This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer File: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer (raw, json) Hash identifier: void2/k/7ertaVvo4MUNSK7eT0hFGRCBua3fJTQ7UPw= Subject key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB50226CB75969E796A722BA7B7E72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210255 AS: 210806 AS: 212933 IP: 185.37.11.0/24 IP: 193.22.224.0/24 IP: 193.200.233.0/24 IP: 2a0d:5a40::/29 IP: 2a0f:c1c0::/32 IP: 2a11:da80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:50:22:6c:b7:59:69:e7:96:a7:22:ba:7b:7e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:49:f2:72:c1:8d:ba:a7:ed:20:c0:5f:28: 6a:6b:a8:a0:f0:31:9a:c8:aa:44:be:a5:0b:aa:90: db:bb:d0:25:ad:da:7c:d9:4f:1d:86:a2:26:07:89: 69:ca:5c:54:de:63:95:29:19:b1:0e:57:06:5c:f1: fa:bf:ba:e2:8d:e9:ac:7d:37:22:ed:49:2b:95:d1: ff:a1:8a:90:aa:10:78:05:87:07:80:d6:1b:94:81: 2c:c3:9c:27:9e:bc:38:ce:8e:8d:98:27:c9:a4:7b: e9:33:51:05:1a:00:2d:85:df:cb:b6:08:d4:80:3f: c1:fc:d8:4e:59:63:65:4e:5f:5a:f0:59:96:8e:cb: 48:be:c4:84:28:19:fe:29:80:e3:67:56:19:dd:14: 95:0d:73:8d:37:90:f7:00:a1:96:c9:60:05:5d:67: 06:c3:e6:70:48:9b:f0:f1:26:d8:8b:e4:17:3b:b5: 16:fd:b9:f9:65:b3:37:62:fd:b6:0a:a3:e3:96:e0: 72:36:9b:d1:1a:72:4c:8f:a8:5e:84:a6:7b:81:3b: 4e:79:bc:17:7f:cc:82:4a:d2:54:5d:f5:33:cf:23: fb:15:89:ad:f9:40:02:a0:ab:ed:e8:9f:d2:df:57: 8c:85:b0:e4:d0:ea:91:87:68:8d:90:20:ec:15:08: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.11.0/24 193.22.224.0/24 193.200.233.0/24 IPv6: 2a0d:5a40::/29 2a0f:c1c0::/32 2a11:da80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210255 210806 212933 Signature Algorithm: sha256WithRSAEncryption 31:74:45:bf:60:b5:68:37:78:cc:dc:5f:83:86:6d:8f:98:11: f2:7e:a0:66:7e:84:75:0f:c6:2f:83:5e:a1:4c:ce:53:f2:d6: b5:f4:e5:56:f6:19:28:b9:96:0f:ff:97:05:cc:6c:cd:78:6a: 0e:9a:b0:a0:99:28:28:91:aa:5c:9e:0e:f2:f2:d4:6a:73:3a: af:f0:77:90:6a:cd:68:04:f6:6b:60:9a:71:4b:7b:96:61:d8: 12:98:f2:dd:95:0f:fb:ef:e5:b2:05:7b:72:c4:13:8d:c2:a3: d0:ef:5f:87:43:c3:99:d0:72:90:d5:2d:ee:1a:a8:3d:fd:62: 20:a3:b3:39:b4:be:02:44:4e:12:9a:2e:83:7a:39:bc:b9:6c: 70:1b:d9:b6:92:3f:ce:96:b1:da:c2:ff:62:e2:8d:26:13:90: f0:a9:6c:fd:28:b9:58:51:ca:5f:70:7f:2c:c5:ab:84:72:7d: b0:56:f2:39:e6:c1:93:e2:63:1d:34:f7:f6:57:be:f8:50:2a: a7:56:07:49:8d:94:d3:00:ec:48:ce:6d:19:88:8d:db:0d:cc: a6:2a:6b:47:11:f9:68:49:6f:5f:32:fe:20:71:a2:15:2e:96: 6c:c6:27:c1:49:53:63:22:2b:95:74:8f:9d:1f:c3:c3:3b:5a: 0f:2d:35:b9 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt261AibLdZaeeWpyK6e35yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODAzNWVjOWRlMjU3MGMxZTdhN2RiNDBlMjcyZTQ1NTQ4YzkyMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty5J8nLBjbqn7SDAXyhqa6ig8DGa yKpEvqULqpDbu9Alrdp82U8dhqImB4lpylxU3mOVKRmxDlcGXPH6v7rijemsfTci 7UkrldH/oYqQqhB4BYcHgNYblIEsw5wnnrw4zo6NmCfJpHvpM1EFGgAthd/LtgjU gD/B/NhOWWNlTl9a8FmWjstIvsSEKBn+KYDjZ1YZ3RSVDXONN5D3AKGWyWAFXWcG w+ZwSJvw8SbYi+QXO7UW/bn5ZbM3Yv22CqPjluByNpvRGnJMj6hehKZ7gTtOebwX f8yCStJUXfUzzyP7FYmt+UACoKvt6J/S31eMhbDk0OqRh2iNkCDsFQiMrwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFPgDXsneJXDB56fbQOJy5FVIySArMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzEwMTEy Ni0xZDMyLTQyYTYtODdmZS05MjIzODQ2ZmYzMGIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2 LTFkMzItNDJhNi04N2ZlLTkyMjM4NDZmZjMwYi8xLzEtQU5leWQ0bGNNSG5wOXRB NG5Ma1ZVakpJQ3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBIBggrBgEF BQcBBwEB/wQ5MDcwGAQCAAEwEgMEALklCwMEAMEW4AMEAMHI6TAbBAIAAjAVAwUD Kg1aQAMFACoPwcADBQMqEdqAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwM1TwID Azd2AgMDP8UwDQYJKoZIhvcNAQELBQADggEBADF0Rb9gtWg3eMzcX4OGbY+YEfJ+ oGZ+hHUPxi+DXqFMzlPy1rX05Vb2GSi5lg//lwXMbM14ag6asKCZKCiRqlyeDvLy 1GpzOq/wd5BqzWgE9mtgmnFLe5Zh2BKY8t2VD/vv5bIFe3LEE43Co9DvX4dDw5nQ cpDVLe4aqD39YiCjszm0vgJEThKaLoN6Oby5bHAb2baSP86WsdrC/2LijSYTkPCp bP0ouVhRyl9wfyzFq4RyfbBW8jnmwZPiYx009/ZXvvhQKqdWB0mNlNMA7EjObRmI jdsNzKYqa0cR+WhJb18y/iBxohUulmzGJ8FJU2MiK5V0j50fw8M7Wg8tNbk= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:05 2026 by rpki-client