This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer (raw, json) Hash identifier: xsViPdH9GyqMlAf+oOfAwQFnoGQ/lzmw35tcJUUS76I= Subject key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4D97248161E4FB06AE577A28B23EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204754 IP: 185.241.184.0/22 IP: 2a0c:a880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d9:72:48:16:1e:4f:b0:6a:e5:77:a2:8b:23:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:b0:29:e3:1d:ec:9e:a5:e0:e3:61:08:d1: f4:d6:3f:a1:93:ad:cd:dc:8b:d0:f4:d1:4f:a6:8c: 37:71:f3:a2:7c:b8:ae:e1:85:ff:d5:43:b6:23:35: 73:1b:f9:3a:fa:32:71:dd:2f:d7:0c:9d:d4:d7:f7: 75:47:d0:ce:88:09:23:91:79:8a:d9:34:5d:81:43: b7:ef:9a:e3:69:16:71:36:29:b5:e8:55:10:03:51: 9d:50:ca:c2:ff:a4:36:74:2b:77:ec:38:4f:00:12: 1e:01:ab:34:dd:39:c5:f1:fd:d3:83:81:c4:18:d9: 12:f0:03:f1:a7:fa:aa:05:e9:d7:5d:aa:56:de:bf: a0:5f:a9:3b:03:4a:4f:34:43:aa:70:b9:e8:e4:31: f7:96:5c:46:63:da:7b:2c:6b:6f:f2:7a:77:63:b6: 07:44:bb:7e:d4:05:db:d5:de:f6:44:be:0e:d6:71: 71:57:eb:35:7a:13:26:e7:92:a3:0b:a8:1a:16:02: a2:99:00:47:ac:cc:1d:14:73:ea:30:be:d4:19:e4: c2:f1:d6:5c:6d:64:49:62:d3:45:ad:77:96:14:9a: 6e:c1:2f:fa:d8:96:b7:3d:db:36:a0:bb:cf:95:5a: 26:53:42:2a:17:57:34:2d:1a:0b:3a:50:da:6a:fc: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.184.0/22 IPv6: 2a0c:a880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204754 Signature Algorithm: sha256WithRSAEncryption a5:05:bf:c6:85:8f:df:df:58:f9:3e:be:5a:81:c6:1f:f8:24: b0:ab:38:64:83:50:11:2c:5a:49:bd:e5:d7:8d:fd:78:e2:c9: e3:2a:f1:3b:10:60:2a:1e:de:fb:62:1f:a1:de:69:3c:7f:e3: 2b:8a:01:37:6c:75:c3:98:45:84:9c:38:d1:8b:3f:c6:1f:51: eb:3e:9e:1a:c1:d4:09:f7:0f:bd:e0:3b:cf:cc:85:f2:0a:1e: ad:a6:de:99:c5:58:c0:22:e1:84:be:bc:e3:f9:13:2e:b8:53: d2:72:e7:88:c3:ec:c8:ae:24:dc:e6:dc:5c:f5:b3:fc:01:ab: 4c:83:66:81:34:c8:22:ac:79:69:91:bb:68:66:40:79:f7:b2: c7:fa:6a:52:b1:32:2b:25:3b:a3:2d:78:0a:4f:ea:24:fe:cd: f2:e3:0a:42:5a:25:bc:76:61:a8:81:47:f7:25:3b:48:49:b1: c3:24:8a:12:70:8b:16:51:ef:ec:38:cb:7e:e8:e4:6b:6f:16: 3a:41:83:b6:0f:62:e0:0e:f8:12:34:0a:1c:e8:ae:19:17:a5: 91:95:8e:d9:18:bb:ae:4b:9f:e7:77:de:be:92:2d:00:dd:18: 2e:e1:eb:98:21:eb:4b:32:1a:9b:84:20:bf:97:94:24:6b:fb: 32:28:35:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pNlySBYeT7Bq5XeiiyPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI5MmIzOGRmMTk3Y2EyY2JhZTMwMjY5MzIyNmIyM2YzMmEzZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXiwKeMd7J6l4ONhCNH01j+hk63N 3IvQ9NFPpow3cfOifLiu4YX/1UO2IzVzG/k6+jJx3S/XDJ3U1/d1R9DOiAkjkXmK 2TRdgUO375rjaRZxNim16FUQA1GdUMrC/6Q2dCt37DhPABIeAas03TnF8f3Tg4HE GNkS8APxp/qqBenXXapW3r+gX6k7A0pPNEOqcLno5DH3llxGY9p7LGtv8np3Y7YH RLt+1AXb1d72RL4O1nFxV+s1ehMm55KjC6gaFgKimQBHrMwdFHPqML7UGeTC8dZc bWRJYtNFrXeWFJpuwS/62Ja3Pds2oLvPlVomU0IqF1c0LRoLOlDaavyUMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH65KzjfGXyiy64wJpMiayPzKj92MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2FmNGQ2 My05ZjU4LTRiYmQtOGQyNS05MWQxYTA2ODYzYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYWY0ZDYz LTlmNTgtNGJiZC04ZDI1LTkxZDFhMDY4NjNhZS8xL2Zya3JPTjhaZktMTHJqQW1r eUpySV9NcVAzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufG4MA0EAgACMAcDBQMqDKiAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMf0jANBgkqhkiG9w0BAQsFAAOCAQEApQW/xoWP399Y +T6+WoHGH/gksKs4ZINQESxaSb3l1439eOLJ4yrxOxBgKh7e+2Ifod5pPH/jK4oB N2x1w5hFhJw40Ys/xh9R6z6eGsHUCfcPveA7z8yF8goerabemcVYwCLhhL684/kT LrhT0nLniMPsyK4k3ObcXPWz/AGrTINmgTTIIqx5aZG7aGZAefeyx/pqUrEyKyU7 oy14Ck/qJP7N8uMKQlolvHZhqIFH9yU7SEmxwySKEnCLFlHv7DjLfujka28WOkGD tg9i4A74EjQKHOiuGRelkZWO2Ri7rkuf53fevpItAN0YLuHrmCHrSzIam4Qgv5eU JGv7Mig1jA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:39:49 2026 by rpki-client