This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer (raw, json) Hash identifier: Ia2XNfROFSTvKe6stauk+NpG0GSMEjt9b4+fZvu5/ww= Subject key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA44387ADBFE508EE58D70A8004B1BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59779 IP: 185.12.180.0/22 IP: 185.57.48.0/22 IP: 2a02:57e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:43:87:ad:bf:e5:08:ee:58:d7:0a:80:04:b1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:8d:bd:6e:54:cd:51:23:d4:5e:5c:d6:e1: bf:0e:32:f5:f7:a4:9e:15:c4:71:46:42:28:51:3e: 9b:48:65:52:30:fd:ff:1c:8a:45:df:7c:f0:69:af: 57:36:02:e3:a3:50:85:61:06:c9:dd:8b:d8:cf:27: f7:7d:8e:32:c7:73:4a:6e:29:e7:96:21:a0:2d:fb: 9d:15:95:96:6c:9c:78:4d:7e:3d:66:c4:48:21:d9: 29:6f:84:eb:c5:d1:cf:62:76:4f:83:91:df:61:80: 47:4c:27:1e:b2:f0:8a:14:8b:52:dd:8c:18:56:9b: ae:83:c9:c3:78:60:33:19:9e:bc:57:aa:76:41:f2: 8f:41:ad:e1:d0:34:9e:87:b3:9e:83:dc:57:f1:ee: e0:14:8d:88:fe:7a:11:9b:8e:4d:6e:a1:a8:7f:bd: 27:d7:b4:69:0c:8e:66:34:46:55:9c:7c:91:02:d3: 34:4b:ea:00:12:4b:26:b8:8e:58:15:de:9e:37:7a: fd:58:49:a9:9a:c5:b3:5b:48:57:17:4d:8e:d9:39: 0e:57:72:7b:3f:6b:94:72:4f:74:ec:57:f6:95:48: 54:bb:c3:d7:89:fa:a6:8c:6c:ea:03:28:da:63:6f: f1:c5:42:2f:39:1b:ac:7f:14:5e:9f:dd:2b:87:89: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.180.0/22 185.57.48.0/22 IPv6: 2a02:57e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59779 Signature Algorithm: sha256WithRSAEncryption 5f:1a:ff:24:33:f0:67:51:0d:37:4a:56:7a:ef:33:ad:58:ed: 55:04:ef:9b:a0:cf:e7:f5:d8:08:10:4b:26:23:92:d0:88:94: c7:5a:f5:90:49:f0:ae:83:dd:43:d6:95:14:8b:76:90:fa:50: 72:ed:4d:97:60:e6:ef:82:16:e4:71:35:a7:55:12:0c:28:9b: 34:19:8f:4d:1b:c2:32:7f:7a:fb:b8:50:96:63:f6:3b:00:8a: 30:f0:0f:81:f4:32:0d:0f:7a:03:28:d1:da:53:ac:17:35:cd: c5:23:da:8f:6a:98:7f:d8:ba:95:5c:35:f3:79:08:f8:f5:3c: ce:e9:1d:ce:f2:f1:49:ca:ea:85:ab:07:b7:5a:0a:11:cd:49: 39:b9:93:7d:ae:b3:0e:56:2f:c1:a4:5a:be:29:71:8d:6f:30: 71:d9:2b:0e:44:3e:0d:c4:de:ae:e8:7a:a7:83:17:16:9e:cc: dc:96:fb:17:cb:5b:3a:dd:b5:4e:8d:2a:a1:7b:de:04:95:a5: 15:2e:60:cc:e0:ce:f0:f2:c9:39:a2:6d:3d:de:8a:5c:d9:42: 5d:0e:05:96:6d:c7:ba:21:0c:a8:12:73:de:86:6d:af:e8:47: 40:85:72:cb:5d:fe:af:75:15:34:39:da:cc:88:e9:39:77:39: 04:79:8e:ea -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt7pEOHrb/lCO5Y1wqABLG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODVkMDA0NDQ2MTgyZDUxZmQzOGY3Zjc1ZmUyYTVjODYwOGJjODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEKNvW5UzVEj1F5c1uG/DjL196Se FcRxRkIoUT6bSGVSMP3/HIpF33zwaa9XNgLjo1CFYQbJ3YvYzyf3fY4yx3NKbinn liGgLfudFZWWbJx4TX49ZsRIIdkpb4TrxdHPYnZPg5HfYYBHTCcesvCKFItS3YwY Vpuug8nDeGAzGZ68V6p2QfKPQa3h0DSeh7Oeg9xX8e7gFI2I/noRm45NbqGof70n 17RpDI5mNEZVnHyRAtM0S+oAEksmuI5YFd6eN3r9WEmpmsWzW0hXF02O2TkOV3J7 P2uUck907Ff2lUhUu8PXifqmjGzqAyjaY2/xxUIvORusfxRen90rh4lzHwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPhdAERGGC1R/Tj391/ipchgi8htMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2M5ZGI1 Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdmNmEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUy LWFjOTEtNDA2YS05Zjk1LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYz WC1LbHlHQ0x5RzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArkMtAMEArk5MDANBAIAAjAHAwUDKgJX4DAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6YMwDQYJKoZIhvcNAQELBQADggEBAF8a /yQz8GdRDTdKVnrvM61Y7VUE75ugz+f12AgQSyYjktCIlMda9ZBJ8K6D3UPWlRSL dpD6UHLtTZdg5u+CFuRxNadVEgwomzQZj00bwjJ/evu4UJZj9jsAijDwD4H0Mg0P egMo0dpTrBc1zcUj2o9qmH/YupVcNfN5CPj1PM7pHc7y8UnK6oWrB7daChHNSTm5 k32usw5WL8GkWr4pcY1vMHHZKw5EPg3E3q7oeqeDFxaezNyW+xfLWzrdtU6NKqF7 3gSVpRUuYMzgzvDyyTmibT3eilzZQl0OBZZtx7ohDKgSc96Gba/oR0CFcstd/q91 FTQ52syI6Tl3OQR5juo= -----END CERTIFICATE-----Generated at Mon Feb 2 15:46:04 2026 by rpki-client