This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer File: fvoucF0jP_80WpErLyObWs43K7k.cer (raw, json) Hash identifier: jSRQ3gjS/ftO9gP+/C1kWD2/ugURu8bubY5w4i7kupc= Subject key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2942FD95C33E14F45AF96628FFD7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9022 IP: 80.208.232.0/21 IP: 109.73.48.0/20 IP: 185.10.192.0/22 IP: 188.94.96.0/21 IP: 194.0.247.0/24 IP: 217.151.144.0/20 IP: 2a00:e58::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:94:2f:d9:5c:33:e1:4f:45:af:96:62:8f:fd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7efa2e705d233fff345a912b2f239b5ace372bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:a0:32:dc:33:c1:aa:04:2a:34:22:5d:32: e4:ea:91:3a:c0:42:e0:57:02:95:26:5a:58:1b:d2: 73:d3:7c:9d:7c:e4:a7:3f:8b:fe:38:9a:f2:d9:00: 56:cc:80:05:1e:86:10:92:47:63:5f:ea:10:6b:a7: ba:4d:dc:32:3f:82:41:88:35:a4:58:d5:3f:b7:89: 2b:8e:24:d2:ac:e3:9b:d7:7f:33:42:bd:c1:8f:d7: d9:47:f0:98:85:30:41:de:75:27:9b:4e:57:7d:20: ae:8c:2e:b0:d1:30:ae:fa:bc:14:27:d8:bd:6e:a3: b6:c2:33:9b:31:9c:be:97:54:7b:b1:4f:63:ba:d8: 57:b1:d0:74:5a:81:cc:82:1d:f9:cb:fc:d7:23:51: 76:b6:f4:82:9f:27:4f:06:cd:94:f4:fb:c8:2b:70: 29:73:0d:61:53:f4:e0:ec:78:41:e6:e7:82:f0:aa: 88:2c:e0:33:c8:52:a9:dd:06:ee:8f:d2:38:d7:36: 6f:c6:d2:5b:4e:e9:1b:03:c2:08:d0:2e:c1:6f:ff: d6:da:f4:92:46:99:75:57:ec:ef:97:44:66:75:e0: f5:66:58:30:e8:e5:4c:a6:39:04:f8:e8:34:cd:b4: 9b:45:e9:9b:20:4e:55:1a:ca:bb:a4:65:71:78:5d: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.208.232.0/21 109.73.48.0/20 185.10.192.0/22 188.94.96.0/21 194.0.247.0/24 217.151.144.0/20 IPv6: 2a00:e58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9022 Signature Algorithm: sha256WithRSAEncryption 12:cb:80:98:bc:dc:67:5f:30:73:d8:ef:17:48:29:52:89:4f: 40:9b:eb:f6:18:6d:b8:21:af:a5:86:e8:74:c7:f0:b6:92:df: 8a:b4:af:1f:6f:68:02:92:38:0e:e3:0f:75:aa:b7:87:fb:21: 98:f5:6a:29:8a:81:91:99:74:c3:73:de:f9:0a:42:b0:d2:a6: 02:da:57:cb:46:7e:fd:4d:e9:16:03:98:7a:94:51:6e:e3:c2: ae:9c:f0:1d:09:c5:9f:43:50:84:9d:17:4a:06:42:1e:4e:8c: 40:1d:67:50:ba:4b:98:23:86:d4:f8:21:29:1f:90:77:13:60: 7d:ce:2b:c6:63:ec:af:7e:a6:3e:64:2a:00:05:d6:e8:3f:7a: 3c:6c:2f:ed:52:98:16:90:90:0e:8a:d6:fc:a6:2f:ab:29:6d: b2:8b:e9:a2:c3:d0:f7:7e:13:1b:5e:76:4a:fb:17:df:2f:00: dc:64:6f:bf:b9:80:fd:e9:95:c3:19:38:6f:d6:5f:33:5e:5e: ca:ee:b7:13:4a:b3:ea:49:57:93:f7:c4:af:d4:66:94:01:bd: 50:e4:1c:06:ce:48:ba:54:64:f9:ab:88:ff:b7:22:7c:7b:bf: 63:bd:6e:ca:f9:2d:a3:1b:73:e1:c9:e7:8c:b7:00:ad:5d:50: 9b:e8:b2:5a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4opQv2Vwz4U9Fr5Zij/1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWZhMmU3MDVkMjMzZmZmMzQ1YTkxMmIyZjIzOWI1YWNlMzcyYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPugMtwzwaoEKjQiXTLk6pE6wELg VwKVJlpYG9Jz03ydfOSnP4v+OJry2QBWzIAFHoYQkkdjX+oQa6e6TdwyP4JBiDWk WNU/t4krjiTSrOOb138zQr3Bj9fZR/CYhTBB3nUnm05XfSCujC6w0TCu+rwUJ9i9 bqO2wjObMZy+l1R7sU9juthXsdB0WoHMgh35y/zXI1F2tvSCnydPBs2U9PvIK3Ap cw1hU/Tg7HhB5ueC8KqILOAzyFKp3Qbuj9I41zZvxtJbTukbA8II0C7Bb//W2vSS Rpl1V+zvl0RmdeD1Zlgw6OVMpjkE+Og0zbSbRembIE5VGsq7pGVxeF3DhQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFH76LnBdIz//NFqRKy8jm1rONyu5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzlmNmJh NC0xYWQ3LTRmZTMtYjIxMS03NzgyN2ZlMTU1NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvOWY2YmE0 LTFhZDctNGZlMy1iMjExLTc3ODI3ZmUxNTU1Yi8xL2Z2b3VjRjBqUF84MFdwRXJM eU9iV3M0M0s3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDUNDoAwQEbUkwAwQCuQrAAwQDvF5gAwQAwgD3 AwQE2ZeQMA0EAgACMAcDBQAqAA5YMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiM+ MA0GCSqGSIb3DQEBCwUAA4IBAQASy4CYvNxnXzBz2O8XSClSiU9Am+v2GG24Ia+l huh0x/C2kt+KtK8fb2gCkjgO4w91qreH+yGY9WopioGRmXTDc975CkKw0qYC2lfL Rn79TekWA5h6lFFu48KunPAdCcWfQ1CEnRdKBkIeToxAHWdQukuYI4bU+CEpH5B3 E2B9zivGY+yvfqY+ZCoABdboP3o8bC/tUpgWkJAOitb8pi+rKW2yi+miw9D3fhMb XnZK+xffLwDcZG+/uYD96ZXDGThv1l8zXl7K7rcTSrPqSVeT98Sv1GaUAb1Q5BwG zki6VGT5q4j/tyJ8e79jvW7K+S2jG3PhyeeMtwCtXVCb6LJa -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:31 2026 by rpki-client