This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer (raw, json) Hash identifier: GGo3VDEVHrddat85gj9tArPdILEhQ+HldIskzgeXhXw= Subject key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835055AA697FFE56B0A208B585D76DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.239.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:05:5a:a6:97:ff:e5:6b:0a:20:8b:58:5d:76:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:76:5e:e8:3a:9b:8f:c4:4f:92:ee:c1:6a: 4c:14:fe:9c:a2:9c:46:4b:21:eb:c0:c4:fe:1c:00: a3:36:43:9c:1b:06:ab:4b:58:2b:d4:ad:ab:cb:91: 44:ba:0e:a9:28:17:4c:6e:0e:a5:3f:a1:a3:aa:74: a0:70:c2:e4:d1:58:cb:56:2b:e1:46:27:ea:01:ab: 57:a2:37:ea:97:25:34:90:34:fa:ae:6a:ae:d4:63: 79:d3:35:36:41:1a:8e:cb:78:cb:f1:bf:cf:26:09: 71:8c:4a:3b:86:67:87:94:8a:f7:37:01:81:a0:29: 72:15:5d:c6:eb:87:8e:84:e7:d9:b8:93:c6:39:db: 41:02:71:15:f7:36:da:d7:86:97:59:04:d7:08:db: 8e:ee:30:19:97:0d:fb:8b:80:e6:97:c5:48:da:9d: 50:18:b9:bf:3e:5d:42:fd:5e:6b:59:27:ff:74:35: 78:ae:1d:2d:ea:d9:ea:1f:92:1b:f8:87:c1:cb:0a: 05:4d:2c:1b:e3:b0:cd:53:b7:67:25:08:f0:6a:16: d9:fc:f5:23:3a:65:45:6b:e5:2e:a9:6f:17:1a:78: 64:74:5f:73:b5:ba:e8:59:08:b4:af:92:cd:09:0f: b8:4f:3d:3b:ef:3f:07:db:f3:ae:00:41:93:d6:09: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.21.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:35:48:2a:cb:e1:ff:bf:d6:49:0c:0b:84:ea:99:a3:57:d7: cf:84:cf:4b:7a:75:1c:1c:a7:0a:12:98:ec:5d:e0:1f:87:87: 3d:1c:3b:72:b4:02:c0:24:e2:cd:95:e5:aa:a8:e3:bc:a7:2f: a8:ff:e1:83:29:f8:ae:35:a4:d7:ca:f6:c9:de:16:3e:91:78: 45:72:d4:97:95:73:d3:8f:e7:a4:77:5d:4b:ab:80:f6:e2:d0: ef:51:93:ea:3c:18:f0:f8:34:f7:4f:ae:e1:11:ca:1f:54:43: 82:2a:c6:86:4d:81:6c:14:53:84:5d:ce:46:2a:8f:13:c1:51: f6:35:9f:2a:d2:83:c1:1f:0f:11:fc:a0:6c:90:a2:82:26:65: 58:3b:c9:f6:e1:e8:fb:4d:bd:6a:b0:8b:9b:e3:53:61:ae:e2: ac:9e:0a:d6:57:03:c6:6a:74:db:3d:87:05:ab:ca:b9:55:0f: 32:fd:31:a3:14:e2:a6:23:06:00:40:37:d0:87:4e:57:80:53: a1:6f:79:ff:11:e0:27:3a:66:3a:2c:bd:39:3f:bc:4c:a5:f5: 5b:b5:85:0f:ac:4d:bc:fa:0f:eb:7f:f9:94:ab:38:a0:be:de: 6c:fd:94:e8:7c:98:33:37:d2:7d:57:1c:8c:1d:47:16:40:3c: c3:9c:d4:a2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NQVappf/5WsKIItYXXbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmUxNjEwMWU0MjFkMjFjZGI1ZTViMDVhMmUyODlkZmI3NzNmNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZ2Xug6m4/ET5LuwWpMFP6copxG SyHrwMT+HACjNkOcGwarS1gr1K2ry5FEug6pKBdMbg6lP6GjqnSgcMLk0VjLVivh RifqAatXojfqlyU0kDT6rmqu1GN50zU2QRqOy3jL8b/PJglxjEo7hmeHlIr3NwGB oClyFV3G64eOhOfZuJPGOdtBAnEV9zba14aXWQTXCNuO7jAZlw37i4Dml8VI2p1Q GLm/Pl1C/V5rWSf/dDV4rh0t6tnqH5Ib+IfBywoFTSwb47DNU7dnJQjwahbZ/PUj OmVFa+UuqW8XGnhkdF9ztbroWQi0r5LNCQ+4Tz077z8H2/OuAEGT1gn/aQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ/hYQHkIdIc215bBaLiid+3c/TJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzE1NmVl Yi04MDE5LTRkNjAtOGVhZC1lOTcxMWY1NzZiNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMTU2ZWVi LTgwMTktNGQ2MC04ZWFkLWU5NzExZjU3NmI0ZS8xL24tRmhBZVFoMGh6Ylhsc0Zv dUtKMzdkejlNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+8VMA0GCSqGSIb3DQEBCwUAA4IBAQAcNUgq y+H/v9ZJDAuE6pmjV9fPhM9LenUcHKcKEpjsXeAfh4c9HDtytALAJOLNleWqqOO8 py+o/+GDKfiuNaTXyvbJ3hY+kXhFctSXlXPTj+ekd11Lq4D24tDvUZPqPBjw+DT3 T67hEcofVEOCKsaGTYFsFFOEXc5GKo8TwVH2NZ8q0oPBHw8R/KBskKKCJmVYO8n2 4ej7Tb1qsIub41NhruKsngrWVwPGanTbPYcFq8q5VQ8y/TGjFOKmIwYAQDfQh05X gFOhb3n/EeAnOmY6LL05P7xMpfVbtYUPrE28+g/rf/mUqzigvt5s/ZTofJgzN9J9 VxyMHUcWQDzDnNSi -----END CERTIFICATE-----Generated at Mon Jan 12 01:59:27 2026 by rpki-client