This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer File: ftCMDM2oAs8gznq97qICFOBeR68.cer (raw, json) Hash identifier: jevMvSb8EkqJaD7KQGCnh/mSMYun4KXYYPHRo4jqJ9k= Subject key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123491290195DC4DA7D572BF620BFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21478 IP: 213.129.192.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:34:91:29:01:95:dc:4d:a7:d5:72:bf:62:0b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5c:6a:e0:bd:a2:b5:f8:28:fe:82:45:0e:c6: ad:c4:6d:70:91:e3:77:fe:ac:db:b7:07:14:75:24: e5:72:f3:25:24:38:5f:ae:73:0b:24:93:dc:85:60: 41:cd:6f:e1:cc:d3:9c:79:f7:27:ae:6c:ca:65:58: 09:46:6f:38:4d:24:ee:54:e3:e1:9e:81:44:a8:d9: ef:9a:0e:f3:6e:25:60:cd:00:75:53:ff:8a:d8:b9: 6b:29:90:2e:1e:1e:c8:ee:78:57:99:a2:23:92:90: 3b:5e:6d:a9:e8:f9:41:03:1b:9c:85:f5:fa:39:b8: 46:0a:fb:b6:a6:84:86:31:57:f1:80:72:a4:a7:9e: 35:e2:dd:3e:10:bf:3b:22:09:ce:58:6a:a6:46:75: 44:00:9d:21:12:47:c4:a4:fa:23:86:0f:b5:09:91: 99:c1:1c:55:0e:e0:5d:60:28:08:91:67:d8:62:fa: 2e:52:a5:ef:52:0e:d9:c7:cc:55:fc:41:a9:2b:f6: 79:3b:f8:50:66:32:f3:eb:b4:4d:93:bd:49:72:56: c1:8e:08:3a:df:34:0c:43:46:33:c6:5e:19:79:97: a2:2d:0d:c5:3d:33:84:b6:28:b1:5d:80:19:54:5c: b8:2d:a4:aa:97:f6:7a:95:36:59:ec:8c:5c:d1:70: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.129.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21478 Signature Algorithm: sha256WithRSAEncryption 90:b3:e5:69:a3:a6:c2:f5:7d:b3:e6:1f:9b:c4:f1:eb:93:69: f2:8a:df:e3:07:48:db:e6:83:54:93:a8:24:2f:17:35:38:51: e6:b8:a5:85:9f:b1:33:0c:25:5f:92:8a:d7:d6:63:f5:48:a4: 6a:76:83:71:4e:4b:16:16:25:ce:47:d1:6e:2f:4c:f0:06:1c: d6:46:e9:ae:6a:e8:5f:26:47:8b:18:a4:1c:7e:fc:49:2a:10: 91:7b:2b:82:fb:a1:24:9d:1b:e7:a8:8b:61:69:48:df:e0:9a: d2:3d:51:ba:ad:3b:68:c2:21:28:35:38:1b:44:e3:65:15:0b: 2e:16:d0:b1:aa:b6:29:43:05:d3:12:a5:9a:7f:24:31:6e:02: 9e:d7:87:40:4f:f3:43:d4:9d:b8:f7:91:fd:2e:ab:0a:a0:ea: 39:f0:3e:4e:05:c4:c0:1c:a0:7f:31:40:a1:d4:ce:14:a8:20: ea:4b:57:28:c2:5f:4d:ac:09:ed:25:a4:36:27:7b:cd:e3:5a: fe:b9:1c:6b:14:2a:b6:70:3c:14:11:71:22:66:f8:19:20:f4: 02:dd:cb:57:5c:64:a6:e4:e5:d1:66:00:72:c7:25:09:92:69: 3f:bd:fe:18:57:b1:ff:4d:b2:06:49:8f:49:d8:17:e1:10:10: 1e:f0:26:23 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8EjSRKQGV3E2n1XK/Ygv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQwOGMwY2NkYTgwMmNmMjBjZTdhYmRlZWEyMDIxNGUwNWU0N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71xq4L2itfgo/oJFDsatxG1wkeN3 /qzbtwcUdSTlcvMlJDhfrnMLJJPchWBBzW/hzNOcefcnrmzKZVgJRm84TSTuVOPh noFEqNnvmg7zbiVgzQB1U/+K2LlrKZAuHh7I7nhXmaIjkpA7Xm2p6PlBAxuchfX6 ObhGCvu2poSGMVfxgHKkp5414t0+EL87IgnOWGqmRnVEAJ0hEkfEpPojhg+1CZGZ wRxVDuBdYCgIkWfYYvouUqXvUg7Zx8xV/EGpK/Z5O/hQZjLz67RNk71JclbBjgg6 3zQMQ0Yzxl4ZeZeiLQ3FPTOEtiixXYAZVFy4LaSql/Z6lTZZ7Ixc0XClkwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFH7QjAzNqALPIM56ve6iAhTgXkevMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzNhMjBk OC1lOTAyLTQxZjUtYmVmYS1hYjVmMzlmYjhkMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvM2EyMGQ4 LWU5MDItNDFmNS1iZWZhLWFiNWYzOWZiOGQzNi8xL2Z0Q01ETTJvQXM4Z3pucTk3 cUlDRk9CZVI2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQF1YHAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlPmMA0GCSqGSIb3DQEBCwUAA4IBAQCQs+Vpo6bC9X2z5h+bxPHrk2nyit/jB0jb 5oNUk6gkLxc1OFHmuKWFn7EzDCVfkorX1mP1SKRqdoNxTksWFiXOR9FuL0zwBhzW RumuauhfJkeLGKQcfvxJKhCReyuC+6EknRvnqIthaUjf4JrSPVG6rTtowiEoNTgb RONlFQsuFtCxqrYpQwXTEqWafyQxbgKe14dAT/ND1J2495H9LqsKoOo58D5OBcTA HKB/MUCh1M4UqCDqS1cowl9NrAntJaQ2J3vN41r+uRxrFCq2cDwUEXEiZvgZIPQC 3ctXXGSm5OXRZgByxyUJkmk/vf4YV7H/TbIGSY9J2BfhEBAe8CYj -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:22 2026 by rpki-client