 1nCrWWj0NDdpjJhwuG3LAo3Rm9eHgZpJ25gsKWK4A+afZ/glvoO4TkrB3wIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFH4IC6tVvzRzGIwgxzZqbLBExxlcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2ZkYThj OS02ZWZhLTQ5NTQtYTVjMy02MzBiZDczY2UyNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvZmRhOGM5 LTZlZmEtNDk1NC1hNWMzLTYzMGJkNzNjZTI2Ny8xL2ZnZ0xxMVdfTkhNWWpDREhO bXBzc0VUSEdWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAVQiDAwQCuVAIAwQCuecQMBQEAgACMA4DBQAq A18gAwUDKgw5ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAmoswDQYJKoZIhvcN AQELBQADggEBAK3HDcvsrabUpggzDcPEHEI7fEQ89n1CbuyrdVMG5Q1oAD/9bmqd FN3F8aTTAU0CvMzQ0aCdFzIorzGFDKhZgjREfWk2hSAk9MBNxhWwnhKxlu4c+Zm5 +V/IHBAYIl6/CigP0WN6n6vb0b5Qo5pwMsgeFqnqnQorQq6Ah4zkhe0jU7B25F5J gErlajHJeKcC7eCzuo8S/dhoC2SXJr+sA53qAGDz5q0vyUHnBjfEVvoTo1vhc3ll VKhX2UnUE1lF5WUNDhszr/j4siSbvS15z1DeU3KwH6Lm9LNHKNQxH+4Xg01d9sV6 znLVRgFqp3B13G4nEdsduoNH9fu2UHiJa+8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:31 2026 by rpki-client