This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer (raw, json) Hash identifier: BBSCO9QOLFQBBviu++S5mi3a1/5aBonXNHir8L6UprA= Subject key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B362F8CF85261F3EBEB5908285A749E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208391 IP: 2001:678:aec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2f:8c:f8:52:61:f3:eb:eb:59:08:28:5a:74:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ba:60:52:49:9a:c4:ef:19:cd:8e:d7:59:f3: 63:03:78:65:b2:fe:b4:65:48:22:e0:0a:d3:cd:46: 08:e2:92:7b:59:a3:fb:62:82:86:5c:ab:f7:af:00: 69:4f:cf:b1:85:1c:7f:84:48:4b:b8:74:bd:00:fb: b6:dc:2f:52:10:89:a3:cf:3f:ea:f4:55:b3:70:0f: 62:b0:27:cd:bc:05:dc:66:bc:41:f7:34:3d:3e:f0: 56:92:20:87:f8:52:0d:f3:4f:46:91:5b:50:87:45: c8:40:e2:aa:21:17:85:28:c0:af:b5:29:a0:24:b7: b3:51:1a:c4:30:55:e9:68:66:38:f5:a8:71:06:d8: da:c7:61:4e:93:a7:78:d4:44:5c:1e:96:93:60:d7: c3:64:b6:2e:df:3e:f6:ab:96:86:3a:39:0e:a5:22: b1:0f:06:fe:13:8c:3a:71:0d:43:8a:98:71:9e:77: 6e:06:7e:63:4c:ff:ff:c9:83:a1:98:30:8f:f6:55: 28:62:4e:28:9c:c4:59:fc:ba:e5:e8:fb:c3:e4:5b: 79:74:0c:ef:a6:51:f0:c3:ad:95:06:49:a5:85:bc: 1c:74:7b:10:d7:b4:c7:01:cc:5c:e0:dc:a1:26:5e: 15:f5:1c:64:41:b2:ee:ac:e0:1a:d2:7c:63:97:5a: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:aec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208391 Signature Algorithm: sha256WithRSAEncryption 3b:0d:85:a1:cf:76:98:22:ee:27:fa:89:d6:ec:00:3d:b5:5c: 5a:a7:f0:fc:4e:5f:4b:9e:fe:93:3d:6a:42:4f:c3:00:60:85: 27:66:35:fc:31:a0:38:fc:de:fb:ce:46:54:49:f4:82:0c:ca: 38:35:79:10:42:ca:d2:a0:d7:58:29:a7:90:5b:e0:5d:68:b7: 6b:60:ae:fd:3c:12:15:3d:07:37:7c:a6:ac:b2:55:96:dd:cc: 05:54:bd:7f:6d:9d:3b:fb:eb:e1:06:cb:4a:99:f3:f0:59:e7: 9a:e9:7e:76:55:8b:cd:05:24:a1:96:ae:8b:0a:31:c7:e9:33: d7:96:c1:75:91:70:56:22:be:42:3d:2d:06:cb:60:c5:67:70: 4d:27:5a:50:d4:84:96:3f:31:dd:0f:d2:f1:92:14:40:ef:42: 99:74:13:8f:86:45:42:58:27:7a:2b:8b:a0:78:25:15:60:e3: 8a:bb:d4:2d:cc:c1:65:78:ca:4e:1d:7c:67:13:77:d5:d5:72: 79:ce:c0:79:4e:26:0b:ca:05:5e:71:46:df:5a:d6:66:bd:9a: f4:22:91:2b:6f:ba:6a:a7:18:33:04:19:27:a7:93:2c:80:f2: d5:f9:54:27:64:3b:6c:3b:b6:a8:7b:d1:4c:55:8c:7e:0b:3e: d5:19:e8:b3 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt7Ni+M+FJh8+vrWQgoWnSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjQ4MGM3MzM1NDMwNWNjNDBmOGZhYmE5ZTU0MDJlZjM3ZGUyZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77pgUkmaxO8ZzY7XWfNjA3hlsv60 ZUgi4ArTzUYI4pJ7WaP7YoKGXKv3rwBpT8+xhRx/hEhLuHS9APu23C9SEImjzz/q 9FWzcA9isCfNvAXcZrxB9zQ9PvBWkiCH+FIN809GkVtQh0XIQOKqIReFKMCvtSmg JLezURrEMFXpaGY49ahxBtjax2FOk6d41ERcHpaTYNfDZLYu3z72q5aGOjkOpSKx Dwb+E4w6cQ1DiphxnnduBn5jTP//yYOhmDCP9lUoYk4onMRZ/Lrl6PvD5Ft5dAzv plHww62VBkmlhbwcdHsQ17THAcxc4NyhJl4V9RxkQbLurOAa0nxjl1qZLQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPtIDHM1QwXMQPj6up5UAu833i6qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzBkYzQ4 OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIwMjIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5 LWUwMjgtNGYzNy1hOTcyLTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2 bmxRQzd6ZmVMcW8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngK7DAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDLgcwDQYJKoZIhvcNAQELBQADggEBADsNhaHPdpgi7if6idbsAD21XFqn 8PxOX0ue/pM9akJPwwBghSdmNfwxoDj83vvORlRJ9IIMyjg1eRBCytKg11gpp5Bb 4F1ot2tgrv08EhU9Bzd8pqyyVZbdzAVUvX9tnTv76+EGy0qZ8/BZ55rpfnZVi80F JKGWrosKMcfpM9eWwXWRcFYivkI9LQbLYMVncE0nWlDUhJY/Md0P0vGSFEDvQpl0 E4+GRUJYJ3ori6B4JRVg44q71C3MwWV4yk4dfGcTd9XVcnnOwHlOJgvKBV5xRt9a 1ma9mvQikStvumqnGDMEGSenkyyA8tX5VCdkO2w7tqh70UxVjH4LPtUZ6LM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:43 2026 by rpki-client