This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.cer (raw, json) Hash identifier: WDOn2aqiwBDoUs+uwfA2wea40F8gZILmqFhM5DH3xFE= Subject key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E16E75119454A6F60841D02F44056 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204179 AS: 207150 IP: 109.74.24.0/22 IP: 2001:67c:2658::/48 IP: 2a0d:41c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:16:e7:51:19:45:4a:6f:60:84:1d:02:f4:40:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:75:df:68:8a:7a:e5:95:9f:c4:58:10:3a: 29:cf:ba:e3:58:7a:67:8d:3b:e6:65:78:1d:97:c5: aa:9a:7c:f5:d4:05:5c:3c:16:cf:94:d5:60:4f:9e: 4a:b0:80:0c:19:49:42:70:4f:4c:a9:12:f5:eb:ce: 4f:43:4c:11:63:fa:a9:9b:69:f1:d1:6d:78:2e:43: e7:59:76:b6:cf:d4:2b:85:47:90:3c:24:29:05:1a: 98:c4:3b:f7:63:0c:ef:dd:2d:e0:49:74:b8:78:ba: db:54:71:c0:92:46:30:79:0f:5d:a9:a7:25:d5:e7: 21:08:04:ef:82:11:90:cb:8a:6c:bb:96:a8:65:36: 07:16:47:e9:12:d3:32:45:08:eb:fd:41:b4:fe:a7: 25:2e:57:9b:5a:79:51:7c:f4:65:70:58:ad:fe:70: f2:f8:c8:f2:b5:11:ef:36:6f:59:1a:78:5f:2a:8f: 39:93:f6:72:88:09:d9:e4:be:46:c4:0b:5e:4d:be: 4f:e9:c2:6a:ea:b6:ca:d4:11:4c:da:35:ae:15:44: ab:2b:9f:c8:73:ac:c4:2b:d9:4e:b4:cc:ad:f5:da: b2:58:02:89:f2:73:52:ea:f7:00:60:b6:a5:48:32: 0f:27:ca:71:44:77:26:4b:4d:8d:0e:18:86:58:a1: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.24.0/22 IPv6: 2001:67c:2658::/48 2a0d:41c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204179 207150 Signature Algorithm: sha256WithRSAEncryption 1b:96:e2:c2:8c:b6:f8:af:ea:f0:92:ce:c2:00:a1:ce:d1:c8: ef:9a:01:cc:69:49:5d:6e:25:09:68:2e:e8:99:e9:80:6b:3f: 93:84:f0:78:fa:d6:63:54:2c:5c:8a:5d:82:7e:f1:79:4a:cb: 3a:13:1d:61:98:02:dd:13:c4:36:e4:4d:f0:23:0e:06:5c:b1: bd:dc:f4:6b:ed:46:ee:d5:0a:b3:0d:32:f5:2d:a3:ab:fd:05: 96:09:d3:54:9c:02:8e:e9:75:63:08:62:0f:a4:5c:98:ef:9f: d4:00:bd:18:43:8d:11:20:b4:c8:ff:53:56:e4:2c:5e:36:f3: c6:0c:82:3c:90:cb:d1:8d:8c:a3:b7:e5:78:b6:17:f2:db:b1: 5d:e1:16:38:e9:04:d7:36:d8:9f:6c:9c:5a:9e:ad:9c:65:c0: 57:57:f3:5b:e7:0a:3d:cb:06:85:55:4e:5a:27:ad:f0:f2:1b: 42:80:9c:8a:59:24:3c:61:c1:67:2f:f1:17:7a:c6:1b:b1:c9: 55:fd:bd:7c:d3:79:88:e3:2e:90:28:e1:53:55:01:cf:83:fa: a0:f4:2d:21:4a:19:d8:ae:b7:e9:c8:41:6d:98:0b:d5:d8:4f: c0:c9:99:30:13:c4:e2:59:30:1f:a0:f4:d3:a0:eb:cc:85:59: 37:2a:ec:d5 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt5fhbnURlFSm9ghB0C9EBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTIwNzU1YmY2N2JhN2Q3YjRkM2QwMDEwMjc2MDRlYTI5YjIzZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtl132iKeuWVn8RYEDopz7rjWHpn jTvmZXgdl8Wqmnz11AVcPBbPlNVgT55KsIAMGUlCcE9MqRL1685PQ0wRY/qpm2nx 0W14LkPnWXa2z9QrhUeQPCQpBRqYxDv3Ywzv3S3gSXS4eLrbVHHAkkYweQ9dqacl 1echCATvghGQy4psu5aoZTYHFkfpEtMyRQjr/UG0/qclLlebWnlRfPRlcFit/nDy +MjytRHvNm9ZGnhfKo85k/ZyiAnZ5L5GxAteTb5P6cJq6rbK1BFM2jWuFUSrK5/I c6zEK9lOtMyt9dqyWAKJ8nNS6vcAYLalSDIPJ8pxRHcmS02NDhiGWKEn0wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFPkgdVv2e6fXtNPQAQJ2BOopsj7RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzZiN2Mz ZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZmZDcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNk LTg0Y2MtNGM3MC1iYzZmLTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFC QW5ZRTZpbXlQdEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEF BQcBBwEB/wQoMCYwDAQCAAEwBgMEAm1KGDAWBAIAAjAQAwcAIAEGfCZYAwUDKg1B wDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDHZMCAwMpLjANBgkqhkiG9w0BAQsF AAOCAQEAG5biwoy2+K/q8JLOwgChztHI75oBzGlJXW4lCWgu6JnpgGs/k4TwePrW Y1QsXIpdgn7xeUrLOhMdYZgC3RPENuRN8CMOBlyxvdz0a+1G7tUKsw0y9S2jq/0F lgnTVJwCjul1YwhiD6RcmO+f1AC9GEONESC0yP9TVuQsXjbzxgyCPJDL0Y2Mo7fl eLYX8tuxXeEWOOkE1zbYn2ycWp6tnGXAV1fzW+cKPcsGhVVOWiet8PIbQoCcilkk PGHBZy/xF3rGG7HJVf29fNN5iOMukCjhU1UBz4P6oPQtIUoZ2K636chBbZgL1dhP wMmZMBPE4lkwH6D006DrzIVZNyrs1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:19 2026 by rpki-client