This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer (raw, json) Hash identifier: u1mCLC8gSUqOLjjyHz3XjxPvB6vAbNqBTtEjMAfzX1w= Subject key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73F445C7F7DB28C2EFF097B26F422 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208813 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3f:44:5c:7f:7d:b2:8c:2e:ff:09:7b:26:f4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:79:55:f5:d5:e6:f9:81:8a:5d:4c:01:42: 7d:80:6e:dd:0a:2b:42:d9:62:4a:d0:94:e6:57:9b: 9e:39:6e:5f:6f:0b:5a:6d:e9:3e:09:ef:83:81:16: d3:de:92:61:18:97:86:48:10:c9:b5:86:ff:21:af: bf:74:7c:4d:24:ff:0a:9d:58:38:91:4b:ab:7e:3c: c4:d6:b3:83:1e:b5:cb:07:4a:b4:eb:dd:88:2c:63: 07:74:1c:c0:6e:89:3b:33:e2:bc:52:1d:4d:37:20: 75:2a:71:e1:65:71:bf:b1:82:78:55:9a:33:83:0b: b6:5a:e4:78:b0:e9:2f:9e:87:09:f6:9f:33:61:c6: ab:0f:98:c8:fe:2f:5a:46:d9:ca:b2:57:2e:a0:6f: c7:08:5c:a7:28:eb:29:f9:4a:46:2b:2c:96:64:5b: db:44:54:55:96:13:05:06:1d:79:f1:40:4d:ed:98: 5d:ec:ff:f9:4b:25:33:58:7f:43:ff:b1:52:69:4b: 1c:16:b7:25:98:35:e6:98:a1:a8:ba:3d:2e:dd:c0: ee:58:24:47:a6:fe:94:b9:be:8e:cc:c5:27:fa:f3: 95:dc:9e:31:1f:d8:88:ee:19:f3:ad:09:f1:47:43: 4d:c6:d1:af:ca:a2:da:10:a3:9e:0e:f1:69:9b:88: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208813 Signature Algorithm: sha256WithRSAEncryption 69:31:47:ce:f1:bd:9e:e7:c3:f6:f3:9a:20:a3:f2:24:1a:61: ea:8f:89:01:6e:18:60:db:c9:9e:b4:38:75:ea:a0:98:e2:76: 91:47:f8:d9:db:1e:ad:a7:53:52:17:28:12:c7:87:6c:d6:60: 0b:57:ff:89:77:b2:69:07:7f:75:a3:a6:80:ff:9d:64:21:a0: db:27:5f:e6:e3:02:e4:10:95:36:05:03:d1:83:3e:00:bb:d3: 5a:cc:79:7f:64:7a:db:bc:e3:30:d6:af:7b:df:b4:8b:3d:31: 66:6a:91:ca:ed:15:f3:27:11:3f:3b:44:55:97:3c:68:b6:2a: 5f:1d:e8:26:00:d2:87:25:f6:fc:10:3d:56:8f:f6:17:fe:7e: 5b:e5:0d:c7:15:b8:10:5b:6a:2d:9e:2b:33:03:f4:81:28:1e: d1:ea:d9:cd:a8:0b:aa:ca:6a:bd:ba:f5:28:97:d7:94:24:4b: 22:82:89:a4:09:cb:c1:8f:0d:f4:41:51:06:74:70:e8:4a:44: 57:6e:b8:fb:5a:af:a9:b9:70:38:7e:96:ba:e3:09:51:60:0e: d8:4f:32:ef:e2:2b:96:ee:0f:a0:52:a5:cb:60:eb:a4:bc:11: bf:96:7b:b6:a6:46:1b:15:4b:f9:01:29:d1:84:cc:22:27:4c: 2c:2a:67:48 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt+pz9EXH99sowu/wl7JvQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGE3NmM2OTJlMmYzNjE5ZGU3OTgyMDU0OGVjYjVmYTdjMzBhMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLx5VfXV5vmBil1MAUJ9gG7dCitC 2WJK0JTmV5ueOW5fbwtabek+Ce+DgRbT3pJhGJeGSBDJtYb/Ia+/dHxNJP8KnVg4 kUurfjzE1rODHrXLB0q0692ILGMHdBzAbok7M+K8Uh1NNyB1KnHhZXG/sYJ4VZoz gwu2WuR4sOkvnocJ9p8zYcarD5jI/i9aRtnKslcuoG/HCFynKOsp+UpGKyyWZFvb RFRVlhMFBh158UBN7Zhd7P/5SyUzWH9D/7FSaUscFrclmDXmmKGouj0u3cDuWCRH pv6Uub6OzMUn+vOV3J4xH9iI7hnzrQnxR0NNxtGvyqLaEKOeDvFpm4huzwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPinbGkuLzYZ3nmCBUjstfp8MKGBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2NmMGVk Ni01ZDhkLTQ3ZmYtYmQ4Ni1hNWRlODZlZGY4M2UvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2YwZWQ2 LTVkOGQtNDdmZi1iZDg2LWE1ZGU4NmVkZjgzZS8xLzEtS2RzYVM0dk5obmVlWUlG U095MS1ud3dvWUUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDL60wDQYJKoZIhvcNAQELBQADggEBAGkxR87xvZ7n w/bzmiCj8iQaYeqPiQFuGGDbyZ60OHXqoJjidpFH+NnbHq2nU1IXKBLHh2zWYAtX /4l3smkHf3WjpoD/nWQhoNsnX+bjAuQQlTYFA9GDPgC701rMeX9ketu84zDWr3vf tIs9MWZqkcrtFfMnET87RFWXPGi2Kl8d6CYA0ocl9vwQPVaP9hf+flvlDccVuBBb ai2eKzMD9IEoHtHq2c2oC6rKar269SiX15QkSyKCiaQJy8GPDfRBUQZ0cOhKRFdu uPtar6m5cDh+lrrjCVFgDthPMu/iK5buD6BSpctg66S8Eb+We7amRhsVS/kBKdGE zCInTCwqZ0g= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:55 2026 by rpki-client