This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer File: ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer (raw, json) Hash identifier: Pg8gcDOxt6kjdF0L2w7e56iCd1tkEmdv2fDvw/K5AFU= Subject key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910FFACBA3FE4F35CCD4D66E96D8876 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.30.112.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ff:ac:ba:3f:e4:f3:5c:cd:4d:66:e9:6d:88:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7edbf83aff434512c503712f22291602f55bff48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:2c:45:df:3b:68:e2:f9:a6:88:0f:80:7d: e3:68:44:af:bc:92:5a:bc:b0:d3:47:41:85:16:5d: c9:03:10:8f:31:e1:a4:c3:68:35:a6:08:c7:56:04: ee:e0:df:2b:8a:ce:9b:2c:e3:4c:4b:70:f1:c9:46: bd:80:64:d6:27:b0:7e:0e:28:1d:f2:7e:32:e2:53: 36:df:1e:2b:bd:f1:6c:1b:59:90:7b:0c:96:5d:c6: c4:89:16:0e:8d:ea:7b:85:28:cd:c9:dc:b1:a5:3e: 36:85:86:7a:c7:61:c6:92:45:c8:84:e6:11:fe:d0: 5b:41:50:52:90:4f:41:37:2c:03:10:4b:c7:54:b9: 17:a8:43:25:10:b4:fe:85:66:8b:d3:01:83:79:0b: 21:29:45:99:f6:12:c6:b5:56:0e:27:d1:42:79:0d: e2:89:a6:08:cb:fc:d6:ae:f6:a6:c2:4e:3d:87:e5: db:39:68:87:f0:a9:62:fb:c7:0d:30:71:12:82:5e: e8:c8:13:7c:9d:0f:b6:f5:70:0c:4a:8b:32:87:f6: 41:d6:36:23:e9:39:46:63:78:3f:7a:2c:0b:77:d9: 21:31:1c:9c:33:e2:a4:df:0f:e1:16:4e:5d:9f:6e: c9:d7:0c:7f:15:33:8f:61:81:ee:a3:76:80:f6:3c: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.112.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cd:0a:ab:5f:57:20:f5:89:f7:db:59:56:8f:69:29:ac:cb: eb:8e:3b:2b:65:e3:4a:34:e1:dc:dd:2d:d2:ef:75:ec:20:cc: 8e:60:9d:93:74:a8:41:14:8a:c4:5c:db:ef:c5:25:8d:86:22: b6:1e:f6:3c:0e:59:85:08:7d:59:47:d5:e3:7b:71:4d:13:c5: 1d:ee:90:1d:0b:fb:c2:70:bf:5a:9b:82:6d:a1:20:fa:cd:4b: 18:d2:83:e6:55:cc:57:c1:c0:cb:27:3b:f0:0d:54:4c:6c:ea: 37:d7:e8:ef:20:22:d2:6b:24:63:90:cd:4d:cc:a6:f4:4e:1d: 8a:96:f7:e0:56:65:c4:59:09:e5:07:70:82:6d:e3:d1:1b:e3: 80:3d:f7:ee:10:05:96:3f:41:f1:19:f4:69:f3:48:cd:89:02: b8:3f:8f:ed:b2:97:19:14:ee:b1:64:10:06:5e:fd:07:95:58: 92:89:5f:82:f9:54:e9:09:01:42:f7:70:fa:1d:f8:21:50:a3: d0:cf:a5:d7:18:b9:83:00:3a:f6:87:9c:4a:9e:c0:c5:32:d7: 25:a9:1a:87:3d:41:7f:71:f8:04:8d:70:6a:3a:2d:df:83:bb: b2:9c:42:8b:e5:72:2e:5b:fb:50:80:41:f5:35:cb:9b:7d:59: 5c:d9:02:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EP+suj/k81zNTWbpbYh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWRiZjgzYWZmNDM0NTEyYzUwMzcxMmYyMjI5MTYwMmY1NWJmZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHwsRd87aOL5pogPgH3jaESvvJJa vLDTR0GFFl3JAxCPMeGkw2g1pgjHVgTu4N8ris6bLONMS3DxyUa9gGTWJ7B+Digd 8n4y4lM23x4rvfFsG1mQewyWXcbEiRYOjep7hSjNydyxpT42hYZ6x2HGkkXIhOYR /tBbQVBSkE9BNywDEEvHVLkXqEMlELT+hWaL0wGDeQshKUWZ9hLGtVYOJ9FCeQ3i iaYIy/zWrvamwk49h+XbOWiH8Kli+8cNMHESgl7oyBN8nQ+29XAMSosyh/ZB1jYj 6TlGY3g/eiwLd9khMRycM+Kk3w/hFk5dn27J1wx/FTOPYYHuo3aA9jz4uwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH7b+Dr/Q0USxQNxLyIpFgL1W/9IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzM2MTVi MS03M2E5LTRjM2UtYWFkMS0wMzM1ZDFhNzQ4ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMzYxNWIx LTczYTktNGMzZS1hYWQxLTAzMzVkMWE3NDhmYy8xL2Z0djRPdjlEUlJMRkEzRXZJ aWtXQXZWYl8wZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwR5wMA0GCSqGSIb3DQEBCwUAA4IBAQA6zQqr X1cg9Yn321lWj2kprMvrjjsrZeNKNOHc3S3S73XsIMyOYJ2TdKhBFIrEXNvvxSWN hiK2HvY8DlmFCH1ZR9Xje3FNE8Ud7pAdC/vCcL9am4JtoSD6zUsY0oPmVcxXwcDL JzvwDVRMbOo31+jvICLSayRjkM1NzKb0Th2KlvfgVmXEWQnlB3CCbePRG+OAPffu EAWWP0HxGfRp80jNiQK4P4/tspcZFO6xZBAGXv0HlViSiV+C+VTpCQFC93D6Hfgh UKPQz6XXGLmDADr2h5xKnsDFMtclqRqHPUF/cfgEjXBqOi3fg7uynEKL5XIuW/tQ gEH1NcubfVlc2QJD -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:30 2026 by rpki-client