This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer (raw, json) Hash identifier: QGcC3Viaqj0OtpXH3r7l8dTfXc6a8BvalfyKytTvEb4= Subject key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F825C784F5787CC269C0AF41E009352 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212014 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:5c:78:4f:57:87:cc:26:9c:0a:f4:1e:00:93:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f91084f454139347933876d52634b41a1dd099db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:8d:bb:1b:e0:6b:9a:3d:03:38:76:db:aa: 18:be:03:7a:b3:e5:7e:cb:8a:8f:71:84:09:41:24: d1:fe:5a:eb:98:0b:b8:ce:b3:e3:52:58:59:40:68: 11:79:d1:32:93:6a:4e:a5:ab:2a:af:2b:65:f7:3b: 87:af:35:20:41:b6:f5:2f:37:2d:4b:66:34:dd:d3: 2e:cd:00:b6:4b:40:2f:c6:b9:85:4a:4f:28:b7:c7: 75:7e:35:42:ed:ec:e5:bd:11:a2:a0:31:3c:f3:f0: 6e:ff:e1:f5:e5:09:29:23:45:fe:5d:53:73:5c:d9: ab:55:37:cd:d5:55:06:46:c2:25:8d:90:45:63:99: a3:c6:4c:6b:1d:7b:e2:d6:f3:5c:cf:33:42:48:a9: d8:1a:e0:68:fc:2f:d5:50:b9:84:a6:9f:09:ea:41: d9:8c:98:50:f9:77:91:c3:15:f7:af:2d:eb:bc:76: 22:14:9f:18:f5:dc:d4:01:cb:48:70:91:a9:67:c4: c3:04:b8:a2:73:0b:93:f3:3e:a1:ff:bb:4d:9f:14: 4b:78:c1:60:18:2b:d2:e8:0b:e2:b2:d2:89:79:7a: ed:d1:f5:83:7a:f5:e9:7a:6a:4f:09:14:5c:59:f5: 8f:87:c7:0f:9e:5f:f5:82:71:c3:25:b6:cc:3e:b9: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212014 Signature Algorithm: sha256WithRSAEncryption 7a:01:5d:d1:4b:2b:d9:a6:1c:61:84:54:52:67:b0:dc:53:50: d7:8e:ca:bc:a4:81:47:73:1b:6e:b8:af:0c:38:d2:9e:4e:50: ff:35:da:62:ea:85:1a:0b:5a:4d:39:24:48:d9:cb:0f:21:2f: 2e:2a:32:6f:76:d0:af:f1:84:3c:1f:eb:9b:eb:71:cf:0e:66: 1e:9d:c8:68:50:eb:7a:22:d6:37:cc:46:97:5a:28:02:33:be: 26:e9:a8:19:8f:85:19:9d:28:de:d6:ad:c9:b6:b0:b0:98:66: 2d:23:8d:7b:37:7d:00:f9:08:6e:24:ee:0c:b0:54:d9:7e:00: 53:3d:97:39:63:76:9e:8e:30:7a:ef:54:cc:1b:68:a1:e7:20: a8:14:74:a4:69:2a:19:52:80:b4:5d:87:37:ae:fa:4e:ce:6e: 0b:58:97:3c:e0:05:23:2d:b5:92:57:a1:c9:d7:f6:14:d3:c8: 19:61:ad:e0:9d:72:57:69:e5:b5:ed:88:7c:27:85:66:a6:6d: 57:53:ab:43:2b:3c:27:26:78:50:36:cc:bd:bb:07:33:3c:d4: f8:e9:3f:70:fa:04:6e:75:b4:27:5b:33:37:82:53:01:f4:3a: 30:74:ec:21:ea:39:21:36:bf:80:93:f9:28:ac:99:a3:8e:78: ce:1e:60:6b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt/glx4T1eHzCacCvQeAJNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTEwODRmNDU0MTM5MzQ3OTMzODc2ZDUyNjM0YjQxYTFkZDA5OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtASNuxvga5o9Azh226oYvgN6s+V+ y4qPcYQJQSTR/lrrmAu4zrPjUlhZQGgRedEyk2pOpasqrytl9zuHrzUgQbb1Lzct S2Y03dMuzQC2S0AvxrmFSk8ot8d1fjVC7ezlvRGioDE88/Bu/+H15QkpI0X+XVNz XNmrVTfN1VUGRsIljZBFY5mjxkxrHXvi1vNczzNCSKnYGuBo/C/VULmEpp8J6kHZ jJhQ+XeRwxX3ry3rvHYiFJ8Y9dzUActIcJGpZ8TDBLiicwuT8z6h/7tNnxRLeMFg GCvS6AvistKJeXrt0fWDevXpempPCRRcWfWPh8cPnl/1gnHDJbbMPrllNQIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPkQhPRUE5NHkzh21SY0tBod0JnbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1Lzk0ZDll Yi0yMmRhLTQ3NWYtYmYzYS0xYTZmZDJjNDQ4MTYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOTRkOWVi LTIyZGEtNDc1Zi1iZjNhLTFhNmZkMmM0NDgxNi8xLzEtUkNFOUZRVGswZVRPSGJW SmpTMEdoM1FtZHMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPC4wDQYJKoZIhvcNAQELBQADggEBAHoBXdFLK9mm HGGEVFJnsNxTUNeOyrykgUdzG264rww40p5OUP812mLqhRoLWk05JEjZyw8hLy4q Mm920K/xhDwf65vrcc8OZh6dyGhQ63oi1jfMRpdaKAIzvibpqBmPhRmdKN7Wrcm2 sLCYZi0jjXs3fQD5CG4k7gywVNl+AFM9lzljdp6OMHrvVMwbaKHnIKgUdKRpKhlS gLRdhzeu+k7ObgtYlzzgBSMttZJXocnX9hTTyBlhreCdcldp5bXtiHwnhWambVdT q0MrPCcmeFA2zL27BzM81PjpP3D6BG51tCdbMzeCUwH0OjB07CHqOSE2v4CT+Sis maOOeM4eYGs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:10 2026 by rpki-client