This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer File: fnogtIaCHWJ702CV56Ba-fqhUpw.cer (raw, json) Hash identifier: 0qbsM+Br61MWm1uFxrrVIZ1aM9590Z4u9KhEv171CJg= Subject key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12F0A7887BC79E31D55455DD185CB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216147 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f0:a7:88:7b:c7:9e:31:d5:54:55:dd:18:5c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e7a20b486821d627bd36095e7a05af9faa1529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:e3:34:68:0a:7c:a8:dc:9c:9e:bc:43:39: 28:b6:4e:e1:4b:a6:d3:e8:b1:4f:41:31:18:44:5e: 4b:e6:be:a1:58:df:8b:72:89:41:07:34:4e:c1:66: 9c:a3:80:3f:56:de:76:68:a5:8a:41:3d:d4:28:59: b2:67:91:1b:e7:7c:1e:53:07:f8:80:69:4c:6f:65: 68:53:c7:43:0a:8c:89:4b:0d:e8:74:dd:60:79:dc: 84:1d:d6:8c:ba:2d:ed:02:39:32:53:18:ab:b8:fa: a8:f7:24:76:f3:aa:4c:a8:6b:0e:1b:6b:6a:45:a0: 9d:e8:43:02:bd:90:ee:3b:0a:e8:be:98:34:c4:65: e4:f0:38:09:71:6a:d5:c1:e0:4d:3c:fe:64:20:25: 9e:d0:43:20:b5:6f:3c:93:79:9c:3a:67:23:51:e3: f8:1f:0b:78:50:21:45:2f:eb:0f:fd:8a:65:52:b1: 6a:57:65:fb:c5:78:7b:12:7f:7e:5c:a7:0b:ff:67: 82:f9:57:8d:7c:55:25:18:ff:a6:e9:32:78:b6:df: 75:63:50:d5:9f:c0:ff:6d:c2:69:56:59:3f:ec:c6: fb:9b:0e:2c:b0:ba:4d:ae:8f:b3:d3:b0:2f:90:37: b5:cf:39:da:c0:c5:4d:4c:22:19:30:d4:b7:7c:d8: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216147 Signature Algorithm: sha256WithRSAEncryption 51:a7:6a:c6:47:4d:35:e9:a7:15:dc:b4:d0:19:10:ec:aa:6c: 96:6d:ec:80:e8:2c:7a:29:79:22:1e:cb:47:ab:f6:b7:00:af: 76:d5:56:c4:d3:cf:83:aa:ac:f5:80:ad:be:32:ea:43:36:10: e1:72:0e:25:90:b9:5f:1f:18:d2:cf:1f:8e:ff:85:b2:b3:d7: 48:13:8b:79:ff:70:5e:89:12:64:d1:9d:4b:bb:84:84:22:d6: 98:d4:c2:27:bc:f8:28:63:8a:ad:01:ff:0a:34:d8:ba:b6:97: 77:0e:dd:20:3a:92:a7:db:b7:8f:87:46:06:5b:47:b8:15:a6: 63:4b:86:df:3f:a2:51:62:11:69:df:6c:5c:6a:63:94:fa:5f: 07:70:f9:d7:85:8d:ee:49:2c:c5:78:1d:6f:47:9e:57:54:3c: 30:49:b7:3e:03:11:bb:33:a5:90:6d:e1:df:f3:ed:ae:d1:85: 63:0f:7c:94:0c:b7:dc:f5:72:0a:96:83:6f:8e:6c:01:11:e9: 4c:41:f2:52:e9:74:83:1e:2d:74:7e:19:a7:e3:3a:36:e6:da: 0d:37:47:df:de:85:f7:d2:75:97:53:71:7e:dd:cd:ec:a7:16: ca:da:f1:6f:58:5f:ac:8d:71:99:7a:cd:6e:70:ce:25:64:d1: 3e:c5:2d:e5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EvCniHvHnjHVVFXdGFyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTdhMjBiNDg2ODIxZDYyN2JkMzYwOTVlN2EwNWFmOWZhYTE1MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28TjNGgKfKjcnJ68Qzkotk7hS6bT 6LFPQTEYRF5L5r6hWN+LcolBBzROwWaco4A/Vt52aKWKQT3UKFmyZ5Eb53weUwf4 gGlMb2VoU8dDCoyJSw3odN1gedyEHdaMui3tAjkyUxiruPqo9yR286pMqGsOG2tq RaCd6EMCvZDuOwrovpg0xGXk8DgJcWrVweBNPP5kICWe0EMgtW88k3mcOmcjUeP4 Hwt4UCFFL+sP/YplUrFqV2X7xXh7En9+XKcL/2eC+VeNfFUlGP+m6TJ4tt91Y1DV n8D/bcJpVlk/7Mb7mw4ssLpNro+z07AvkDe1zznawMVNTCIZMNS3fNiymwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH56ILSGgh1ie9NgleegWvn6oVKcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2UzODRl OS0wZTdjLTQ0ZDEtOWNlNS1iYTc1ZjQ3NWZjM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvZTM4NGU5 LTBlN2MtNDRkMS05Y2U1LWJhNzVmNDc1ZmMzZS8xL2Zub2d0SWFDSFdKNzAyQ1Y1 NkJhLWZxaFVwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMUzANBgkqhkiG9w0BAQsFAAOCAQEAUadqxkdNNemn Fdy00BkQ7Kpslm3sgOgseil5Ih7LR6v2twCvdtVWxNPPg6qs9YCtvjLqQzYQ4XIO JZC5Xx8Y0s8fjv+FsrPXSBOLef9wXokSZNGdS7uEhCLWmNTCJ7z4KGOKrQH/CjTY uraXdw7dIDqSp9u3j4dGBltHuBWmY0uG3z+iUWIRad9sXGpjlPpfB3D514WN7kks xXgdb0eeV1Q8MEm3PgMRuzOlkG3h3/PtrtGFYw98lAy33PVyCpaDb45sARHpTEHy Uul0gx4tdH4Zp+M6NubaDTdH396F99J1l1Nxft3N7KcWytrxb1hfrI1xmXrNbnDO JWTRPsUt5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:57 2026 by rpki-client