This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer File: fmjbaSbQRXjYWfB9PdiQubr2RP0.cer (raw, json) Hash identifier: gZX/8vAdpy7fHy1rpYc+zSpbTEPdl/lzj6xno+icL78= Subject key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBAC3C23E1A3C6FBB0C5788D578860 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198438 IP: 91.234.180.0/22 IP: 2001:678:178::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ac:3c:23:e1:a3:c6:fb:b0:c5:78:8d:57:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e68db6926d04578d859f07d3dd890b9baf644fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:81:d3:ed:d2:30:47:fc:94:60:76:61:de: cc:a3:e5:c9:75:e1:96:3c:a6:22:43:17:06:70:ad: 0f:07:66:c3:d9:82:97:e1:4c:26:19:78:6d:6e:f7: 2c:06:be:00:0f:3e:32:56:ff:6f:8a:27:aa:88:c7: 58:d4:8c:9f:37:1f:75:d0:40:a5:a8:18:a7:d3:c7: 14:75:30:bf:c3:e0:45:70:87:ee:ab:29:ac:79:e7: af:f5:91:ad:81:e2:1c:43:30:e2:b5:e7:83:38:2c: dd:dc:cd:db:4a:ec:07:7f:7b:b9:d1:91:1f:0a:ba: 49:d7:7d:c8:56:7d:1e:dd:dc:62:cb:72:df:bf:65: 8a:ec:e1:67:d6:60:f1:d3:d4:3a:60:17:e6:9c:a4: 5e:65:e8:4d:7f:04:68:42:96:f4:fd:3d:ff:e4:d2: c7:f3:52:a8:7e:ca:7b:fe:f9:38:dc:f9:d9:2d:69: 1a:8e:7b:f7:4a:33:23:ae:d5:83:12:58:4d:a0:cc: 8b:a1:1d:dc:09:a4:4a:59:47:30:1a:b1:0f:f5:f4: d0:07:b2:39:50:91:76:6d:9f:8a:18:15:e0:41:8e: ac:f9:7c:19:d8:88:ec:18:80:b1:99:7e:38:96:5a: 5a:a5:e5:d5:e4:d6:b9:8a:5d:61:40:1c:ef:fb:bb: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.180.0/22 IPv6: 2001:678:178::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198438 Signature Algorithm: sha256WithRSAEncryption 7e:c1:21:0c:95:c6:35:1a:09:3d:01:9a:ca:05:c2:67:23:92: e3:1c:a9:1f:78:ec:2f:aa:a6:85:38:a4:ff:b0:28:e6:3b:a8: 02:34:9a:77:cb:66:78:e5:9c:29:83:9a:4a:c1:ff:1b:fc:61: 08:ce:8d:41:6c:96:a3:60:6f:5b:0f:b2:0c:a2:7a:4d:04:56: 9c:26:f5:4f:ea:1b:65:2c:40:f4:db:9e:9c:41:b0:6b:f4:8f: 36:d9:c6:7f:75:ea:10:6d:13:8b:47:a1:33:65:b7:e3:21:28: 63:09:40:55:02:c1:3b:e9:4a:83:a1:a2:37:da:91:07:a2:03: b7:c4:c7:bf:8c:89:d8:8b:ea:bb:fc:a7:ef:cb:d2:e5:56:35: 59:c8:36:50:46:4c:56:9f:05:40:22:d5:7b:99:d5:ff:fc:9f: 73:cb:15:36:73:3c:d7:fb:64:34:3d:f8:e0:ea:17:e9:5e:dc: 87:74:22:f9:4c:8e:48:9c:8d:8b:ce:dd:7e:2b:43:c5:d0:0c: 29:56:dd:db:a9:27:c4:ea:0d:1e:3f:5c:cb:dd:b8:4b:1a:01: a8:22:c2:93:ee:c0:0f:70:a9:f9:f1:77:90:27:b7:b4:df:ed: 25:84:bd:a2:b8:70:86:b8:e1:65:3f:4c:5a:8b:e8:4d:f9:9e: 87:3a:39:1f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt566w8I+GjxvuwxXiNV4hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTY4ZGI2OTI2ZDA0NTc4ZDg1OWYwN2QzZGQ4OTBiOWJhZjY0NGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiOB0+3SMEf8lGB2Yd7Mo+XJdeGW PKYiQxcGcK0PB2bD2YKX4UwmGXhtbvcsBr4ADz4yVv9viieqiMdY1IyfNx910ECl qBin08cUdTC/w+BFcIfuqymseeev9ZGtgeIcQzDiteeDOCzd3M3bSuwHf3u50ZEf CrpJ133IVn0e3dxiy3Lfv2WK7OFn1mDx09Q6YBfmnKReZehNfwRoQpb0/T3/5NLH 81Kofsp7/vk43PnZLWkajnv3SjMjrtWDElhNoMyLoR3cCaRKWUcwGrEP9fTQB7I5 UJF2bZ+KGBXgQY6s+XwZ2IjsGICxmX44llpapeXV5Na5il1hQBzv+7ulVQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFH5o22km0EV42FnwfT3YkLm69kT9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2U5MDQy Yi0yMDYxLTQ5YWEtODY5Zi00ZjY5MDBmZjg0NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvZTkwNDJi LTIwNjEtNDlhYS04NjlmLTRmNjkwMGZmODQ2ZC8xL2ZtamJhU2JRUlhqWVdmQjlQ ZGlRdWJyMlJQMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW+q0MA8EAgACMAkDBwAgAQZ4AXgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwcmMA0GCSqGSIb3DQEBCwUAA4IBAQB+wSEMlcY1 Ggk9AZrKBcJnI5LjHKkfeOwvqqaFOKT/sCjmO6gCNJp3y2Z45Zwpg5pKwf8b/GEI zo1BbJajYG9bD7IMonpNBFacJvVP6htlLED0256cQbBr9I822cZ/deoQbROLR6Ez ZbfjIShjCUBVAsE76UqDoaI32pEHogO3xMe/jInYi+q7/Kfvy9LlVjVZyDZQRkxW nwVAItV7mdX//J9zyxU2czzX+2Q0Pfjg6hfpXtyHdCL5TI5InI2Lzt1+K0PF0Awp Vt3bqSfE6g0eP1zL3bhLGgGoIsKT7sAPcKn58XeQJ7e03+0lhL2iuHCGuOFlP0xa i+hN+Z6HOjkf -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:55 2026 by rpki-client