This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer (raw, json) Hash identifier: bmlTS5KNXjr57XlPRoXO2gxEnyBxs0JrrSBwxbPjFf4= Subject key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2BEABE1F5B6F346CFE028DA95485 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58246 IP: 185.73.148.0/22 IP: 185.120.0.0/22 IP: 2a05:4340::/29 IP: 2a05:bf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2b:ea:be:1f:5b:6f:34:6c:fe:02:8d:a9:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb8e60e56399ff93460b3427cd55274b5a83e726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:97:90:fc:ba:c5:3f:36:30:ea:ae:ad:d6: c1:54:f7:77:cc:82:de:54:80:bd:32:e6:ed:62:4f: 0b:e9:4d:1f:f3:67:3b:2c:88:79:7c:85:d6:79:1d: 76:03:2e:24:05:4b:5f:ac:94:56:fc:33:80:0b:15: 86:87:b9:7d:75:41:5c:19:41:b1:5b:80:ee:f7:99: 32:6e:9c:6f:9e:4d:57:57:df:84:af:8a:8f:ff:fc: ff:28:bf:2b:f1:43:4e:1a:5e:ff:69:e6:47:e1:e7: 70:4f:fb:a8:e8:4e:a6:96:91:47:4a:c8:08:16:f9: 55:8e:7c:49:4e:97:d7:88:ba:6d:b3:99:4a:2a:ac: d8:0a:da:56:4d:7e:e9:49:72:10:45:38:19:0c:00: 8d:1d:5a:e2:1f:b0:72:77:1d:61:0c:ff:2e:83:b3: 20:1f:a8:1e:b3:c7:cb:2d:02:af:0d:c7:47:7e:6e: f7:f9:01:61:ba:15:d5:62:08:a3:1e:d0:e1:93:0b: a1:d8:63:aa:29:b2:a2:55:74:63:52:22:77:43:32: 8d:f8:2b:fc:79:0a:0e:ff:8e:0c:f5:62:03:27:64: ce:db:31:b3:21:06:e5:d1:01:b9:f0:e1:21:6c:d0: a3:d5:1a:2e:eb:b0:eb:c8:2d:24:4e:86:3a:ed:63: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.148.0/22 185.120.0.0/22 IPv6: 2a05:4340::/29 2a05:bf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58246 Signature Algorithm: sha256WithRSAEncryption 51:53:96:fd:a0:09:df:73:d2:a3:eb:94:51:67:27:80:71:5c: 03:de:f7:86:e9:f3:55:f1:ab:22:0f:cf:ff:70:d1:d1:14:f6: 2e:23:4b:c4:29:cc:9b:04:ae:f8:23:1d:84:ba:19:5c:00:59: aa:5f:77:96:d9:34:42:ff:4b:3c:24:8b:d8:1b:34:dd:6b:ea: 38:f7:7a:fa:9f:44:83:f2:5a:99:c1:df:b2:a8:fd:e1:ff:85: 81:50:36:a7:9e:61:90:0f:66:f2:45:57:5c:10:3b:d7:d6:43: a5:cf:1d:55:2e:c9:86:32:00:d8:63:e2:23:27:48:0e:ba:2b: 31:f5:06:fd:8d:75:2a:2e:81:38:b8:f8:e1:f4:e4:cf:13:83: 08:ae:5b:99:27:86:16:00:9d:58:56:41:6a:45:38:f3:a4:9d: e0:0d:1b:34:39:29:e8:a8:82:dc:45:ae:e6:9e:1a:6d:cd:2c: 6a:dd:94:ba:95:e4:e2:97:9c:71:f3:ec:4d:8d:12:27:a4:1c: e7:b9:7f:fa:b9:87:a7:52:a1:fb:4f:e5:f6:cb:f4:64:9e:00: 2e:c1:3a:83:48:46:a9:80:13:55:24:ce:53:d6:42:c3:f8:dc: 0d:15:da:ef:56:56:be:3d:a2:d2:94:2d:7f:cd:ad:c6:f5:ef: 7d:4b:c4:07 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt26yvqvh9bbzRs/gKNqVSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjhlNjBlNTYzOTlmZjkzNDYwYjM0MjdjZDU1Mjc0YjVhODNlNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2yXkPy6xT82MOqurdbBVPd3zILe VIC9MubtYk8L6U0f82c7LIh5fIXWeR12Ay4kBUtfrJRW/DOACxWGh7l9dUFcGUGx W4Du95kybpxvnk1XV9+Er4qP//z/KL8r8UNOGl7/aeZH4edwT/uo6E6mlpFHSsgI FvlVjnxJTpfXiLpts5lKKqzYCtpWTX7pSXIQRTgZDACNHVriH7Bydx1hDP8ug7Mg H6ges8fLLQKvDcdHfm73+QFhuhXVYgijHtDhkwuh2GOqKbKiVXRjUiJ3QzKN+Cv8 eQoO/44M9WIDJ2TO2zGzIQbl0QG58OEhbNCj1Rou67DryC0kToY67WN/OQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFPuOYOVjmf+TRgs0J81VJ0tag+cmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2M2NGNl Yi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZjZmYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2Vi LTg2MTAtNDBlOS04MmFmLWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFu elZVblMxcUQ1eVkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEF BQcBBwEB/wQsMCowEgQCAAEwDAMEArlJlAMEArl4ADAUBAIAAjAOAwUDKgVDQAMF AyoFv0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOOGMA0GCSqGSIb3DQEBCwUA A4IBAQBRU5b9oAnfc9Kj65RRZyeAcVwD3veG6fNV8asiD8//cNHRFPYuI0vEKcyb BK74Ix2EuhlcAFmqX3eW2TRC/0s8JIvYGzTda+o493r6n0SD8lqZwd+yqP3h/4WB UDannmGQD2byRVdcEDvX1kOlzx1VLsmGMgDYY+IjJ0gOuisx9Qb9jXUqLoE4uPjh 9OTPE4MIrluZJ4YWAJ1YVkFqRTjzpJ3gDRs0OSnoqILcRa7mnhptzSxq3ZS6leTi l5xx8+xNjRInpBznuX/6uYenUqH7T+X2y/RkngAuwTqDSEapgBNVJM5T1kLD+NwN FdrvVla+PaLSlC1/za3G9e99S8QH -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:58 2026 by rpki-client