This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer File: frRWWjLbPJyLiw97TBG9EVTiDek.cer (raw, json) Hash identifier: 8P2N5sJgr+T1mUBFMA8Ace6x433Vu8FTmRFOTl8ykMw= Subject key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F858B5D2151C5675E4EAE49ABF46AD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52122 IP: 46.255.184.0/21 IP: 185.4.184.0/22 IP: 2a01:9140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8b:5d:21:51:c5:67:5e:4e:ae:49:ab:f4:6a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:eb:6d:a6:78:17:1f:b1:f7:77:c2:97:75: 0a:26:b3:aa:5c:2d:48:c0:5e:2e:47:e7:14:f0:bf: c1:3d:a3:50:f4:21:6f:5d:cc:e8:eb:ea:9d:29:a5: ae:45:ef:30:db:81:66:65:3a:02:b9:3c:c1:22:a1: a7:be:07:3d:c4:43:ef:38:be:61:25:03:7a:4b:8e: 9f:8a:75:f6:67:34:aa:5c:00:66:2d:4e:29:76:8e: 83:64:e5:46:41:35:22:58:1c:6c:40:21:aa:b8:72: c6:36:ea:5f:72:ca:49:35:6f:c5:55:90:54:16:99: 8c:b2:5b:53:fc:d4:53:5b:f7:f9:f2:fd:64:65:5c: d6:4e:ca:7c:08:56:74:70:cb:87:bc:e3:7a:2a:d4: 90:35:b3:da:3c:9d:c5:11:ee:fb:5e:26:39:30:89: 0d:90:9b:1e:01:c1:e2:fd:e9:e6:3c:3e:32:c5:c7: fb:83:ea:da:8c:77:15:9f:0b:35:b7:bb:b0:9a:c9: 99:d0:cb:e0:08:ec:a6:30:6c:82:2a:62:5c:97:94: 8d:f7:c8:ef:ff:c7:b6:0b:ad:00:53:bc:e9:24:70: fd:da:12:af:a4:de:34:33:82:be:ea:42:a0:8b:ec: 26:cc:7f:18:52:dc:c1:ae:f8:64:8c:77:1b:c8:db: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.184.0/21 185.4.184.0/22 IPv6: 2a01:9140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52122 Signature Algorithm: sha256WithRSAEncryption 76:52:44:67:46:0e:ab:df:2f:ec:fb:6f:de:24:79:a8:aa:90: 16:69:b4:dc:b5:a4:d0:dd:88:64:37:41:a2:05:ae:71:fd:25: c5:19:8f:6c:46:34:4b:4b:ea:f8:56:79:5e:55:a1:a5:67:d8: 81:3e:28:fa:7b:14:79:c9:b2:18:27:e8:fd:30:3a:77:27:b5: 9b:67:4f:fd:b3:86:77:94:c3:8e:00:27:e4:6a:a3:c1:80:61: e8:22:10:7f:ee:23:de:a9:d5:52:64:83:80:3b:23:13:b9:43: 15:7d:e5:a4:8b:2e:fd:cb:38:f2:81:08:1e:cf:f3:cd:33:20: ce:a8:1b:f3:55:da:86:e9:13:e6:67:2d:9d:c7:b6:0b:c2:28: 37:b8:94:95:82:9f:9e:75:5e:3c:d7:84:35:73:43:17:12:ec: c8:a6:3a:40:fa:54:b7:05:85:87:58:d8:74:df:46:ff:00:a5: a5:a1:67:ab:de:b4:50:7d:ca:cb:c4:b4:ab:55:b4:4d:6c:88: ce:77:f0:69:e3:52:12:cf:c6:46:e3:08:b3:68:fa:30:d5:9b: c7:28:0b:a8:6f:25:62:df:49:f2:9b:65:21:42:cf:47:5f:92: 4a:be:7d:a2:81:48:c1:18:5c:4b:8f:c6:b0:f8:9a:19:bb:fd: cb:56:7d:63 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hYtdIVHFZ15Orkmr9GrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI0NTY1YTMyZGIzYzljOGI4YjBmN2I0YzExYmQxMTU0ZTIwZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKzrbaZ4Fx+x93fCl3UKJrOqXC1I wF4uR+cU8L/BPaNQ9CFvXczo6+qdKaWuRe8w24FmZToCuTzBIqGnvgc9xEPvOL5h JQN6S46finX2ZzSqXABmLU4pdo6DZOVGQTUiWBxsQCGquHLGNupfcspJNW/FVZBU FpmMsltT/NRTW/f58v1kZVzWTsp8CFZ0cMuHvON6KtSQNbPaPJ3FEe77XiY5MIkN kJseAcHi/enmPD4yxcf7g+rajHcVnws1t7uwmsmZ0MvgCOymMGyCKmJcl5SN98jv /8e2C60AU7zpJHD92hKvpN40M4K+6kKgi+wmzH8YUtzBrvhkjHcbyNsmbQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH60Vloy2zyci4sPe0wRvRFU4g3pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzViNTM1 ZS1iMTQzLTRiNGEtOTBlOC0wZTc5NDk5MzVkODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNWI1MzVl LWIxNDMtNGI0YS05MGU4LTBlNzk0OTkzNWQ4MS8xL2ZyUldXakxiUEp5TGl3OTdU Qkc5RVZUaURlay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLv+4AwQCuQS4MA0EAgACMAcDBQAqAZFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDLmjANBgkqhkiG9w0BAQsFAAOCAQEAdlJE Z0YOq98v7Ptv3iR5qKqQFmm03LWk0N2IZDdBogWucf0lxRmPbEY0S0vq+FZ5XlWh pWfYgT4o+nsUecmyGCfo/TA6dye1m2dP/bOGd5TDjgAn5GqjwYBh6CIQf+4j3qnV UmSDgDsjE7lDFX3lpIsu/cs48oEIHs/zzTMgzqgb81XahukT5mctnce2C8IoN7iU lYKfnnVePNeENXNDFxLsyKY6QPpUtwWFh1jYdN9G/wClpaFnq960UH3Ky8S0q1W0 TWyIznfwaeNSEs/GRuMIs2j6MNWbxygLqG8lYt9J8ptlIULPR1+SSr59ooFIwRhc S4/GsPiaGbv9y1Z9Yw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:27 2026 by rpki-client