This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer File: 1-LGChfQu1nwR2Pg99IixD8h_F78.cer (raw, json) Hash identifier: dWdZJqnnsHYdwMsqAvGT0MMU3o4PMYlU52aUeeLhFHY= Subject key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD7344B832D966E49E6076D9595F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210238 IP: 81.22.224.0/22 IP: 185.132.228.0/22 IP: 2a06:e580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d7:34:4b:83:2d:96:6e:49:e6:07:6d:95:95:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:ac:90:89:f7:13:16:b3:8d:99:5d:b6:16: 2c:44:2b:a3:0d:54:3d:88:19:6f:7e:77:9c:52:86: 14:cf:aa:a6:0f:2a:e7:82:00:0e:2b:a3:06:f7:48: b8:49:08:fa:fc:dd:ce:17:53:7a:2d:83:65:25:d2: dc:6c:96:34:c3:9d:2a:95:e0:06:3d:0e:97:74:78: 4c:e1:20:3f:85:b6:59:49:18:d4:53:0e:2d:a6:a3: b8:7f:e0:a7:0b:f7:5c:4f:84:4a:21:b3:12:63:3c: 6a:b6:fb:a2:c8:19:13:7c:0e:e8:e2:72:13:45:2b: cc:20:aa:32:b8:e2:92:ca:fb:be:d7:15:7e:95:93: 7a:00:7d:3d:5d:fd:bb:4c:c9:e2:c2:e9:57:8e:e2: 15:b4:e0:43:7f:00:ad:57:f8:91:8d:f0:77:9f:91: 9b:70:7d:32:b9:51:1b:9e:67:94:72:10:e2:3a:39: 5e:7f:08:67:7b:69:a9:07:ae:c7:f1:61:df:99:9f: 56:ab:e2:a1:db:d5:a4:f0:62:10:7d:4e:5a:bd:81: c5:89:83:15:24:86:df:43:c6:74:bc:65:2a:87:7f: 52:d5:f2:4b:5c:0b:03:c7:b2:df:db:09:48:90:a8: a6:ab:ea:13:0e:33:f2:c5:95:b5:f5:dc:99:e8:be: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.224.0/22 185.132.228.0/22 IPv6: 2a06:e580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210238 Signature Algorithm: sha256WithRSAEncryption 8b:b1:de:7c:f6:6e:20:4e:06:4f:e8:d5:0e:e0:02:b4:22:cf: 79:0c:fb:51:30:f8:c5:d3:b9:9e:6e:49:4c:5d:ec:09:58:80: 68:c9:00:f4:e2:03:46:65:af:7c:fa:58:9b:b4:4d:b9:12:14: 81:e9:e7:60:09:9e:ad:4c:e9:b1:62:ac:46:d0:3a:38:85:8f: ca:d7:0e:d9:32:cb:49:be:f2:a8:c8:f8:84:bf:54:d2:64:2d: c2:86:00:67:5f:19:92:56:5f:c5:f2:78:7c:b2:2a:7c:58:0b: 66:4d:bc:00:c0:ec:3f:02:bb:68:d4:58:de:a0:77:2f:a2:d9: 3d:d9:4c:16:ba:0b:b7:94:7c:19:9a:ad:b4:8e:7e:d8:02:44: 3a:8e:cf:98:ee:b3:74:90:80:1d:c9:25:49:e2:e9:c9:77:28: 96:d1:ae:10:38:b6:24:f4:69:d0:c8:0d:9d:20:72:1d:a4:61: ff:0b:f7:3d:2c:0c:6e:e3:47:92:46:8d:05:ea:4b:6d:16:d1: b0:ab:38:3d:f8:c4:6c:c4:10:62:be:e5:ea:1e:aa:5f:a6:62: 0f:e6:15:20:67:d1:87:d5:30:13:59:ff:35:c4:8f:21:7c:86: d3:c8:f1:51:08:2c:68:ae:11:69:25:97:ea:0d:9b:21:00:26: 35:bb:6f:a4 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt57Nc0S4Mtlm5J5gdtlZX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIxODI4NWY0MmVkNjdjMTFkOGY4M2RmNDg4YjEwZmM4N2YxN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F2skIn3ExazjZldthYsRCujDVQ9 iBlvfnecUoYUz6qmDyrnggAOK6MG90i4SQj6/N3OF1N6LYNlJdLcbJY0w50qleAG PQ6XdHhM4SA/hbZZSRjUUw4tpqO4f+CnC/dcT4RKIbMSYzxqtvuiyBkTfA7o4nIT RSvMIKoyuOKSyvu+1xV+lZN6AH09Xf27TMniwulXjuIVtOBDfwCtV/iRjfB3n5Gb cH0yuVEbnmeUchDiOjlefwhne2mpB67H8WHfmZ9Wq+Kh29Wk8GIQfU5avYHFiYMV JIbfQ8Z0vGUqh39S1fJLXAsDx7Lf2wlIkKimq+oTDjPyxZW19dyZ6L4rFwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2IzMzFj Yy02YjZkLTQ2OTMtOTI2Ny1iNDIyNzc5MTYwYmIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNj LTZiNmQtNDY5My05MjY3LWI0MjI3NzkxNjBiYi8xLzEtTEdDaGZRdTFud1IyUGc5 OUlpeEQ4aF9GNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAlEW4AMEArmE5DANBAIAAjAHAwUDKgblgDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNT4wDQYJKoZIhvcNAQELBQADggEBAIux 3nz2biBOBk/o1Q7gArQiz3kM+1Ew+MXTuZ5uSUxd7AlYgGjJAPTiA0Zlr3z6WJu0 TbkSFIHp52AJnq1M6bFirEbQOjiFj8rXDtkyy0m+8qjI+IS/VNJkLcKGAGdfGZJW X8XyeHyyKnxYC2ZNvADA7D8Cu2jUWN6gdy+i2T3ZTBa6C7eUfBmarbSOftgCRDqO z5jus3SQgB3JJUni6cl3KJbRrhA4tiT0adDIDZ0gch2kYf8L9z0sDG7jR5JGjQXq S20W0bCrOD34xGzEEGK+5eoeql+mYg/mFSBn0YfVMBNZ/zXEjyF8htPI8VEILGiu EWkll+oNmyEAJjW7b6Q= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:55 2026 by rpki-client