This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer File: sFRCxP_pwddh58VpNg6tBCQ4-QM.cer (raw, json) Hash identifier: px/VocKzMUbdjFrv0N0b9bUwNpTCbbGq1SN7TjaIyOw= Subject key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAAC07600C613D3E27B70809393595 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33808 AS: 50533 AS: 198939 AS: 209545 IP: 79.171.88.0/21 IP: 89.31.0.0/21 IP: 134.101.64.0/18 IP: 145.14.224.0/20 IP: 185.160.248.0/22 IP: 193.110.68.0/22 IP: 217.170.176.0/20 IP: 2001:67c:2a0c::/48 IP: 2a00:17f0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ac:07:60:0c:61:3d:3e:27:b7:08:09:39:35:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b05442c4ffe9c1d761e7c569360ead042438f903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:a4:79:1e:5e:22:70:66:8c:f2:90:0a:ec: 77:f3:82:4c:7e:7e:1a:31:c4:9a:53:4d:71:12:0a: 25:fa:2e:8b:d9:3a:c4:7a:a2:17:44:55:eb:0a:84: ce:3e:e0:49:c9:2d:4a:3d:e8:89:04:85:ed:5e:b1: 7b:3c:d1:27:cb:b2:52:d3:c0:0e:28:98:6d:89:f1: ec:b9:87:19:f7:57:fa:02:55:8c:87:c6:bb:2f:4b: 95:33:f4:64:e1:6d:65:17:80:0c:5b:60:57:3e:d4: 65:69:44:f1:28:90:89:85:d2:53:1a:30:6a:5a:e8: f6:db:b4:4f:b5:1d:fe:ce:73:68:af:26:e9:cf:01: e4:c8:13:c9:df:fc:96:74:ff:6b:15:fd:d1:3e:e1: 52:16:6f:11:15:5c:c0:c9:51:a2:bb:d3:c0:6d:85: dd:87:fd:cb:a6:f4:49:7c:54:b8:1f:32:d4:ee:76: bc:8b:c3:d1:ae:64:40:98:a9:5d:ca:77:bb:e9:ae: 90:fd:60:da:e8:ee:b3:f6:77:01:da:22:66:bf:05: ce:e0:3f:3d:16:b6:3e:94:18:b5:93:5b:21:7c:c6: 77:73:f2:74:68:65:d6:25:0e:09:35:07:33:98:5b: a4:58:9f:41:8c:3d:7e:19:da:48:9a:cb:3e:67:fd: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.88.0/21 89.31.0.0/21 134.101.64.0/18 145.14.224.0/20 185.160.248.0/22 193.110.68.0/22 217.170.176.0/20 IPv6: 2001:67c:2a0c::/48 2a00:17f0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33808 50533 198939 209545 Signature Algorithm: sha256WithRSAEncryption 24:de:57:9e:39:4d:c2:a9:43:90:c8:5f:90:76:bd:cc:4a:14: 51:9e:99:6d:1f:ca:2c:a2:d1:e8:27:63:36:f3:38:7f:23:05: 9c:0a:50:05:5b:3c:d4:d4:50:60:4a:d7:35:bd:45:1f:dc:c9: de:01:17:c7:ae:dc:6e:9e:a7:87:1b:44:a4:2c:03:cb:fb:d3: 07:ce:8f:81:39:8b:d9:b7:11:e7:27:39:44:f9:23:e7:5e:4c: ee:b2:39:2b:ad:b1:c6:3d:d0:fb:f1:35:5e:3f:36:48:f8:cc: f2:4e:73:f0:8f:59:a9:3d:fb:9f:a8:51:19:ba:cb:73:2b:44: 7b:1c:bd:7c:c5:54:6e:2f:8e:47:48:36:62:86:b5:0d:1b:30: 45:10:4b:48:2d:c7:5d:71:4b:ca:ea:cd:be:8f:e9:e8:17:88: f4:b5:08:17:62:96:09:82:e9:7a:87:b9:b1:68:8d:ed:a9:ed: db:90:47:02:c1:cd:1f:57:5f:97:07:c2:da:4c:54:04:55:fc: 7f:a5:4e:5c:c8:2b:cd:89:a4:e4:4b:ee:ae:5b:ce:ab:36:1a: fd:4a:e1:0d:fd:b1:53:17:5d:81:92:e2:34:d3:bf:c5:9e:18: a1:b6:6e:14:79:e8:64:45:72:58:df:df:bd:27:e5:e4:4a:be: dd:a1:e6:e2 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt9yqwHYAxhPT4ntwgJOTWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDU0NDJjNGZmZTljMWQ3NjFlN2M1NjkzNjBlYWQwNDI0MzhmOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRCkeR5eInBmjPKQCux384JMfn4a McSaU01xEgol+i6L2TrEeqIXRFXrCoTOPuBJyS1KPeiJBIXtXrF7PNEny7JS08AO KJhtifHsuYcZ91f6AlWMh8a7L0uVM/Rk4W1lF4AMW2BXPtRlaUTxKJCJhdJTGjBq Wuj227RPtR3+znNorybpzwHkyBPJ3/yWdP9rFf3RPuFSFm8RFVzAyVGiu9PAbYXd h/3LpvRJfFS4HzLU7na8i8PRrmRAmKldyne76a6Q/WDa6O6z9ncB2iJmvwXO4D89 FrY+lBi1k1shfMZ3c/J0aGXWJQ4JNQczmFukWJ9BjD1+GdpImss+Z/3t4wIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFLBUQsT/6cHXYefFaTYOrQQkOPkDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzRiNzdl Ny0zNDdjLTQ5ZmEtODA4Yi02ZWQzMzFmMzFlMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNGI3N2U3 LTM0N2MtNDlmYS04MDhiLTZlZDMzMWYzMWUwOS8xL3NGUkN4UF9wd2RkaDU4VnBO ZzZ0QkNRNC1RTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAwBAIAATAqAwQDT6tYAwQDWR8AAwQGhmVAAwQEkQ7gAwQCuaD4 AwQCwW5EAwQE2aqwMBYEAgACMBADBwAgAQZ8KgwDBQMqABfwMCkGCCsGAQUFBwEI AQH/BBowGKAWMBQCAwCEEAIDAMVlAgMDCRsCAwMyiTANBgkqhkiG9w0BAQsFAAOC AQEAJN5XnjlNwqlDkMhfkHa9zEoUUZ6ZbR/KLKLR6CdjNvM4fyMFnApQBVs81NRQ YErXNb1FH9zJ3gEXx67cbp6nhxtEpCwDy/vTB86PgTmL2bcR5yc5RPkj515M7rI5 K62xxj3Q+/E1Xj82SPjM8k5z8I9ZqT37n6hRGbrLcytEexy9fMVUbi+OR0g2Yoa1 DRswRRBLSC3HXXFLyurNvo/p6BeI9LUIF2KWCYLpeoe5sWiN7ant25BHAsHNH1df lwfC2kxUBFX8f6VOXMgrzYmk5EvurlvOqzYa/UrhDf2xUxddgZLiNNO/xZ4YobZu FHnoZEVyWN/fvSfl5Eq+3aHm4g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:36 2026 by rpki-client