This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer (raw, json) Hash identifier: E8OLYh6w+dSIBhjYwfPp33Y+iAaTGpSkXChw/e9amk4= Subject key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36297361A43366DEDA760D920B43E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48603 IP: 45.147.92.0/24 IP: 2a0f:f800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:29:73:61:a4:33:66:de:da:76:0d:92:0b:43:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:de:87:55:7e:c6:c6:c3:2c:a8:5f:ea:69: b6:52:a5:2e:a9:81:f7:05:a4:f4:c1:44:3a:61:cb: 7d:93:b4:f1:37:b2:1a:28:e6:11:a7:96:12:ca:b3: 7e:76:51:63:a5:a4:5e:00:cb:ab:11:f1:28:bd:1a: 88:82:13:36:ff:01:ec:c3:93:18:21:48:fc:2d:17: f3:b6:30:57:6a:ea:3b:b4:e9:17:5d:d0:6a:f4:40: f3:44:ec:af:ef:7c:0f:ce:a0:c0:b8:87:c0:25:8d: 0d:ef:8b:5f:aa:9d:14:7d:d6:00:8e:25:05:28:76: cd:9d:5c:9b:f7:39:5e:ed:d4:31:1f:af:21:2f:33: 47:0a:87:d7:0f:0d:b2:74:65:20:7a:af:78:44:10: 60:de:ee:98:34:33:b5:13:6c:c8:f8:29:6f:0c:88: 5d:f5:44:cb:fb:e5:86:e0:60:8f:04:32:96:7f:12: 63:1c:8c:ea:f3:23:d4:d0:81:91:3f:77:53:1f:e0: e4:a9:6c:c9:de:3a:98:c8:3b:20:e2:8e:3f:54:25: 07:e2:7c:5d:2d:a1:2b:ec:6e:6d:fc:dc:88:e1:18: 72:e8:78:79:5f:48:02:5a:75:81:b7:28:d7:44:a4: 10:91:28:1d:35:7f:69:27:23:72:3a:00:9b:d2:05: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.92.0/24 IPv6: 2a0f:f800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48603 Signature Algorithm: sha256WithRSAEncryption 9e:36:dc:f6:d5:b5:4e:0d:61:06:a3:64:11:b0:c9:5f:e0:b5: 96:7f:67:de:43:20:56:f1:7d:8f:60:a6:2b:42:27:20:a3:87: dc:0a:aa:ad:e0:bf:e1:62:2a:59:c2:e0:2c:e6:d1:f5:5e:48: 4a:36:37:fa:2c:ec:82:16:8c:48:dd:b0:79:e7:0c:f1:36:6c: c5:20:ff:5d:83:df:f3:bc:af:16:a2:27:40:e1:9e:8d:05:72: e1:35:b7:1a:e2:bf:d4:92:ab:8f:b7:db:8b:9e:b5:b6:90:78: 03:0c:0d:0d:bc:f5:52:ce:f6:25:1d:d6:94:0d:eb:36:81:ac: 08:60:aa:6f:9e:c6:ad:b0:aa:b1:64:51:71:93:d7:01:5d:e3: d4:e0:62:12:94:66:e8:51:78:fd:e2:0a:e1:27:ce:a2:66:9c: 31:0a:90:98:4d:3e:7e:ec:9a:21:e2:dd:95:9b:c7:5b:36:63: d7:b1:3d:78:3a:7d:79:dc:11:c6:0f:22:4a:2d:e3:57:69:b4: 64:50:32:35:c2:4a:7c:3d:41:97:0c:7a:77:ef:bb:ef:1d:82: f1:d0:9b:59:6b:9f:67:14:55:56:49:b3:d5:bd:9a:05:56:0a: 88:ad:f8:12:63:c5:be:67:a8:a2:08:f5:be:e5:c2:61:22:fd: 89:1d:69:5b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NilzYaQzZt7adg2SC0PpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQyNGM1ZDM0NGZiOTJiY2Y0Y2Y2ZTFlNTY5ZjUxYWU0MWFhODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ajeh1V+xsbDLKhf6mm2UqUuqYH3 BaT0wUQ6Yct9k7TxN7IaKOYRp5YSyrN+dlFjpaReAMurEfEovRqIghM2/wHsw5MY IUj8LRfztjBXauo7tOkXXdBq9EDzROyv73wPzqDAuIfAJY0N74tfqp0UfdYAjiUF KHbNnVyb9zle7dQxH68hLzNHCofXDw2ydGUgeq94RBBg3u6YNDO1E2zI+ClvDIhd 9UTL++WG4GCPBDKWfxJjHIzq8yPU0IGRP3dTH+DkqWzJ3jqYyDsg4o4/VCUH4nxd LaEr7G5t/NyI4Rhy6Hh5X0gCWnWBtyjXRKQQkSgdNX9pJyNyOgCb0gXPaQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH7STF00T7krz0z24eVp9RrkGqh8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2M4YWU3 OS02ZDdiLTQ3NzYtODBiNy00MjA0OTJjZDFhZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvYzhhZTc5 LTZkN2ItNDc3Ni04MGI3LTQyMDQ5MmNkMWFmZC8xL2Z0Sk1YVFJQdVN2UFRQYmg1 V24xR3VRYXFIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALZNcMA0EAgACMAcDBQMqD/gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC92zANBgkqhkiG9w0BAQsFAAOCAQEAnjbc9tW1Tg1h BqNkEbDJX+C1ln9n3kMgVvF9j2CmK0InIKOH3AqqreC/4WIqWcLgLObR9V5ISjY3 +izsghaMSN2weecM8TZsxSD/XYPf87yvFqInQOGejQVy4TW3GuK/1JKrj7fbi561 tpB4AwwNDbz1Us72JR3WlA3rNoGsCGCqb57GrbCqsWRRcZPXAV3j1OBiEpRm6FF4 /eIK4SfOomacMQqQmE0+fuyaIeLdlZvHWzZj17E9eDp9edwRxg8iSi3jV2m0ZFAy NcJKfD1Blwx6d++77x2C8dCbWWufZxRVVkmz1b2aBVYKiK34EmPFvmeoogj1vuXC YSL9iR1pWw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:56 2026 by rpki-client