This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer File: fm16FsP81nnQXSjtkgk1wIaujP0.cer (raw, json) Hash identifier: LPLpBx6X19J+VKtAFqAwjPt2e4kBQCEww1CPeuH4Rn0= Subject key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5BD79EE0D6C7AF15711C478CF3ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.40.20.0/22 IP: 217.13.96.0/23 IP: 217.13.100.0/22 IP: 217.13.106.0 -- 217.13.108.255 IP: 217.13.110.0/24 IP: 2a01:4be0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5b:d7:9e:e0:d6:c7:af:15:71:1c:47:8c:f3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:03:e1:1a:92:f7:5b:dd:c3:7e:c8:d3:42: de:99:e9:ff:dd:66:d7:04:23:7b:26:cd:9f:78:eb: 92:63:80:b4:84:77:3e:94:11:ba:a6:e9:a8:e8:24: 54:11:49:3c:6a:8d:52:6b:00:66:f6:ce:b5:2d:f5: 86:3c:59:23:e8:69:1c:b7:d9:0d:66:50:a6:1e:d0: 1b:15:9e:de:38:99:f0:26:c7:eb:31:f7:20:6e:95: a3:46:ab:cd:72:a5:92:b0:a8:8d:d9:9e:07:5f:e2: 0a:78:0a:4b:20:eb:f1:e9:6a:9a:e5:c0:b5:12:1d: 86:54:6a:c8:6b:db:d0:d4:97:1a:93:fe:f5:14:51: 4e:95:a3:39:d9:24:0b:44:86:d7:64:c5:7c:64:28: 48:ce:b3:11:a9:d6:e6:50:32:06:bf:a7:49:5a:3e: 92:1d:5f:fb:f4:41:9b:b2:b5:df:a0:0c:ed:57:26: 98:85:61:f7:66:45:33:e6:97:5c:e1:d5:bc:d1:8c: b8:42:5a:2e:2f:bb:f2:a5:3c:41:26:e2:78:7a:97: 0f:b0:c7:1a:67:12:6f:7f:4a:70:31:1f:8d:1f:4c: b9:26:d1:29:76:ac:17:f0:92:45:03:5c:c7:b1:a8: f1:89:95:aa:03:c5:a3:f3:c6:a2:9e:9d:ae:1a:fe: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.20.0/22 217.13.96.0/23 217.13.100.0/22 217.13.106.0-217.13.108.255 217.13.110.0/24 IPv6: 2a01:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 57:17:d3:c0:8f:d1:78:16:65:51:71:4a:33:c1:35:da:c0:80: 6f:c8:88:e9:ce:56:b5:ed:7a:aa:a7:ae:92:de:90:ed:0d:59: d2:d6:f0:56:0e:71:0c:1d:d7:62:dd:14:44:6d:d7:47:5c:5a: fa:0f:7f:36:3f:56:dd:01:07:cb:29:d6:2e:80:9d:e6:ca:23: cb:44:e9:9b:74:88:ba:a7:81:9f:61:7b:3b:02:87:fe:39:7a: 0b:c0:bf:e6:74:c9:1b:0f:4e:a0:97:65:da:59:0d:de:18:38: 69:a5:5e:a6:4c:e5:65:93:5d:9d:7b:0a:88:d8:4f:66:d3:b0: e4:19:2f:69:27:f2:44:a6:24:f1:b1:7d:b8:5e:be:f8:ea:8f: a2:24:ae:0b:39:f8:bb:77:bc:73:06:f8:3d:c6:36:fe:fa:19: 8c:6f:b2:87:e8:b7:40:e2:35:48:8c:22:b1:f2:31:9c:66:c7: a0:63:f7:f2:a1:12:1e:1b:20:7a:22:e8:d4:a1:54:5d:ef:da: 8f:37:ac:b3:8a:c5:18:8a:0a:e8:fa:53:ef:bf:af:5b:cd:f4: e9:2b:fd:1e:a8:75:44:ce:07:2f:88:8c:e2:c0:31:f4:de:a5: 10:24:6f:db:50:b7:ad:d3:d2:7d:6d:35:4c:2d:df:2e:13:fb: 8d:b5:5d:d4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt261vXnuDWx68VcRxHjPPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTZkN2ExNmMzZmNkNjc5ZDA1ZDI4ZWQ5MjA5MzVjMDg2YWU4Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs38D4RqS91vdw37I00Lemen/3WbX BCN7Js2feOuSY4C0hHc+lBG6pumo6CRUEUk8ao1SawBm9s61LfWGPFkj6Gkct9kN ZlCmHtAbFZ7eOJnwJsfrMfcgbpWjRqvNcqWSsKiN2Z4HX+IKeApLIOvx6Wqa5cC1 Eh2GVGrIa9vQ1Jcak/71FFFOlaM52SQLRIbXZMV8ZChIzrMRqdbmUDIGv6dJWj6S HV/79EGbsrXfoAztVyaYhWH3ZkUz5pdc4dW80Yy4QlouL7vypTxBJuJ4epcPsMca ZxJvf0pwMR+NH0y5JtEpdqwX8JJFA1zHsajxiZWqA8Wj88ainp2uGv525wIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFH5tehbD/NZ50F0o7ZIJNcCGroz9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzVjNzQ2 OC0xYTMzLTQyNTUtODI3Zi00YmZjNjZhZDA4YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNWM3NDY4 LTFhMzMtNDI1NS04MjdmLTRiZmM2NmFkMDhjOS8xL2ZtMTZGc1A4MW5uUVhTanRr Z2sxd0lhdWpQMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQCuSgUAwQB2Q1gAwQC2Q1kMAwDBAHZDWoDBADZ DWwDBADZDW4wDQQCAAIwBwMFACoBS+AwDQYJKoZIhvcNAQELBQADggEBAFcX08CP 0XgWZVFxSjPBNdrAgG/IiOnOVrXteqqnrpLekO0NWdLW8FYOcQwd12LdFERt10dc WvoPfzY/Vt0BB8sp1i6AnebKI8tE6Zt0iLqngZ9hezsCh/45egvAv+Z0yRsPTqCX ZdpZDd4YOGmlXqZM5WWTXZ17CojYT2bTsOQZL2kn8kSmJPGxfbhevvjqj6Ikrgs5 +Lt3vHMG+D3GNv76GYxvsofot0DiNUiMIrHyMZxmx6Bj9/KhEh4bIHoi6NShVF3v 2o83rLOKxRiKCuj6U++/r1vN9Okr/R6odUTOBy+IjOLAMfTepRAkb9tQt63T0n1t NUwt3y4T+421XdQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:49 2026 by rpki-client