This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer (raw, json) Hash identifier: fO7hhkhfVDl0iJG1FHqC+iz4jelCVLWReD2v4L/FaSg= Subject key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF26B041BF297D8F96CDFCD3A9945CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.0.72.0/21 IP: 151.106.224.0/20 IP: 185.16.216.0/22 IP: 2a03:d040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6b:04:1b:f2:97:d8:f9:6c:df:cd:3a:99:45:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:c8:66:9b:28:f3:25:d8:06:13:9f:65:21: e1:c2:2b:5d:ad:0f:3f:6e:3c:ce:35:9b:5d:0e:b4: 07:86:94:43:83:a6:8d:03:a9:22:99:4a:50:6f:8e: a3:05:0c:a7:bd:10:39:a5:96:9a:65:01:2c:2e:b0: 64:b5:8f:95:16:43:af:6a:bd:92:41:c7:0e:98:ba: 56:eb:a5:12:ae:dd:50:5c:b1:98:aa:1d:76:4c:d1: 73:2e:1b:0d:6f:5f:5f:eb:c0:d4:a5:32:77:5f:db: f8:0f:8a:89:44:82:ee:10:95:5d:cf:70:27:5e:68: ab:f0:14:ff:b6:21:e1:4c:06:91:57:dd:22:06:f7: 51:2b:7a:b8:fd:f0:01:64:63:2f:74:b2:5f:f8:e7: 17:48:36:e6:f1:f7:4c:a0:81:0a:b0:5e:11:e5:cc: 7b:2e:57:6a:57:cc:c8:0a:0d:67:e9:83:22:34:8d: 52:1f:eb:51:1f:42:8d:6d:52:fe:34:69:7d:ca:19: 74:0c:22:0f:b5:81:cb:36:70:eb:25:2e:b2:eb:2c: c8:b4:1e:60:e2:a9:80:c2:89:8e:70:59:7a:5c:3b: df:47:38:61:b1:02:ee:96:44:a9:2d:bb:3f:00:b5: 24:e5:d6:c8:50:a3:3c:c9:ba:54:38:54:9c:bf:8b: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.0.72.0/21 151.106.224.0/20 185.16.216.0/22 IPv6: 2a03:d040::/32 Signature Algorithm: sha256WithRSAEncryption 84:65:0b:02:71:4b:e2:8a:cc:16:45:7a:02:10:bf:a7:ea:25: df:df:a1:e9:bb:5e:49:76:5d:a4:c2:f7:0d:03:9e:f8:4d:88: e9:4b:2f:1b:af:75:57:ed:0a:d5:f7:dd:5f:d9:3a:9f:ed:18: 76:3c:7c:c3:d5:b2:fd:23:3d:49:2c:28:96:fc:82:2a:a0:27: 0b:2e:ab:ff:61:e0:77:fd:9f:61:70:c8:9a:bf:5d:79:d9:75: 6f:d7:a8:5f:11:1c:8d:cd:eb:47:06:71:4b:1e:64:a7:aa:a1: 6f:35:ae:12:87:c9:dc:38:78:52:30:5f:3f:b3:e7:ff:65:8e: e8:45:29:36:eb:f4:a5:29:73:fe:de:4e:6f:29:c7:7e:67:11: 70:18:fa:18:ff:27:64:04:99:c6:3f:48:dc:0b:50:a2:a1:f0: 7a:8e:9b:b2:cd:69:eb:07:96:b1:8b:de:07:0b:a1:57:31:40: 64:07:f6:8b:a7:84:c8:df:44:31:20:87:72:86:c5:b2:a1:23: c8:31:73:88:69:63:06:a0:50:ac:d5:cc:01:01:6f:2c:5d:96: 6b:19:b1:83:81:78:e3:4d:a7:e1:b5:39:a9:f7:bc:21:94:0d: b3:a2:fe:54:0b:8b:ee:ca:e3:8d:d1:40:a3:11:80:6c:5d:1f: 10:e6:cf:51 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8msEG/KX2Pls3806mUXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIzZTFiMjNlMzRiMTNmNmY3ZWYyYjFlN2ZhNzdkYTIwZmU2NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvIZpso8yXYBhOfZSHhwitdrQ8/ bjzONZtdDrQHhpRDg6aNA6kimUpQb46jBQynvRA5pZaaZQEsLrBktY+VFkOvar2S QccOmLpW66USrt1QXLGYqh12TNFzLhsNb19f68DUpTJ3X9v4D4qJRILuEJVdz3An Xmir8BT/tiHhTAaRV90iBvdRK3q4/fABZGMvdLJf+OcXSDbm8fdMoIEKsF4R5cx7 LldqV8zICg1n6YMiNI1SH+tRH0KNbVL+NGl9yhl0DCIPtYHLNnDrJS6y6yzItB5g 4qmAwomOcFl6XDvfRzhhsQLulkSpLbs/ALUk5dbIUKM8ybpUOFScv4uGwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPiz4bI+NLE/b37ysef6d9og/mQSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2RjZjVl ZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNiM2IvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVk LWExY2ItNDk2My04OGFmLTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4 NV9wMzJpRC1aQkkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEA4YASAMEBJdq4AMEArkQ2DANBAIAAjAHAwUA KgPQQDANBgkqhkiG9w0BAQsFAAOCAQEAhGULAnFL4orMFkV6AhC/p+ol39+h6bte SXZdpML3DQOe+E2I6UsvG691V+0K1ffdX9k6n+0Ydjx8w9Wy/SM9SSwolvyCKqAn Cy6r/2Hgd/2fYXDImr9dedl1b9eoXxEcjc3rRwZxSx5kp6qhbzWuEofJ3Dh4UjBf P7Pn/2WO6EUpNuv0pSlz/t5ObynHfmcRcBj6GP8nZASZxj9I3AtQoqHweo6bss1p 6weWsYveBwuhVzFAZAf2i6eEyN9EMSCHcobFsqEjyDFziGljBqBQrNXMAQFvLF2W axmxg4F4402n4bU5qfe8IZQNs6L+VAuL7srjjdFAoxGAbF0fEObPUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:35 2026 by rpki-client