This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer (raw, json) Hash identifier: LPPcrX7rY7A7IoNvp76vt1P4t7M+vaiaKHex62kTOP8= Subject key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2D55B25C1B5A5A139387863034DEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203046 IP: 91.208.191.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d5:5b:25:c1:b5:a5:a1:39:38:78:63:03:4d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:6d:88:30:af:76:f2:b8:cd:d0:a7:8f:37: db:12:48:53:39:46:98:69:36:48:da:99:07:41:20: 29:fd:35:11:8b:6a:26:81:f8:fe:78:28:89:f0:cf: 8a:b0:fb:08:ee:97:13:bd:c7:33:d3:19:df:c7:7c: d8:37:d1:5a:ef:c0:5f:a6:12:9d:6d:5a:01:55:70: 80:db:a2:3e:a0:4d:30:6e:ec:93:45:4f:56:35:b0: 33:aa:e7:ed:b3:48:5f:de:f8:f2:04:6c:ea:24:df: 2a:87:ce:74:17:db:8d:3a:24:43:c5:e7:9b:e1:16: 0b:07:8f:8c:bd:7d:7f:63:64:6c:c4:f7:e9:9a:e0: 08:3c:0c:a9:15:e4:ce:75:b9:aa:c7:54:4e:d7:c9: a5:37:04:c0:32:91:cd:7d:34:ba:42:3e:b7:1a:24: c3:34:a5:bf:4c:44:16:a6:f1:19:b0:58:95:ed:42: 05:29:af:25:f9:1a:ef:52:5e:32:61:95:9f:01:73: 5a:78:ed:0b:a2:69:a8:2d:d7:69:be:aa:fe:dd:de: c4:75:02:64:81:10:82:6c:a7:2d:7d:21:69:3d:d9: 7c:76:6d:cf:ec:5c:b4:07:d7:a5:5a:bd:f0:06:af: 4d:40:ef:74:77:03:04:18:c8:3c:38:c0:f9:cc:25: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.191.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203046 Signature Algorithm: sha256WithRSAEncryption 8c:53:0f:36:52:cb:8f:03:4c:e1:d8:92:43:52:80:39:4f:24: 52:79:81:2a:ef:fa:76:39:05:45:15:3f:6a:e3:0f:7f:b6:dc: 9e:cc:48:b3:9a:a0:77:51:e7:d3:4f:33:e6:b6:23:01:8b:5b: 92:bd:01:9c:30:74:4d:44:24:7f:75:1c:c1:b9:55:0b:3f:2c: 05:bd:92:ce:4b:bd:61:20:bf:c2:c0:89:2b:ab:f5:82:25:93: 57:93:8c:6d:48:05:dd:98:90:25:c6:fb:6f:12:59:47:51:ad: 57:72:79:45:64:18:a3:00:17:3f:5c:a0:d0:d0:fc:36:b4:6c: 91:0c:e6:45:61:15:f9:41:d8:2a:45:99:f7:c1:53:59:4a:64: f4:2f:5e:4b:91:49:ff:14:8a:bb:9e:ac:5f:d9:2c:0b:80:41: 6b:1a:8c:d0:b9:76:39:e9:c4:e9:8c:dd:2d:66:b3:9b:62:77: 6c:9d:8a:04:c9:e3:2b:c9:aa:64:9f:cc:53:11:84:2f:a5:89: b7:6a:49:1c:f5:ec:96:a9:fe:aa:12:9f:60:33:6f:40:ca:49: 6d:45:6b:88:64:ea:bb:b1:64:22:b9:dc:bf:21:96:f4:c3:19: 31:ef:2b:5d:37:b7:b2:91:51:b9:f7:2d:20:8f:40:74:37:d7: db:d6:99:90 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt4otVbJcG1paE5OHhjA03sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjU2MDI4MDJhODc5M2EyNGZkYTRkMGVkY2MzMGExOTZjMGY3N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNhtiDCvdvK4zdCnjzfbEkhTOUaY aTZI2pkHQSAp/TURi2omgfj+eCiJ8M+KsPsI7pcTvccz0xnfx3zYN9Fa78BfphKd bVoBVXCA26I+oE0wbuyTRU9WNbAzqufts0hf3vjyBGzqJN8qh850F9uNOiRDxeeb 4RYLB4+MvX1/Y2RsxPfpmuAIPAypFeTOdbmqx1RO18mlNwTAMpHNfTS6Qj63GiTD NKW/TEQWpvEZsFiV7UIFKa8l+RrvUl4yYZWfAXNaeO0LommoLddpvqr+3d7EdQJk gRCCbKctfSFpPdl8dm3P7Fy0B9elWr3wBq9NQO90dwMEGMg8OMD5zCVzEQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPtWAoAqh5OiT9pNDtzDChlsD3fgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzgzODdh Ny0wNjhjLTQ4MzItYWEyNi1kYjViMWY4OWE1MGQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3 LTA2OGMtNDgzMi1hYTI2LWRiNWIxZjg5YTUwZC8xLzEtMVlDZ0NxSGs2SlAyazBP M01NS0dXd1BkLUEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvQvzAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDGSYwDQYJKoZIhvcNAQELBQADggEBAIxTDzZSy48DTOHYkkNSgDlPJFJ5gSrv +nY5BUUVP2rjD3+23J7MSLOaoHdR59NPM+a2IwGLW5K9AZwwdE1EJH91HMG5VQs/ LAW9ks5LvWEgv8LAiSur9YIlk1eTjG1IBd2YkCXG+28SWUdRrVdyeUVkGKMAFz9c oNDQ/Da0bJEM5kVhFflB2CpFmffBU1lKZPQvXkuRSf8UiruerF/ZLAuAQWsajNC5 djnpxOmM3S1ms5tid2ydigTJ4yvJqmSfzFMRhC+libdqSRz17Jap/qoSn2Azb0DK SW1Fa4hk6ruxZCK53L8hlvTDGTHvK103t7KRUbn3LSCPQHQ319vWmZA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:45 2026 by rpki-client