This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer (raw, json) Hash identifier: Vft0wtZWMimC7UjrADkjdeJT7wth787ico9hj/VWhms= Subject key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4AB77236AACD13F50B928E172846C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42187 IP: 78.41.88.0/21 IP: 91.190.232.0/22 IP: 94.127.92.0/22 IP: 185.33.120.0/22 IP: 2a01:9f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ab:77:23:6a:ac:d1:3f:50:b9:28:e1:72:84:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f811fa5eff370bc36d0e3929625e3414081a2392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:31:f4:c1:e7:3e:9b:45:8d:d5:fc:23:40:1a: f9:f1:5b:f4:40:0e:70:4d:30:29:2d:24:ed:4a:65: ec:11:7f:53:62:34:7a:3e:0f:56:2a:25:b4:86:6e: e7:50:b7:13:ac:82:6f:8e:a7:22:73:a2:2c:8a:fa: aa:28:b1:18:9e:3a:39:d1:37:64:e3:1a:8c:85:a3: f2:e5:39:63:0c:33:1d:65:ce:46:b6:9b:ad:20:c3: da:ca:71:d4:db:cb:2e:62:ea:6c:d4:60:be:72:3a: 46:b5:fc:6a:bb:f3:f6:18:18:d6:61:5c:50:6a:47: c6:66:d0:58:96:0d:4f:3f:bb:c0:80:2b:b9:bc:fa: 48:f4:f0:cf:55:f6:64:4f:eb:57:4e:48:7f:a7:39: 7e:e8:c7:89:70:bd:1d:f5:f3:18:5b:2e:85:30:76: 98:9e:1f:c6:b5:71:1d:39:58:00:24:2b:28:92:aa: aa:a4:aa:c0:ce:8e:6d:fd:4e:cb:f4:2c:08:f7:d7: eb:23:d6:3a:27:ce:f5:50:d1:03:41:7c:76:22:39: 2e:1d:d4:3a:d7:fe:60:38:60:c9:c3:58:6d:f9:57: ee:d0:a4:78:ce:10:89:01:de:2f:39:f1:2a:e8:a2: 67:53:d1:95:c9:d8:ac:8f:13:93:38:60:2a:99:36: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.88.0/21 91.190.232.0/22 94.127.92.0/22 185.33.120.0/22 IPv6: 2a01:9f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42187 Signature Algorithm: sha256WithRSAEncryption af:29:27:e7:af:f2:a7:58:37:d5:a5:44:48:9b:33:a2:3d:dc: 7e:dd:09:6c:36:3b:09:68:c7:4a:05:73:18:69:00:01:83:10: ed:22:a7:ad:11:9f:8d:a5:4c:0f:a8:3e:ba:2d:71:e0:ff:d7: ff:17:b0:79:16:cb:34:1c:4a:b4:d2:f1:d8:ab:17:58:5a:eb: 28:5d:25:4a:dc:7b:f8:3d:8d:53:fc:f8:5e:ce:e9:20:35:2f: 82:f6:23:89:e6:bc:ac:76:76:8b:c2:9f:46:09:a7:fb:04:8c: e5:50:0e:0c:90:8e:3a:f8:47:ec:9c:4c:21:5c:5d:b1:1a:e6: d2:24:a0:7a:7c:fc:80:c8:f9:0a:ac:38:1b:13:f9:a5:2b:26: ba:f6:b8:25:6c:30:5f:06:a5:54:e8:86:7b:1f:91:da:58:95: e4:12:0c:7d:69:79:bd:97:c4:f5:3c:fa:e2:f6:3e:1f:5a:21: 14:55:d9:a4:0a:e1:b6:6e:3b:5b:34:8f:87:88:7b:e4:90:7b: 0a:4c:c4:70:07:86:5b:9a:33:5e:05:54:a8:97:e1:8d:48:8a: 97:b8:a9:b9:ca:4e:c6:23:78:22:58:72:29:d5:6c:4c:51:1c: cd:8c:9d:dc:71:00:d4:79:6b:6e:cb:c4:ea:d6:2d:fb:0e:d7: 60:3a:c1:bd -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt7pKt3I2qs0T9QuSjhcoRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODExZmE1ZWZmMzcwYmMzNmQwZTM5Mjk2MjVlMzQxNDA4MWEyMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zH0wec+m0WN1fwjQBr58Vv0QA5w TTApLSTtSmXsEX9TYjR6Pg9WKiW0hm7nULcTrIJvjqcic6IsivqqKLEYnjo50Tdk 4xqMhaPy5TljDDMdZc5GtputIMPaynHU28suYups1GC+cjpGtfxqu/P2GBjWYVxQ akfGZtBYlg1PP7vAgCu5vPpI9PDPVfZkT+tXTkh/pzl+6MeJcL0d9fMYWy6FMHaY nh/GtXEdOVgAJCsokqqqpKrAzo5t/U7L9CwI99frI9Y6J871UNEDQXx2IjkuHdQ6 1/5gOGDJw1ht+Vfu0KR4zhCJAd4vOfEq6KJnU9GVydisjxOTOGAqmTb2hwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFPgR+l7/NwvDbQ45KWJeNBQIGiOSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzRhMjkz ZC0yYWQzLTQxMTQtYTJiMS0xY2M1MDU1MDFhMGYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNGEyOTNk LTJhZDMtNDExNC1hMmIxLTFjYzUwNTUwMWEwZi8xLzEtQkg2WHY4M0M4TnREamtw WWw0MEZBZ2FJNUkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEA04pWAMEAlu+6AMEAl5/XAMEArkheDANBAIA AjAHAwUAKgGfADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMApMswDQYJKoZIhvcN AQELBQADggEBAK8pJ+ev8qdYN9WlREibM6I93H7dCWw2Owlox0oFcxhpAAGDEO0i p60Rn42lTA+oProtceD/1/8XsHkWyzQcSrTS8dirF1ha6yhdJUrce/g9jVP8+F7O 6SA1L4L2I4nmvKx2dovCn0YJp/sEjOVQDgyQjjr4R+ycTCFcXbEa5tIkoHp8/IDI +QqsOBsT+aUrJrr2uCVsMF8GpVTohnsfkdpYleQSDH1peb2XxPU8+uL2Ph9aIRRV 2aQK4bZuO1s0j4eIe+SQewpMxHAHhluaM14FVKiX4Y1Iipe4qbnKTsYjeCJYcinV bExRHM2MndxxANR5a27LxOrWLfsO12A6wb0= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:57 2026 by rpki-client