This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer (raw, json) Hash identifier: r/xFOinmku2qJqfirWqRpIrP94fbIJ4PaWEbKj/rHL4= Subject key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC871212EA66CD78899A0511C29DCB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201226 IP: 91.239.156.0/24 IP: 185.13.12.0/22 IP: 2a03:94c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:71:21:2e:a6:6c:d7:88:99:a0:51:1c:29:dc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:34:7b:56:61:c3:9c:44:a8:7d:7a:9a:30: 59:62:a6:cc:c7:0f:a1:d6:58:79:e4:06:de:17:2d: 6c:4b:b2:00:14:78:ed:d0:41:0e:e2:9a:4e:0f:3a: c7:f7:df:93:0a:cf:27:3c:7c:ce:70:80:b4:5a:a7: 60:d1:11:fc:b8:8c:70:40:91:ac:5a:5f:4b:48:8d: a8:e0:df:be:13:be:ce:d9:67:b9:af:b2:b7:65:ee: 92:b8:ff:13:00:f7:07:1a:6b:46:f9:b3:06:b2:d4: 2d:7e:2c:6b:9c:54:d4:a3:86:70:86:bb:7d:54:28: 69:85:db:01:a3:6d:02:32:e6:9a:46:00:dc:ee:97: 53:e1:db:cc:d0:18:99:04:c2:ef:de:a0:fb:a0:a8: 6b:0b:ad:82:e2:1a:73:76:3e:2b:f4:0c:11:c4:7c: b5:2a:d4:bb:a5:fe:ca:64:a3:5d:4a:4d:90:2d:db: c1:3f:a1:9f:ac:71:15:58:31:c5:6d:c3:f6:75:9d: 38:e2:36:e9:10:40:b2:eb:de:4d:8d:66:14:76:da: 40:2d:c0:63:73:b2:85:d2:ad:e1:4e:d9:13:ef:72: 22:ec:ed:c7:1b:91:46:d8:a7:d1:03:4b:a6:9c:7a: aa:a2:eb:3c:58:c3:29:70:87:97:3d:b3:05:b6:b7: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.156.0/24 185.13.12.0/22 IPv6: 2a03:94c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201226 Signature Algorithm: sha256WithRSAEncryption 1e:2d:eb:68:bd:db:70:dd:b3:9f:8e:1b:a1:e7:35:3b:a6:d6: 3b:57:ec:cb:11:02:51:df:e2:54:da:5d:db:78:5b:75:f2:59: 7a:52:83:d2:bc:94:b7:b0:ff:09:4b:14:27:5f:21:58:fa:d6: 56:ff:ca:77:79:62:72:13:1e:37:7c:03:3c:ec:48:32:c9:e4: 1d:29:fa:00:f4:b6:82:cf:a3:87:28:c4:81:e1:8b:36:c7:d7: 2c:85:00:dc:03:bf:fd:93:6b:3e:cd:8d:f1:cb:6a:70:8c:a2: 28:13:f6:9d:e7:31:20:11:f6:aa:26:fd:b0:58:65:00:d3:06: 97:1a:d3:82:23:b2:c0:2c:cb:4c:92:6d:0a:96:e7:8a:f4:4a: 5d:95:2c:ef:33:be:cb:6d:26:63:2a:09:5f:76:d9:fd:ac:6d: 52:a3:8f:bc:2e:1d:6c:de:5d:cd:09:5b:91:02:05:f3:da:dc: 0e:1d:7f:f7:07:b9:37:50:a6:d3:59:d4:f2:25:05:47:b1:93: 67:48:48:23:83:5f:07:14:ba:f4:61:68:0b:0c:e9:a3:c5:2d: c6:e9:5e:5a:8f:f3:8e:e8:f0:03:3d:f1:1e:d8:91:d1:9b:b5: a6:9a:17:61:6f:83:9c:93:9e:ee:f7:fb:65:64:53:de:02:b6: bc:10:ec:81 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yHEhLqZs14iZoFEcKdyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjAzYTFmOGMzMzRmZGJmNGI3OGRlZjBjNTkyZmYwNDkwZGRmNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE40e1Zhw5xEqH16mjBZYqbMxw+h 1lh55AbeFy1sS7IAFHjt0EEO4ppODzrH99+TCs8nPHzOcIC0Wqdg0RH8uIxwQJGs Wl9LSI2o4N++E77O2We5r7K3Ze6SuP8TAPcHGmtG+bMGstQtfixrnFTUo4Zwhrt9 VChphdsBo20CMuaaRgDc7pdT4dvM0BiZBMLv3qD7oKhrC62C4hpzdj4r9AwRxHy1 KtS7pf7KZKNdSk2QLdvBP6GfrHEVWDHFbcP2dZ044jbpEECy695NjWYUdtpALcBj c7KF0q3hTtkT73Ii7O3HG5FG2KfRA0umnHqqous8WMMpcIeXPbMFtrdWBwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFH8DofjDNP2/S3je8MWS/wSQ3fSwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzNmZTFh MC1jNmZkLTRiYzQtYWFlMS05ZWUwMDY5NDJiNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvM2ZlMWEw LWM2ZmQtNGJjNC1hYWUxLTllZTAwNjk0MmI0Yi8xL2Z3T2gtTU0wX2I5TGVON3d4 WkxfQkpEZDlMQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW++cAwQCuQ0MMA0EAgACMAcDBQAqA5TAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSCjANBgkqhkiG9w0BAQsFAAOCAQEAHi3r aL3bcN2zn44boec1O6bWO1fsyxECUd/iVNpd23hbdfJZelKD0ryUt7D/CUsUJ18h WPrWVv/Kd3lichMeN3wDPOxIMsnkHSn6APS2gs+jhyjEgeGLNsfXLIUA3AO//ZNr Ps2N8ctqcIyiKBP2necxIBH2qib9sFhlANMGlxrTgiOywCzLTJJtCpbnivRKXZUs 7zO+y20mYyoJX3bZ/axtUqOPvC4dbN5dzQlbkQIF89rcDh1/9we5N1Cm01nU8iUF R7GTZ0hII4NfBxS69GFoCwzpo8UtxuleWo/zjujwAz3xHtiR0Zu1ppoXYW+DnJOe 7vf7ZWRT3gK2vBDsgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:40 2026 by rpki-client