This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer (raw, json) Hash identifier: 0tWRY7hFajGHTRfljha5SbWMptEAY3Au7+kWgx0yb7Y= Subject key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73E774091B1234E781BD8837E6B5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20572 IP: 193.108.184.0/24 IP: 194.42.47.128/25 IP: 194.42.55.0/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3e:77:40:91:b1:23:4e:78:1b:d8:83:7e:6b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:db:83:6e:b4:6c:17:ae:bd:e4:e2:27:5a: 9b:f4:7f:58:3f:4c:c8:2e:20:3e:68:6b:f8:bd:79: 44:39:10:9a:9c:a0:f5:98:45:0b:98:7f:82:87:2d: b9:97:6c:82:9a:c9:96:b7:69:fd:da:39:ca:54:82: 26:7c:30:7a:79:18:b7:10:a3:17:42:e5:9f:2b:82: 82:76:20:7a:fc:74:6c:0c:e7:dd:eb:11:2a:15:6a: 22:45:1f:76:24:20:c6:50:7b:46:19:16:2b:e8:57: b0:8d:8f:7a:e2:4d:c3:ea:c7:d5:16:22:25:c6:a1: 6d:e6:ed:72:57:5b:08:4f:6b:3b:0e:72:70:fe:7d: 56:ac:da:0c:b8:10:f7:ee:a2:b3:db:84:22:40:a9: e9:cc:dd:59:5d:ea:54:3a:e4:64:be:f7:56:a7:d4: 98:ce:e1:2f:af:79:3f:4a:04:2a:01:8f:a0:30:08: 80:a7:a8:a8:f4:c4:54:d5:3f:aa:37:66:5d:e5:8c: 94:ec:f8:a0:c4:bd:55:b5:f7:d2:cc:56:11:8e:2c: 31:c0:e3:41:1c:f9:3f:5e:b0:99:f1:57:0d:e1:69: 7c:51:dc:74:1b:8a:6c:a7:04:34:0e:7d:b3:f0:f5: 1d:11:3c:61:55:b6:f0:d7:e1:a0:6f:15:da:2f:60: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.184.0/24 194.42.47.128/25 194.42.55.0/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20572 Signature Algorithm: sha256WithRSAEncryption 34:e1:af:72:21:b0:76:b7:bf:48:ec:39:02:ba:78:57:04:f6: 56:ec:d3:ae:96:77:4c:ab:6d:f5:b8:eb:b9:19:99:37:1e:59: c5:1d:d0:e1:d8:0c:44:32:2c:eb:4b:cd:80:ae:68:cc:57:06: c6:df:f1:6c:c3:bd:2e:0a:98:93:51:69:f6:e7:6e:fd:ef:42: a6:d6:79:25:d9:7d:e8:dc:b9:88:4d:9f:e0:07:f2:1d:77:7f: 39:99:8f:a0:cf:6f:36:5d:1b:52:13:6c:08:53:93:2d:e4:fd: 6b:8c:7d:ce:97:fa:e5:9e:6c:d1:f9:2d:81:13:fe:ec:87:60: 91:30:12:9f:79:6e:22:ce:47:5d:66:5f:d5:65:28:44:82:1e: f6:da:c5:44:55:09:25:cf:8e:42:45:ad:c9:66:32:9c:bb:a6: e8:19:57:02:45:b1:8d:23:22:d8:9e:0c:f0:e5:18:cc:05:b5: 63:2e:4c:00:d6:0b:f4:b8:cc:ec:66:34:e9:62:88:2e:ec:55: 81:1f:54:f5:fd:19:0a:97:ef:ae:37:25:d8:21:c5:97:a6:a9: 87:b1:ba:8b:97:0b:1e:b9:63:cc:67:52:8b:65:dd:3d:eb:34: 15:06:67:72:6a:ad:96:6a:cb:c0:bb:67:65:56:21:d0:b3:89: 24:a1:f3:96 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt3xz53QJGxI054G9iDfmtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmEwMDUzYjY4YTQzOThmZDUyZjA3YWZkZDZhZDMxMDlmZGVkNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVDbg260bBeuveTiJ1qb9H9YP0zI LiA+aGv4vXlEORCanKD1mEULmH+Chy25l2yCmsmWt2n92jnKVIImfDB6eRi3EKMX QuWfK4KCdiB6/HRsDOfd6xEqFWoiRR92JCDGUHtGGRYr6FewjY964k3D6sfVFiIl xqFt5u1yV1sIT2s7DnJw/n1WrNoMuBD37qKz24QiQKnpzN1ZXepUOuRkvvdWp9SY zuEvr3k/SgQqAY+gMAiAp6io9MRU1T+qN2Zd5YyU7PigxL1VtffSzFYRjiwxwONB HPk/XrCZ8VcN4Wl8Udx0G4pspwQ0Dn2z8PUdETxhVbbw1+GgbxXaL2CWrwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFPugBTtopDmP1S8Hr91q0xCf3tS0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzczMzE3 NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2NDgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0 LWVkZDYtNGI0Mi1iMDExLTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2 M1dyVEVKX2UxTFEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEF BQcBBwEB/wQeMBwwGgQCAAEwFAMEAMFsuAMFB8IqL4ADBQXCKjcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlBcMA0GCSqGSIb3DQEBCwUAA4IBAQA04a9yIbB2t79I 7DkCunhXBPZW7NOulndMq231uOu5GZk3HlnFHdDh2AxEMizrS82ArmjMVwbG3/Fs w70uCpiTUWn2527970Km1nkl2X3o3LmITZ/gB/Idd385mY+gz282XRtSE2wIU5Mt 5P1rjH3Ol/rlnmzR+S2BE/7sh2CRMBKfeW4izkddZl/VZShEgh722sVEVQklz45C Ra3JZjKcu6boGVcCRbGNIyLYngzw5RjMBbVjLkwA1gv0uMzsZjTpYogu7FWBH1T1 /RkKl++uNyXYIcWXpqmHsbqLlwseuWPMZ1KLZd096zQVBmdyaq2WasvAu2dlViHQ s4kkofOW -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:30 2026 by rpki-client