This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer (raw, json) Hash identifier: 5HJW2fDBrfI0b3dAEa1tldwslp4baGWqm4gi4M4YaPQ= Subject key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791064E6B0BFE2C4D1C0E3C75DE318A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206093 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:64:e6:b0:bf:e2:c4:d1:c0:e3:c7:5d:e3:18:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed77eafdb387afd17574272c9374c8180370f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:30:b4:60:bc:33:16:c2:2d:8d:78:a8:13: f7:5b:e9:af:f4:3c:d2:07:96:b1:4a:c7:b1:f4:c9: 2b:47:6b:8c:97:65:79:bc:ed:6e:75:cd:d5:d7:53: 2c:a9:04:8d:73:33:52:74:43:22:d6:04:64:9f:53: 0e:17:ae:80:85:70:06:9d:00:ff:8b:e1:d1:65:7b: 38:1d:0e:44:60:f7:e2:31:1e:0d:35:36:08:c2:11: 6b:61:ab:7c:29:5e:17:73:d0:2c:29:3c:3d:c9:b2: 08:78:af:5a:20:94:01:83:b2:62:af:9a:c0:46:13: 40:99:26:8a:c1:ac:ac:69:73:c1:a9:57:f2:18:56: de:8b:a1:fb:6b:dc:ab:75:57:e3:7c:a6:0d:7d:9a: d4:e6:ae:67:83:11:a8:15:1f:84:33:7e:69:1c:8a: 6c:5a:24:a8:25:8a:b0:77:94:4d:14:7c:fb:46:a9: a5:94:a5:19:15:5f:9a:31:ba:09:a6:de:8d:01:ef: c0:db:64:a6:9f:53:c8:73:de:99:dc:c2:cc:2b:c7: d6:2f:b0:dd:78:71:26:d7:2e:a2:c4:79:97:57:1e: 8e:6f:e0:96:93:87:ef:2f:5b:20:a5:89:66:77:ec: b5:4d:55:d4:ce:ae:98:5d:97:33:57:d5:4f:07:74: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206093 Signature Algorithm: sha256WithRSAEncryption 32:48:0a:69:7f:f1:f6:88:9d:bf:7b:13:48:5d:bc:c8:1b:38: 5c:41:9e:13:c6:a6:e6:c5:62:ce:49:44:05:2b:0d:c8:86:68: 89:4d:04:fe:b6:67:8a:8b:62:42:cd:75:b9:fe:92:9e:40:21: 2f:5e:09:27:86:74:52:87:2c:f9:92:52:69:32:ec:bd:b0:24: 35:72:b5:cb:6a:ff:e9:1c:d7:55:eb:d8:d6:86:fe:d0:d2:10: 31:c7:10:1b:ee:ae:23:50:26:c4:f4:52:10:26:fd:c8:db:a2: d2:b7:6d:32:c7:e3:5a:0c:99:ef:a3:28:af:40:68:c7:a5:b0: 96:92:91:f2:77:c3:56:24:e9:c6:10:48:07:7d:22:14:d7:71: 0e:f1:83:04:bd:e0:8b:ba:ba:91:4f:21:9d:fc:e9:f7:db:21: 66:15:ec:99:de:29:34:1c:44:d9:b4:56:31:91:6b:2a:4c:8a: 08:66:75:f0:f6:9f:ba:38:62:f3:e6:d3:45:03:1a:71:d2:fd: b1:55:4c:90:92:0f:8a:01:6e:36:fe:10:e7:3d:0f:c7:a3:20: b8:c0:13:c4:ce:55:d3:bb:a7:ec:6c:c5:4e:20:51:ce:e8:93: 05:9a:35:04:27:52:79:d9:1a:82:02:88:c7:3c:61:57:30:e2: 74:59:62:fe -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EGTmsL/ixNHA48dd4ximMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQ3N2VhZmRiMzg3YWZkMTc1NzQyNzJjOTM3NGM4MTgwMzcwZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuykwtGC8MxbCLY14qBP3W+mv9DzS B5axSsex9MkrR2uMl2V5vO1udc3V11MsqQSNczNSdEMi1gRkn1MOF66AhXAGnQD/ i+HRZXs4HQ5EYPfiMR4NNTYIwhFrYat8KV4Xc9AsKTw9ybIIeK9aIJQBg7Jir5rA RhNAmSaKwaysaXPBqVfyGFbei6H7a9yrdVfjfKYNfZrU5q5ngxGoFR+EM35pHIps WiSoJYqwd5RNFHz7RqmllKUZFV+aMboJpt6NAe/A22Smn1PIc96Z3MLMK8fWL7Dd eHEm1y6ixHmXVx6Ob+CWk4fvL1sgpYlmd+y1TVXUzq6YXZczV9VPB3QVPwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH7Xfq/bOHr9F1dCcsk3TIGANw9SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2JiYzll Mi01MGY2LTQ2NWEtOWVjZC1iYzQwMTdjOTQ1OWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvYmJjOWUy LTUwZjYtNDY1YS05ZWNkLWJjNDAxN2M5NDU5Yi8xL2Z0ZC1yOXM0ZXYwWFYwSnl5 VGRNZ1lBM0QxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlDTANBgkqhkiG9w0BAQsFAAOCAQEAMkgKaX/x9oid v3sTSF28yBs4XEGeE8am5sVizklEBSsNyIZoiU0E/rZniotiQs11uf6SnkAhL14J J4Z0Uocs+ZJSaTLsvbAkNXK1y2r/6RzXVevY1ob+0NIQMccQG+6uI1AmxPRSECb9 yNui0rdtMsfjWgyZ76Mor0Box6WwlpKR8nfDViTpxhBIB30iFNdxDvGDBL3gi7q6 kU8hnfzp99shZhXsmd4pNBxE2bRWMZFrKkyKCGZ18Pafujhi8+bTRQMacdL9sVVM kJIPigFuNv4Q5z0Px6MguMATxM5V07un7GzFTiBRzuiTBZo1BCdSedkaggKIxzxh VzDidFli/g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:16 2026 by rpki-client