This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer File: fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer (raw, json) Hash identifier: FKNR3XfY7tNLGcXRgNcCTQUNKEfc2Wnpam9wKifYBNE= Subject key identifier: 7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C08E017B2D6615CE15F06C2F8D39A0B4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 08:30:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210804 IP: 178.212.73.0/24 IP: 2a11:e780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:e0:17:b2:d6:61:5c:e1:5f:06:c2:f8:d3:9a:0b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 08:30:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e3987d5ee9c893d471e44985664397191103f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2d:44:51:d9:47:70:66:18:96:da:8a:0c:c6: cf:3c:47:5c:bb:4c:98:9d:b8:ac:8f:b7:18:b1:6c: c4:d3:ed:6f:0a:fa:e7:16:cb:08:ad:75:a2:05:54: 00:6e:f9:59:b5:c0:a1:26:0e:c9:93:62:f6:2d:e0: 44:d0:5f:52:63:09:d0:1b:5a:9b:5e:1c:73:65:97: 2f:37:d5:12:b7:d9:20:c9:fd:f6:51:6d:23:cb:5c: cb:f0:41:8a:39:bb:c2:88:6e:24:60:1c:f6:0b:30: d3:7e:ae:04:48:5e:08:9e:10:36:a3:a1:1e:3a:1b: 11:37:97:27:fc:0d:e7:46:9e:ec:d3:5c:37:40:44: a3:87:5e:d1:f6:a9:6b:f7:48:9c:9d:1c:f4:2c:4c: b8:ca:e9:c3:e3:f4:6b:88:93:16:e3:54:97:f9:eb: ca:53:44:5a:04:5e:9d:c2:15:bd:e0:34:7c:2f:19: 0f:4d:01:fb:6f:00:cb:e0:6a:bb:aa:aa:45:c7:02: b6:5e:57:db:ce:2e:50:0b:e5:77:fc:e4:f8:5f:2e: a7:e8:f5:58:6c:de:b1:1e:98:f6:7a:58:c2:92:5e: 24:53:ab:ae:e3:46:78:1f:39:2a:df:25:fb:5b:52: a8:e3:e9:da:13:27:68:c2:5f:a3:3a:46:89:f4:ae: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.73.0/24 IPv6: 2a11:e780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210804 Signature Algorithm: sha256WithRSAEncryption 88:c9:59:7e:6d:4d:61:b8:03:a9:3f:86:98:7e:07:c8:6d:67: c0:4b:73:46:df:12:e0:68:d1:0f:5d:a2:e8:f5:0b:b4:54:44: 38:95:a7:fe:ac:b0:10:c7:23:8b:9b:ff:ef:96:4c:a8:fa:ae: f3:62:8c:a1:f0:31:6a:c2:ab:65:43:cd:fd:bd:03:e0:9b:06: dd:f9:35:ff:b0:a2:06:11:ce:d0:70:9c:08:db:d6:c9:62:fa: e7:77:4d:1a:aa:73:ff:a5:62:b9:be:cb:3d:2f:6f:67:a0:4b: 84:08:d5:ca:e7:ad:c5:eb:3f:4b:dd:cd:cd:ed:70:29:c0:98: 1c:7c:ae:44:93:3a:29:4e:b4:88:ee:4d:84:d7:1b:41:07:6d: d2:6e:41:b9:6e:e4:c8:de:c4:d3:0a:e9:19:74:db:9a:ea:d8: 9e:24:59:89:d8:37:0d:7a:cf:46:5e:6e:49:ff:54:09:e9:e3: ad:40:8b:50:ed:51:20:94:a4:34:3a:de:df:8c:a1:e2:71:d8: 2e:cd:e2:91:a2:d0:a5:2f:0d:76:36:48:09:27:b4:d5:f1:e8: e5:a2:f2:f7:a8:5d:95:2b:89:48:83:c9:c8:bc:54:39:c6:27: f2:bb:d0:1a:03:03:ff:dc:d8:92:db:3d:98:0c:9c:85:07:7b: cc:b2:f8:96 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwI4Bey1mFc4V8GwvjTmgtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MDgzMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTM5ODdkNWVlOWM4OTNkNDcxZTQ0OTg1NjY0Mzk3MTkxMTAzZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i1EUdlHcGYYltqKDMbPPEdcu0yY nbisj7cYsWzE0+1vCvrnFssIrXWiBVQAbvlZtcChJg7Jk2L2LeBE0F9SYwnQG1qb XhxzZZcvN9USt9kgyf32UW0jy1zL8EGKObvCiG4kYBz2CzDTfq4ESF4InhA2o6Ee OhsRN5cn/A3nRp7s01w3QESjh17R9qlr90icnRz0LEy4yunD4/RriJMW41SX+evK U0RaBF6dwhW94DR8LxkPTQH7bwDL4Gq7qqpFxwK2Xlfbzi5QC+V3/OT4Xy6n6PVY bN6xHpj2eljCkl4kU6uu40Z4Hzkq3yX7W1Ko4+naEydowl+jOkaJ9K4atwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH45h9XunIk9Rx5EmFZkOXGRED99MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2I5NzU5 MC02YzkzLTRlYWQtOGU1OC0yNmQxZjk0ZDk4NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYjk3NTkw LTZjOTMtNGVhZC04ZTU4LTI2ZDFmOTRkOTg2Ny8xL2ZqbUgxZTZjaVQxSEhrU1lW bVE1Y1pFUVAzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAstRJMA0EAgACMAcDBQMqEeeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3dDANBgkqhkiG9w0BAQsFAAOCAQEAiMlZfm1NYbgD qT+GmH4HyG1nwEtzRt8S4GjRD12i6PULtFREOJWn/qywEMcji5v/75ZMqPqu82KM ofAxasKrZUPN/b0D4JsG3fk1/7CiBhHO0HCcCNvWyWL653dNGqpz/6Viub7LPS9v Z6BLhAjVyuetxes/S93Nze1wKcCYHHyuRJM6KU60iO5NhNcbQQdt0m5BuW7kyN7E 0wrpGXTbmurYniRZidg3DXrPRl5uSf9UCenjrUCLUO1RIJSkNDre34yh4nHYLs3i kaLQpS8NdjZICSe01fHo5aLy96hdlSuJSIPJyLxUOcYn8rvQGgMD/9zYkts9mAyc hQd7zLL4lg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client