This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer File: 1-38ZGo278fExR0l1NY8kRNaVDoI.cer (raw, json) Hash identifier: DiYZhVxCVaw1NfgHmCqsGHc4kOwrSPJf8BxwHoxbnus= Subject key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154A7CAECF9A39B6DC8252500EF8EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211715 IP: 2001:67c:1350::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4a:7c:ae:cf:9a:39:b6:dc:82:52:50:0e:f8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7f191a8dbbf1f131474975358f2444d6950e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:ea:ed:ff:39:ed:a6:9e:99:80:1f:ca:a3: f2:96:14:00:92:ad:ed:48:39:b0:8a:2d:19:f1:71: 28:9d:7f:9b:d5:ab:05:fe:d7:59:47:c7:d2:ff:de: 22:8f:86:c7:15:15:3b:3d:53:54:64:99:2a:b6:f8: f2:8f:38:c0:b2:de:0f:09:c7:04:96:a7:e3:7f:e9: 23:66:85:53:28:fd:57:19:11:b9:ae:ab:9e:51:27: e2:36:a9:bc:72:ff:3c:97:10:16:e1:d2:b4:aa:1d: e6:a7:eb:ae:4a:5d:8a:08:44:0c:b9:7a:05:f5:65: 59:a4:33:2f:5c:5a:97:28:ed:4e:40:7b:fd:6a:1d: 42:75:dc:fd:ba:d7:43:40:d6:0f:dd:d6:78:c2:b4: 19:61:75:91:40:20:f8:c0:39:bc:05:60:49:d3:c3: 6f:30:42:14:31:1a:d8:27:a9:bb:06:03:ab:61:32: 24:c5:91:d5:c4:b2:8e:40:f7:0a:66:6f:52:99:ce: 2e:d5:d4:26:bf:0a:3b:6e:a3:be:09:6f:fa:7a:43: d2:49:a4:75:59:01:d4:5c:be:2a:f0:eb:de:8c:68: 94:bf:ce:14:e6:43:a9:ee:39:1b:1e:1b:24:ea:af: c1:a9:15:5c:f9:5d:4d:dc:93:d9:f8:4a:11:99:ee: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1350::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211715 Signature Algorithm: sha256WithRSAEncryption 5b:0e:19:32:10:91:ec:32:29:ca:ec:7d:14:55:3f:6a:ba:1e: 40:4e:74:18:65:b4:35:91:c0:b0:8d:c6:0c:b8:83:85:e7:7a: e1:7d:ed:76:ab:44:28:b8:1b:a0:d0:7e:cc:e8:9d:6f:92:39: 62:b2:74:db:c6:ea:3b:74:ce:d1:af:47:03:17:2a:3f:e4:63: 16:87:0f:49:af:53:34:55:d2:30:b9:90:3e:6e:b0:0a:10:03: c7:73:19:31:81:af:87:2c:b1:52:04:77:5f:78:c3:35:b9:75: e9:f2:71:7a:57:fa:6e:7a:ea:d1:85:e5:ea:59:9c:99:eb:3a: 35:dc:7a:7e:c0:44:20:69:b2:bd:d4:93:7b:5b:82:be:22:58: d8:5f:e7:87:50:52:b4:c5:4c:e9:d1:68:8d:53:85:40:ab:3c: 48:2c:2c:f2:da:97:5f:5b:ac:26:a1:e8:03:20:e7:22:f8:d9: c8:70:16:d0:85:e7:84:f2:96:06:a6:ac:3a:d8:e1:84:0e:09: 82:9c:04:4e:eb:02:98:96:ac:7d:77:07:4e:1f:1f:e5:4c:03: ba:a5:80:82:25:b7:09:8e:6a:17:00:97:4b:1b:88:6e:0d:a9: f3:0b:f0:53:ba:13:46:5a:d3:7d:e3:3f:c2:ed:ff:02:ee:a7: 85:70:72:b7 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt/FUp8rs+aObbcglJQDvjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjdmMTkxYThkYmJmMWYxMzE0NzQ5NzUzNThmMjQ0NGQ2OTUwZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OLq7f857aaemYAfyqPylhQAkq3t SDmwii0Z8XEonX+b1asF/tdZR8fS/94ij4bHFRU7PVNUZJkqtvjyjzjAst4PCccE lqfjf+kjZoVTKP1XGRG5rqueUSfiNqm8cv88lxAW4dK0qh3mp+uuSl2KCEQMuXoF 9WVZpDMvXFqXKO1OQHv9ah1Cddz9utdDQNYP3dZ4wrQZYXWRQCD4wDm8BWBJ08Nv MEIUMRrYJ6m7BgOrYTIkxZHVxLKOQPcKZm9Smc4u1dQmvwo7bqO+CW/6ekPSSaR1 WQHUXL4q8OvejGiUv84U5kOp7jkbHhsk6q/BqRVc+V1N3JPZ+EoRme4gIQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPt/GRqNu/HxMUdJdTWPJETWlQ6CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzIyZjBh OC1iNmYwLTQ0YjYtOWFhMS04NzQ3ZGFhNTkzZjIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4 LWI2ZjAtNDRiNi05YWExLTg3NDdkYWE1OTNmMi8xLzEtMzhaR28yNzhmRXhSMGwx Tlk4a1JOYVZEb0kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwTUDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDOwMwDQYJKoZIhvcNAQELBQADggEBAFsOGTIQkewyKcrsfRRVP2q6HkBO dBhltDWRwLCNxgy4g4XneuF97XarRCi4G6DQfszonW+SOWKydNvG6jt0ztGvRwMX Kj/kYxaHD0mvUzRV0jC5kD5usAoQA8dzGTGBr4cssVIEd194wzW5denycXpX+m56 6tGF5epZnJnrOjXcen7ARCBpsr3Uk3tbgr4iWNhf54dQUrTFTOnRaI1ThUCrPEgs LPLal19brCah6AMg5yL42chwFtCF54TylgamrDrY4YQOCYKcBE7rApiWrH13B04f H+VMA7qlgIIltwmOahcAl0sbiG4NqfML8FO6E0Za033jP8Lt/wLup4Vwcrc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:10 2026 by rpki-client