This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer (raw, json) Hash identifier: /7gDlNFPbZTGyEZBYXBd91SFqY4C1GAqTz8yMnIuNy8= Subject key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD11CAF33C136E5A75F2D39552146 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59754 IP: 185.73.76.0/22 IP: 2a05:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d1:1c:af:33:c1:36:e5:a7:5f:2d:39:55:21:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:26:5c:c5:47:9f:e5:14:5d:6f:12:f3:3b: 80:de:f1:ed:b4:26:b0:7f:48:48:bc:b5:64:a1:4d: 0e:4b:f8:2c:ce:b7:2a:91:20:83:4d:a5:43:b9:bf: 7f:e5:c2:57:b2:1c:f2:1e:4f:f9:1b:b8:c1:97:a9: 5e:1a:22:60:db:4b:ad:75:5f:cf:db:33:1f:1e:2a: 48:b5:56:df:f4:51:3b:55:88:14:da:47:56:55:cb: da:0c:7b:79:5e:48:b5:24:5a:b5:36:e8:ba:3c:00: fd:8c:1a:a1:bb:08:d9:ab:bf:82:73:bd:5d:ca:25: 53:33:27:b1:a2:5a:07:df:93:8b:e3:6d:10:55:89: 7b:e1:96:2c:30:d9:2a:3b:58:87:84:e4:a2:d4:d1: cd:70:39:b8:12:1f:54:22:8c:83:1a:ef:8e:a9:89: 2e:1a:0c:ad:52:7e:c8:c9:a0:4f:6d:28:64:55:b8: f0:83:17:fc:25:ce:66:c2:37:9e:cc:cd:09:75:aa: 7a:22:21:4c:74:1a:ae:54:37:40:10:09:60:6b:d9: 37:34:0d:53:72:7f:11:4d:57:c6:4a:b0:9c:69:f2: fd:66:84:59:b8:8e:ad:7f:40:bb:e3:3b:4f:48:03: ad:77:76:4d:e0:aa:98:be:d0:82:ff:dc:7d:d4:17: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.76.0/22 IPv6: 2a05:3e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59754 Signature Algorithm: sha256WithRSAEncryption 08:5c:04:c6:08:90:31:e2:db:83:3a:00:02:10:66:4d:17:b1: 48:8b:9d:8a:b9:ed:59:ba:70:00:03:4b:60:ed:99:76:c5:95: b5:94:f3:d0:1f:e0:3e:04:72:62:38:f3:e3:02:96:cc:ce:fb: fd:68:e5:98:69:07:45:95:76:81:d8:20:81:45:98:a1:be:ad: f6:22:7c:56:89:65:3f:c4:a1:07:24:52:13:4d:ed:10:76:7a: 03:b1:bd:3c:4f:fe:07:49:80:c5:90:3f:20:f3:d2:54:d2:7d: c4:be:cb:9b:63:28:a8:91:28:f0:2d:85:a5:6e:9a:90:40:91: 72:5e:15:e6:83:65:a8:55:62:3c:af:d0:47:55:d5:a8:46:6f: 81:a2:74:4e:48:2b:a3:bd:e2:78:a6:b1:75:cf:ca:34:44:43: c7:0b:cd:a8:74:70:a3:ed:ee:62:42:fb:26:12:86:4e:7e:04: c8:e1:5a:04:0d:97:27:f5:b2:44:21:09:76:1a:97:d4:9f:a2: f9:6e:16:69:22:4f:65:2f:4a:8c:f7:6e:f7:da:c4:16:1c:48: 09:87:ff:dc:9e:b5:8f:72:a1:1d:ee:18:0c:dc:a8:a0:83:f5: a1:92:68:e5:c8:8a:40:a1:29:4f:97:67:0a:cf:21:7f:fb:43: 76:36:7d:a0 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6WtEcrzPBNuWnXy05VSFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODFmNmFkMGRmMzgzNzIwZDNhNWQwM2JhODhjMTkzMDk1YzU3NGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtImXMVHn+UUXW8S8zuA3vHttCaw f0hIvLVkoU0OS/gszrcqkSCDTaVDub9/5cJXshzyHk/5G7jBl6leGiJg20utdV/P 2zMfHipItVbf9FE7VYgU2kdWVcvaDHt5Xki1JFq1Nui6PAD9jBqhuwjZq7+Cc71d yiVTMyexoloH35OL420QVYl74ZYsMNkqO1iHhOSi1NHNcDm4Eh9UIoyDGu+OqYku GgytUn7IyaBPbShkVbjwgxf8Jc5mwjeezM0Jdap6IiFMdBquVDdAEAlga9k3NA1T cn8RTVfGSrCcafL9ZoRZuI6tf0C74ztPSAOtd3ZN4KqYvtCC/9x91BfgVQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPgfatDfODcg06XQO6iMGTCVxXTvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2U5M2U5 Zi04Y2FmLTQ5YTAtODY4ZS1hOGM0YWRmOTg3MjEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlm LThjYWYtNDlhMC04NjhlLWE4YzRhZGY5ODcyMS8xLzEtQjlxME44NE55RFRwZEE3 cUl3Wk1KWEZkTzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArlJTDANBAIAAjAHAwUDKgU+QDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA6WowDQYJKoZIhvcNAQELBQADggEBAAhcBMYIkDHi 24M6AAIQZk0XsUiLnYq57Vm6cAADS2DtmXbFlbWU89Af4D4EcmI48+MClszO+/1o 5ZhpB0WVdoHYIIFFmKG+rfYifFaJZT/EoQckUhNN7RB2egOxvTxP/gdJgMWQPyDz 0lTSfcS+y5tjKKiRKPAthaVumpBAkXJeFeaDZahVYjyv0EdV1ahGb4GidE5IK6O9 4nimsXXPyjREQ8cLzah0cKPt7mJC+yYShk5+BMjhWgQNlyf1skQhCXYal9Sfovlu FmkiT2UvSoz3bvfaxBYcSAmH/9yetY9yoR3uGAzcqKCD9aGSaOXIikChKU+XZwrP IX/7Q3Y2faA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:18 2026 by rpki-client