This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer (raw, json) Hash identifier: GqyckzOTWxYF3BBYob++n3YOIkSEWHid0qS+EcZXQzk= Subject key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100C1D0F248164D6D260459D03227E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211527 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0c:1d:0f:24:81:64:d6:d2:60:45:9d:03:22:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b770160553760c3567df51a847ed6c529c0789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:39:68:4a:83:bb:44:1f:14:02:5b:86:02: b6:66:29:23:55:02:4f:7f:d6:71:5a:0f:df:cd:ae: 85:2c:13:e0:8b:63:94:49:cd:2d:00:0a:1a:15:41: 8e:98:fd:cc:5b:21:dd:44:45:f1:3c:3a:ab:58:94: 6e:9f:7d:b7:b5:a6:b4:c6:72:d5:a5:82:75:a7:6f: d8:74:41:46:5e:88:71:dd:33:12:bb:1b:57:9e:9f: c1:dc:d7:3f:b2:42:0b:fa:fe:32:b1:fa:77:ca:16: 2d:ab:47:fe:0f:0c:bf:3d:41:f0:4c:13:5b:13:e7: e4:05:c0:28:72:4b:51:f3:42:e3:00:82:06:b6:22: 20:92:e2:03:79:74:ab:0f:10:8b:40:1d:72:fa:a0: 16:77:6c:45:4b:6c:a2:26:59:fc:05:5b:f8:e9:5a: 35:cc:a4:e8:8c:7b:76:90:fb:b1:f8:9c:86:0c:39: 1a:84:73:f6:59:45:74:8d:4c:fe:03:f5:91:e0:13: 63:fa:9d:5a:7d:0c:1b:18:98:a6:90:b0:1e:57:6e: 5c:45:db:48:2c:be:42:33:73:24:09:15:ae:d1:6c: 83:a0:cd:f8:86:31:78:7d:79:ed:c2:68:e0:8d:1b: 3d:1f:86:9f:62:35:f7:01:ea:6c:75:90:fb:70:0a: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211527 Signature Algorithm: sha256WithRSAEncryption 2f:7d:4d:f0:ec:76:a0:c5:4d:57:22:47:b2:10:20:d6:9f:c2: d0:34:ed:69:62:b5:60:73:5b:34:e9:10:67:b7:68:ac:0d:99: 84:45:c5:c6:79:ba:ba:bc:cc:bd:81:4f:8c:f7:bf:ea:2e:35: 72:c0:03:a3:7c:70:75:10:2b:09:53:0f:e6:55:b8:fe:ba:26: fa:02:1e:b7:21:72:1c:cd:72:be:ac:d4:d2:48:c6:b4:0c:c6: cb:06:c5:23:eb:a7:c1:85:b5:2d:bd:ff:30:af:52:03:05:9e: 9b:d7:f7:43:bf:e0:e5:bc:5a:f9:5f:7c:01:67:45:79:13:83: e2:25:4d:d6:d2:c9:7e:e1:5c:6a:de:6b:03:17:49:03:39:96: fd:9b:37:40:4f:33:e2:60:7a:89:db:12:c4:f2:10:0a:18:a2: 9a:ff:60:e1:f9:38:e4:9a:83:5e:66:ae:68:b8:20:65:d4:87: 19:ff:dc:b5:d7:55:dc:57:bf:fe:4f:97:b5:76:23:75:78:80: 0b:f5:f5:c2:97:9e:b0:8f:e6:a6:95:21:98:d3:12:81:2f:05: 8d:cb:2b:31:8d:db:52:cb:dc:99:cb:99:b9:30:5a:f8:5a:38: 9a:44:4a:6e:87:b8:39:83:ea:6b:a0:11:e0:88:08:98:0d:8b: 1e:de:92:5c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt5EAwdDySBZNbSYEWdAyJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI3NzAxNjA1NTM3NjBjMzU2N2RmNTFhODQ3ZWQ2YzUyOWMwNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAk5aEqDu0QfFAJbhgK2ZikjVQJP f9ZxWg/fza6FLBPgi2OUSc0tAAoaFUGOmP3MWyHdREXxPDqrWJRun323taa0xnLV pYJ1p2/YdEFGXohx3TMSuxtXnp/B3Nc/skIL+v4ysfp3yhYtq0f+Dwy/PUHwTBNb E+fkBcAocktR80LjAIIGtiIgkuIDeXSrDxCLQB1y+qAWd2xFS2yiJln8BVv46Vo1 zKTojHt2kPux+JyGDDkahHP2WUV0jUz+A/WR4BNj+p1afQwbGJimkLAeV25cRdtI LL5CM3MkCRWu0WyDoM34hjF4fXntwmjgjRs9H4afYjX3AepsdZD7cAosMwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPi3cBYFU3YMNWffUahH7WxSnAeJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzMyNTNh Yy04ZmE3LTQyNWItOGE5MC05YjliNDAxNDU5ZTYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMzI1M2Fj LThmYTctNDI1Yi04YTkwLTliOWI0MDE0NTllNi8xLzEtTGR3RmdWVGRndzFaOTlS cUVmdGJGS2NCNGsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDOkcwDQYJKoZIhvcNAQELBQADggEBAC99TfDsdqDF TVciR7IQINafwtA07WlitWBzWzTpEGe3aKwNmYRFxcZ5urq8zL2BT4z3v+ouNXLA A6N8cHUQKwlTD+ZVuP66JvoCHrchchzNcr6s1NJIxrQMxssGxSPrp8GFtS29/zCv UgMFnpvX90O/4OW8WvlffAFnRXkTg+IlTdbSyX7hXGreawMXSQM5lv2bN0BPM+Jg eonbEsTyEAoYopr/YOH5OOSag15mrmi4IGXUhxn/3LXXVdxXv/5Pl7V2I3V4gAv1 9cKXnrCP5qaVIZjTEoEvBY3LKzGN21LL3JnLmbkwWvhaOJpESm6HuDmD6mugEeCI CJgNix7eklw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:50 2026 by rpki-client