This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer (raw, json) Hash identifier: Av8ZLgH4R0gpVxn2oj+v5yh7oG0lwBYdMUrpSvmJlSY= Subject key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE8DD2373BFB71132B85EFC069864 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215463 IP: 193.138.97.0/24 IP: 217.70.4.0/24 IP: 2a14:840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e8:dd:23:73:bf:b7:11:32:b8:5e:fc:06:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e9360205b48af4954566314230e6b1296d9aec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:cb:12:65:97:c2:ff:fc:d3:3f:e1:e2:c7: 88:58:83:80:2e:c9:3e:31:42:b4:71:fb:09:80:10: 4f:20:3d:6e:79:33:97:ce:d2:18:30:04:c1:af:39: fa:15:a7:48:4c:a0:4b:6a:a0:95:2b:e4:d3:e5:60: 9d:aa:07:ac:6a:b0:4d:56:1c:cf:f6:7d:73:a5:f4: 39:6b:51:54:16:20:e2:da:40:57:6f:bf:4a:8e:af: e4:6d:2d:f7:c8:0b:2c:09:59:88:a7:fa:52:54:aa: 74:58:ce:76:53:08:96:26:0e:cb:ea:fc:0a:7e:e9: 51:c1:62:ea:5e:61:f3:a8:28:fb:b4:75:61:97:18: 54:3e:b3:05:ae:19:c5:1e:3a:cf:e3:6c:13:1e:28: 61:35:5f:67:fe:a7:6a:d7:ca:aa:85:48:de:c4:79: 5d:e6:cf:96:59:85:0b:aa:46:a6:d4:9d:f9:d2:d0: 96:8f:8c:d7:4a:e3:cd:bc:85:a1:a0:13:1d:aa:2f: c9:6c:6d:e3:0c:86:58:a4:8d:58:16:01:d7:25:f9: b7:3e:2a:57:e3:c8:d4:82:6d:ab:26:f2:bb:41:d2: da:52:3e:cd:32:88:3d:a3:4c:a2:cd:87:52:58:8c: 06:00:73:4a:b0:3f:ea:d1:11:0f:c3:60:b1:9c:a2: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.97.0/24 217.70.4.0/24 IPv6: 2a14:840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215463 Signature Algorithm: sha256WithRSAEncryption 6a:10:67:4b:32:30:dd:53:6a:a0:dd:9b:b4:eb:c6:fb:ef:3d: 76:11:71:05:8f:e9:cc:09:d3:f0:ef:05:14:17:c8:09:fe:28: 05:8f:e1:cf:fc:a5:45:3f:fe:67:60:05:aa:1c:95:a7:ba:98: ec:8f:c0:43:74:07:d2:af:c3:4c:1a:1d:0d:5d:35:26:c5:88: 3c:e1:a9:0b:82:52:35:ec:78:46:0b:1c:d6:88:27:62:e8:e1: a1:d8:b0:78:2a:3e:dc:5a:e0:f1:90:31:e1:5b:49:8d:a2:cc: 5d:cb:c6:0b:f7:c0:dd:e2:00:18:c2:87:67:bd:84:33:08:67: 69:06:13:e6:2b:38:c1:e5:4b:57:36:ad:6e:ea:a0:00:2c:a5: 1d:af:72:5a:29:90:25:9d:99:a9:ac:6d:9f:13:ce:e2:90:6d: 0f:ba:53:4e:69:87:35:f5:c2:67:b5:60:22:b4:2c:2f:a7:e9: ca:66:e8:5a:5d:f9:af:f1:a5:81:34:13:46:83:3d:ce:fd:00: 10:53:86:fb:f5:86:12:e6:17:79:a2:ba:77:8c:ea:b0:85:70: ec:9e:b8:dd:82:5c:e6:3a:17:b3:11:b1:03:d1:93:d3:6e:af: 40:d3:42:2a:c5:09:b4:55:b4:2f:b4:0a:06:99:a5:23:2b:fb: d3:25:0d:be -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87OjdI3O/txEyuF78BphkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTkzNjAyMDViNDhhZjQ5NTQ1NjYzMTQyMzBlNmIxMjk2ZDlhZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdvLEmWXwv/80z/h4seIWIOALsk+ MUK0cfsJgBBPID1ueTOXztIYMATBrzn6FadITKBLaqCVK+TT5WCdqgesarBNVhzP 9n1zpfQ5a1FUFiDi2kBXb79Kjq/kbS33yAssCVmIp/pSVKp0WM52UwiWJg7L6vwK fulRwWLqXmHzqCj7tHVhlxhUPrMFrhnFHjrP42wTHihhNV9n/qdq18qqhUjexHld 5s+WWYULqkam1J350tCWj4zXSuPNvIWhoBMdqi/JbG3jDIZYpI1YFgHXJfm3PipX 48jUgm2rJvK7QdLaUj7NMog9o0yizYdSWIwGAHNKsD/q0REPw2CxnKKydwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH6TYCBbSK9JVFZjFCMOaxKW2a7EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzhhMjJm MS1lNGZmLTQ0NjktODJlYi1kMzBlYTk2OGJmYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvOGEyMmYx LWU0ZmYtNDQ2OS04MmViLWQzMGVhOTY4YmZhNy8xL2ZwTmdJRnRJcjBsVVZtTVVJ dzVyRXBiWnJzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwYphAwQA2UYEMA0EAgACMAcDBQAqFAhAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJpzANBgkqhkiG9w0BAQsFAAOCAQEAahBn SzIw3VNqoN2btOvG++89dhFxBY/pzAnT8O8FFBfICf4oBY/hz/ylRT/+Z2AFqhyV p7qY7I/AQ3QH0q/DTBodDV01JsWIPOGpC4JSNex4Rgsc1ognYujhodiweCo+3Frg 8ZAx4VtJjaLMXcvGC/fA3eIAGMKHZ72EMwhnaQYT5is4weVLVzatbuqgACylHa9y WimQJZ2ZqaxtnxPO4pBtD7pTTmmHNfXCZ7VgIrQsL6fpymboWl35r/GlgTQTRoM9 zv0AEFOG+/WGEuYXeaK6d4zqsIVw7J643YJc5joXsxGxA9GT026vQNNCKsUJtFW0 L7QKBpmlIyv70yUNvg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:58 2026 by rpki-client