This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.cer (raw, json) Hash identifier: ACJMz0DoyNExfmrvdP4dEoiKqT9Ce4r/JfcOC5UiCeo= Subject key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB1FFB5AD3B3EA02C17C934DE1CA03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43164 IP: 91.198.0.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1f:fb:5a:d3:b3:ea:02:c1:7c:93:4d:e1:ca:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:e3:a4:8b:2f:b1:ed:f6:00:32:12:e0:03: 1c:58:e8:ec:1d:f3:8c:8f:a3:ba:70:32:f0:5e:8f: db:1c:74:a6:05:cd:90:b1:a6:e2:51:b4:53:43:0d: 8c:2d:83:9a:66:4f:5c:e3:8a:13:bb:0c:02:c9:07: 28:12:52:bb:29:49:f5:2f:ea:ef:1f:b7:98:cf:05: 6a:f9:70:69:49:9d:a1:b6:a3:2c:d5:c0:4b:02:62: 6e:a5:82:61:81:42:02:cf:47:26:f0:ee:77:14:60: 54:8a:4a:4a:ca:60:41:d3:90:2c:7f:53:b3:e2:12: 0b:53:6a:97:68:31:ae:a5:55:5a:9d:6c:42:8f:a8: 0e:6d:7e:8b:85:8f:ce:1a:05:d4:bf:b8:82:c9:4b: 86:de:65:9b:5e:00:ec:3f:55:f6:7a:24:25:6e:1a: 50:e1:0c:36:fb:06:94:5b:9a:62:98:27:64:46:c5: 36:57:9e:25:e7:b7:a9:da:54:e8:d6:49:30:3d:8a: af:e3:ca:f2:15:e8:0a:34:16:62:03:5e:00:57:31: c7:0d:90:52:b2:1d:d0:3f:27:ff:1a:12:6a:e3:ef: f2:9b:d2:27:01:35:97:09:3a:a1:ef:df:3b:b8:1d: 3d:06:4c:cc:67:fe:5e:11:b5:05:ce:1f:e3:9a:0f: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43164 Signature Algorithm: sha256WithRSAEncryption a3:ac:86:a6:de:13:d9:1c:4e:2a:c9:7b:1e:fc:c1:92:89:f3: c9:ee:57:ec:8f:8f:e0:54:8c:a1:6d:46:0b:9f:f3:8c:6a:0f: 64:82:42:de:27:d1:89:58:66:53:6f:1e:b2:aa:31:cd:d1:b2: e9:3c:3e:4a:57:e0:bf:a6:94:5a:b7:0c:3d:9b:12:70:8c:10: 48:0d:21:0d:24:71:96:fa:37:cc:81:71:d1:7f:1c:a4:ea:13: 36:da:8e:74:6c:c3:69:ed:2f:d1:b5:ff:2b:57:07:d0:ea:3b: d4:42:69:e0:d8:58:f0:85:0e:80:41:86:cb:cd:99:36:cf:e3: c3:78:0f:cf:53:25:63:8b:44:03:11:b1:55:5d:32:9f:28:1e: 6f:9f:3a:63:e2:ee:41:46:6d:51:1b:30:0e:bc:2c:cf:8e:48: 6b:19:f3:80:ac:d2:74:4a:d2:d3:3d:c8:25:37:6f:4b:5a:d2: 4d:73:36:20:2a:39:3f:5d:d3:65:d0:6d:75:c9:b4:56:cf:a4: 4e:11:1a:54:8b:3e:07:03:03:f8:01:49:65:cb:67:6e:f5:be: 6d:f0:27:99:2e:13:22:c9:0a:18:60:0a:cf:a4:74:c4:7e:86: 9d:23:af:d6:52:29:b9:69:23:ea:0f:2f:c9:c6:3f:b8:3f:3d: 6f:8e:35:7d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9yx/7WtOz6gLBfJNN4coDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODVkMDRlNmM1MGJhOTA2ZjlhYzExYzJlNzViZjNmNWQxMDQyYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvjpIsvse32ADIS4AMcWOjsHfOM j6O6cDLwXo/bHHSmBc2QsabiUbRTQw2MLYOaZk9c44oTuwwCyQcoElK7KUn1L+rv H7eYzwVq+XBpSZ2htqMs1cBLAmJupYJhgUICz0cm8O53FGBUikpKymBB05Asf1Oz 4hILU2qXaDGupVVanWxCj6gObX6LhY/OGgXUv7iCyUuG3mWbXgDsP1X2eiQlbhpQ 4Qw2+waUW5pimCdkRsU2V54l57ep2lTo1kkwPYqv48ryFegKNBZiA14AVzHHDZBS sh3QPyf/GhJq4+/ym9InATWXCTqh7987uB09BkzMZ/5eEbUFzh/jmg9LwwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPhdBObFC6kG+awRwudb8/XRBCpiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2UzYWEz MS05NjRmLTRhODEtYmNlZS1kZThjMjYyMDJiMTcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTNhYTMx LTk2NGYtNGE4MS1iY2VlLWRlOGMyNjIwMmIxNy8xLzEtRjBFNXNVTHFRYjVyQkhD NTF2ejlkRUVLbUkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvGADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAqJwwDQYJKoZIhvcNAQELBQADggEBAKOshqbeE9kcTirJex78wZKJ88nuV+yP j+BUjKFtRguf84xqD2SCQt4n0YlYZlNvHrKqMc3Rsuk8PkpX4L+mlFq3DD2bEnCM EEgNIQ0kcZb6N8yBcdF/HKTqEzbajnRsw2ntL9G1/ytXB9DqO9RCaeDYWPCFDoBB hsvNmTbP48N4D89TJWOLRAMRsVVdMp8oHm+fOmPi7kFGbVEbMA68LM+OSGsZ84Cs 0nRK0tM9yCU3b0ta0k1zNiAqOT9d02XQbXXJtFbPpE4RGlSLPgcDA/gBSWXLZ271 vm3wJ5kuEyLJChhgCs+kdMR+hp0jr9ZSKblpI+oPL8nGP7g/PW+ONX0= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:46 2026 by rpki-client