This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer (raw, json) Hash identifier: 8BPjEoxfBR7FBpQCnBC6ynlFyt/YAZ+wnSYWtFtide8= Subject key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E6667BE6EB77959A6C315F564BCA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 157.97.68.0/22 IP: 185.20.236.0/22 IP: 185.232.188.0/22 IP: 2a00:5320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:66:67:be:6e:b7:79:59:a6:c3:15:f5:64:bc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:77:94:6a:8b:ee:05:f9:d5:77:b1:08:86: 96:8e:0e:9d:ba:b4:7d:8c:de:b3:00:9e:86:8b:fe: 0d:ef:49:03:f8:e8:d5:47:28:f8:e7:01:91:68:78: 09:04:c9:76:74:d2:e5:ae:6b:57:ed:ef:77:b4:14: 3d:e0:eb:cb:9e:6c:b8:f8:45:dd:e8:86:66:7e:10: 05:c3:62:b6:0e:0a:41:5e:34:9c:91:74:89:c8:3e: 0f:e3:c4:7c:57:63:8c:5b:eb:93:0a:36:31:8c:e4: ef:55:78:b2:ff:f1:3a:78:3b:f8:1f:b5:16:89:0f: 8b:f6:3c:92:04:c3:bd:87:d7:20:c1:f8:3c:6b:da: 35:b8:15:13:de:2f:f6:42:11:35:96:51:a7:cb:07: 8c:9a:fc:28:e5:81:4c:51:61:a5:ae:1c:ec:c9:69: 1d:d8:6b:d0:b0:b4:bf:05:fa:e6:b1:63:51:eb:bb: f8:06:81:6c:17:60:07:8a:ac:94:c8:09:c8:ef:e9: 10:ca:ce:20:93:18:29:bf:47:31:f5:b5:51:a6:a8: 8a:b6:ea:37:56:ae:0f:ab:dd:05:d3:eb:a2:3e:07: 13:68:c2:07:87:cd:95:c7:d0:7e:05:46:8c:b2:8c: ee:60:f5:7e:9d:21:39:91:80:3c:68:3a:7c:41:76: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.68.0/22 185.20.236.0/22 185.232.188.0/22 IPv6: 2a00:5320::/32 Signature Algorithm: sha256WithRSAEncryption 08:57:1f:b7:e9:1b:d6:3b:61:b1:76:4f:ec:f9:a7:0e:d0:69: 4d:30:c3:c2:1b:06:1d:73:db:d8:6a:ae:11:7c:57:a9:14:a5: 4c:ac:98:50:56:5d:79:6e:5b:77:c3:20:c1:00:38:54:f7:67: 43:e2:e5:d2:94:9e:e2:03:2d:83:d1:e4:74:fa:e4:6a:1b:85: 22:f1:29:57:0a:6c:cb:1b:2e:82:51:d8:1d:30:a5:00:fc:18: 99:9d:da:f7:c8:88:92:61:ce:a4:20:f0:95:f7:10:8a:4e:10: b9:12:7f:83:85:27:f3:bb:67:b9:d3:ad:ca:8e:15:f9:7d:59: 2c:1e:42:39:29:e7:63:23:23:01:11:1a:46:98:a1:dc:96:89: c7:db:62:ab:15:8d:02:c4:1c:e9:24:52:7f:5a:f6:bc:e4:b8: 4e:26:ec:a3:1f:3f:77:70:ec:3e:f6:82:4d:93:7b:93:1e:9d: 3f:6b:67:4a:4e:09:5e:6a:c4:2d:5e:63:84:d9:07:65:ce:c8: 19:f5:b1:1c:95:58:de:ae:01:13:6a:30:2c:61:73:8b:d8:39: 96:ca:32:b3:05:06:f2:36:a6:9e:28:6a:58:b5:6f:37:d6:e8: 5c:4e:90:fb:a0:e6:2f:ca:f1:f1:0c:a6:d7:fe:ab:63:7e:ba: 46:30:28:48 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fmZnvm63eVmmwxX1ZLyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGZjMzU5MGJmNDlhZmI0MmNlNDRhOGMxNzRjNDQxNjFiOGZjMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhN3lGqL7gX51XexCIaWjg6durR9 jN6zAJ6Gi/4N70kD+OjVRyj45wGRaHgJBMl2dNLlrmtX7e93tBQ94OvLnmy4+EXd 6IZmfhAFw2K2DgpBXjSckXSJyD4P48R8V2OMW+uTCjYxjOTvVXiy//E6eDv4H7UW iQ+L9jySBMO9h9cgwfg8a9o1uBUT3i/2QhE1llGnyweMmvwo5YFMUWGlrhzsyWkd 2GvQsLS/BfrmsWNR67v4BoFsF2AHiqyUyAnI7+kQys4gkxgpv0cx9bVRpqiKtuo3 Vq4Pq90F0+uiPgcTaMIHh82Vx9B+BUaMsozuYPV+nSE5kYA8aDp8QXamAwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPj8NZC/Sa+0LORKjBdMRBYbj8IJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2ExZTZm Mi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQzZDkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYy LWRkNWEtNDQ4My04ZmRiLWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFN RjB4RUZodVB3Z2subWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEAp1hRAMEArkU7AMEArnovDANBAIAAjAHAwUA KgBTIDANBgkqhkiG9w0BAQsFAAOCAQEACFcft+kb1jthsXZP7PmnDtBpTTDDwhsG HXPb2GquEXxXqRSlTKyYUFZdeW5bd8MgwQA4VPdnQ+Ll0pSe4gMtg9HkdPrkahuF IvEpVwpsyxsuglHYHTClAPwYmZ3a98iIkmHOpCDwlfcQik4QuRJ/g4Un87tnudOt yo4V+X1ZLB5COSnnYyMjAREaRpih3JaJx9tiqxWNAsQc6SRSf1r2vOS4Tibsox8/ d3DsPvaCTZN7kx6dP2tnSk4JXmrELV5jhNkHZc7IGfWxHJVY3q4BE2owLGFzi9g5 lsoyswUG8jamnihqWLVvN9boXE6Q+6DmL8rx8Qym1/6rY366RjAoSA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:02:57 2026 by rpki-client