This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.cer (raw, json) Hash identifier: tMSGZ2hnDZtMyYgMB2+NNTHRH9U+Y0/djUZ7dYrd5tE= Subject key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FD3B51DE9A2624E8B97B12903255 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202882 IP: 185.151.220.0/22 IP: 2a07:7bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fd:3b:51:de:9a:26:24:e8:b9:7b:12:90:32:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:81:dd:1f:36:39:31:d2:36:20:a9:67:ec: ad:8f:89:12:09:1d:2d:7c:fb:d5:95:5a:5a:e5:73: e2:d4:f7:24:d8:a7:5e:9c:d5:52:ef:37:4a:fb:d5: 31:1b:01:f0:b0:73:5b:b6:65:cb:6a:56:5e:7f:88: d5:43:7a:7c:cb:7b:16:7c:88:1e:33:01:b5:c1:9a: d0:43:42:19:8a:c6:39:23:dc:db:8a:39:b3:e2:18: 6e:22:7f:85:e3:46:41:f9:52:77:82:ff:12:5b:78: fc:13:3b:ee:c3:a3:5b:a6:58:c7:51:48:d2:39:2b: 67:29:d0:1b:60:4b:7c:bd:bb:3a:69:30:80:a6:41: 93:c7:24:f5:ad:f3:10:2a:24:eb:02:5f:ba:ca:fd: 26:65:78:86:f7:c2:6c:a9:db:15:6f:24:60:3e:62: a9:f3:71:f4:5e:72:a6:c1:ac:c1:a5:15:eb:77:a7: 3f:71:40:f3:25:aa:d9:6e:f8:01:dd:49:70:84:6d: 1b:53:df:01:a6:ba:de:77:35:b3:bc:5e:21:3d:5a: 4a:1a:cb:d3:2f:64:f2:37:bb:55:51:35:71:96:8e: 3c:97:a8:e0:55:ae:e7:c3:83:01:9a:5e:9e:85:8e: 8d:eb:1f:e3:45:a9:fa:b9:93:47:9f:a5:0f:a8:62: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.220.0/22 IPv6: 2a07:7bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202882 Signature Algorithm: sha256WithRSAEncryption 3a:fd:39:c1:a5:f7:1a:d6:35:e6:8d:b0:19:fc:65:a9:ff:e3: 9d:4e:65:cf:0c:d2:20:f9:fd:2d:ed:df:c1:a1:5e:9c:de:2e: 29:0a:42:cd:dd:b1:5f:46:9c:14:8c:d2:eb:15:b5:ac:71:8a: fa:a7:c8:a9:e4:9c:0e:82:72:65:85:21:d8:01:83:82:52:2a: c3:4a:b3:b4:bc:d9:be:e8:a8:c0:f1:0a:4f:a0:b8:c8:b2:ab: 34:d7:63:61:d5:bb:d1:6f:97:15:dc:7f:a9:b0:75:8d:dc:2e: 78:36:a0:76:ce:8d:3c:f2:16:6b:be:41:92:7d:db:69:30:d9: 2b:48:63:75:c1:ee:b6:0d:11:c9:13:2e:5c:7a:13:12:72:03: 80:f0:da:a5:8a:18:0b:10:f8:de:19:a5:00:1d:f5:88:dc:d4: fe:10:c6:b7:dc:c2:c6:47:cb:4c:af:ad:4f:21:6e:d4:60:9c: 1a:ba:94:48:90:26:5f:91:53:b7:18:ca:24:99:48:40:fa:1d: 4c:08:cf:6d:83:08:ce:ef:d7:6b:41:2d:66:f5:94:9b:3b:12: bb:4c:d8:d0:15:6f:7d:43:5f:75:07:8d:ee:89:21:02:42:43: 81:ce:12:53:9e:26:1b:e8:f6:ee:42:94:6e:45:28:c5:5d:f2: b6:e5:fa:3d -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4NP07Ud6aJiTouXsSkDJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTRmMmYyZTIxYmM5OGQwYzYxYjJjMTRjMGVlMDE5ZDMzMWVhZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxACB3R82OTHSNiCpZ+ytj4kSCR0t fPvVlVpa5XPi1Pck2KdenNVS7zdK+9UxGwHwsHNbtmXLalZef4jVQ3p8y3sWfIge MwG1wZrQQ0IZisY5I9zbijmz4hhuIn+F40ZB+VJ3gv8SW3j8Ezvuw6NbpljHUUjS OStnKdAbYEt8vbs6aTCApkGTxyT1rfMQKiTrAl+6yv0mZXiG98JsqdsVbyRgPmKp 83H0XnKmwazBpRXrd6c/cUDzJarZbvgB3UlwhG0bU98BprredzWzvF4hPVpKGsvT L2TyN7tVUTVxlo48l6jgVa7nw4MBml6ehY6N6x/jRan6uZNHn6UPqGLRgQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPlPLy4hvJjQxhssFMDuAZ0zHq5YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2RlMGQx Ni0yZjI0LTRjNTMtODRiOC01ZDk3YjE5ZmE1OTUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZGUwZDE2 LTJmMjQtNGM1My04NGI4LTVkOTdiMTlmYTU5NS8xLzEtVTh2TGlHOG1OREdHeXdV d080Qm5UTWVybGcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArmX3DANBAIAAjAHAwUDKgd7wDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDGIIwDQYJKoZIhvcNAQELBQADggEBADr9OcGl9xrW NeaNsBn8Zan/451OZc8M0iD5/S3t38GhXpzeLikKQs3dsV9GnBSM0usVtaxxivqn yKnknA6CcmWFIdgBg4JSKsNKs7S82b7oqMDxCk+guMiyqzTXY2HVu9FvlxXcf6mw dY3cLng2oHbOjTzyFmu+QZJ922kw2StIY3XB7rYNEckTLlx6ExJyA4Dw2qWKGAsQ +N4ZpQAd9Yjc1P4QxrfcwsZHy0yvrU8hbtRgnBq6lEiQJl+RU7cYyiSZSED6HUwI z22DCM7v12tBLWb1lJs7ErtM2NAVb31DX3UHje6JIQJCQ4HOElOeJhvo9u5ClG5F KMVd8rbl+j0= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:56 2026 by rpki-client