This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.cer (raw, json) Hash identifier: UUPEycrbszp3hLSodbHvcvxX2TC11qOIrl+NT+my3pE= Subject key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D7C8A0D28E1F65A0A99FACB7998B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60207 AS: 60350 IP: 45.137.176.0/22 IP: 91.221.146.0/23 IP: 185.45.180.0/22 IP: 185.183.112.0/22 IP: 193.105.141.0/24 IP: 193.105.151.0/24 IP: 193.105.154.0/24 IP: 193.105.162.0/24 IP: 193.148.6.0/23 IP: 193.161.254.0/23 IP: 193.164.2.0/23 IP: 194.99.38.0/23 IP: 194.99.50.0/23 IP: 195.189.178.0/23 IP: 2a0b:c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:c8:a0:d2:8e:1f:65:a0:a9:9f:ac:b7:99:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9503c075a690556bd462122b24699e1b6b19278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:b4:41:95:2a:cc:e9:97:9f:4d:ce:8c:1e: d3:6b:85:2e:70:32:4e:00:16:30:9f:7d:86:71:cd: 0a:f1:e1:77:69:4d:45:f1:0c:ff:31:e1:1a:36:b5: b6:a8:15:b1:5d:5a:be:f3:3f:e4:c4:fe:60:8b:27: f9:53:83:49:fc:0a:76:bc:f1:99:ab:f6:f6:07:52: 78:ab:b3:92:a5:62:73:98:24:d0:80:52:fb:8c:fe: 8c:b2:d8:95:68:cd:fa:d7:ca:0c:ee:8e:b9:6c:84: 69:3b:a8:d8:24:81:05:3d:37:99:28:dd:a4:dd:aa: 96:55:10:2e:a3:d5:8b:93:03:f6:b0:b5:da:77:0d: 00:6a:10:ee:16:0d:c7:21:f3:92:af:73:51:1c:3d: d4:b5:ea:14:8b:cd:2f:36:83:5e:87:fa:b0:a9:0e: a3:0a:e8:ee:51:7a:f5:99:ad:52:3c:b5:cc:40:3e: 42:d1:c5:f0:f2:e4:43:5a:87:67:e7:98:b5:da:e2: 4b:24:ee:34:f2:ce:77:ca:3d:80:7e:ba:64:f6:0f: e8:2e:2e:d5:90:e3:57:55:9a:73:e8:8d:42:e7:f5: ea:a9:e3:f8:c7:6f:55:c9:ea:1b:2c:e1:1a:e9:23: d2:47:be:63:9c:32:4f:52:b4:05:fb:86:99:5f:7e: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.176.0/22 91.221.146.0/23 185.45.180.0/22 185.183.112.0/22 193.105.141.0/24 193.105.151.0/24 193.105.154.0/24 193.105.162.0/24 193.148.6.0/23 193.161.254.0/23 193.164.2.0/23 194.99.38.0/23 194.99.50.0/23 195.189.178.0/23 IPv6: 2a0b:c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60207 60350 Signature Algorithm: sha256WithRSAEncryption 53:69:0b:28:3f:5b:6a:84:c3:71:59:1b:e6:89:fc:4b:ef:e8: 22:e7:f6:c7:15:16:99:e8:4f:fc:51:db:74:a4:76:2e:39:3e: 6e:4a:cf:15:59:f0:2b:cd:e0:94:4b:51:92:ab:35:7e:34:0d: 09:df:e7:6f:c9:49:bb:52:16:51:25:cc:92:26:06:4d:8a:18: 23:03:49:3e:25:3d:01:2e:0e:e0:fc:d8:0a:75:6f:ad:b8:bf: 12:e0:46:29:4e:4a:52:41:ef:3e:79:35:7b:87:fa:04:b0:c8: 6a:af:4d:33:07:75:68:ee:b9:4c:1e:a4:a6:9d:e3:15:67:00: c4:25:d1:9b:b6:1b:de:e4:75:91:c5:ca:47:ab:a7:2f:cb:57: fe:41:da:e6:94:5c:ab:85:68:ff:bd:d9:6a:01:19:f2:05:6b: 25:8e:18:3a:13:9b:c9:a5:8d:7b:ea:55:63:be:48:d3:0b:42: 49:f9:e0:7e:1b:3e:ce:bc:c0:b9:cc:85:e6:7f:d6:3c:8d:c4: 8e:a6:81:a5:c1:02:55:df:70:72:f2:42:b0:3f:5e:47:c9:a6: 44:5f:41:ad:36:5a:66:41:bf:48:9e:0c:29:7b:d9:73:e9:25: 35:fc:97:d4:68:ce:0e:d4:25:06:23:7c:b6:2f:45:69:7d:e8: da:e9:4d:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt3WNfIoNKOH2WgqZ+st5mLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTUwM2MwNzVhNjkwNTU2YmQ0NjIxMjJiMjQ2OTllMWI2YjE5Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWi0QZUqzOmXn03OjB7Ta4UucDJO ABYwn32Gcc0K8eF3aU1F8Qz/MeEaNrW2qBWxXVq+8z/kxP5giyf5U4NJ/Ap2vPGZ q/b2B1J4q7OSpWJzmCTQgFL7jP6MstiVaM3618oM7o65bIRpO6jYJIEFPTeZKN2k 3aqWVRAuo9WLkwP2sLXadw0AahDuFg3HIfOSr3NRHD3UteoUi80vNoNeh/qwqQ6j CujuUXr1ma1SPLXMQD5C0cXw8uRDWodn55i12uJLJO408s53yj2Afrpk9g/oLi7V kONXVZpz6I1C5/XqqeP4x29VyeobLOEa6SPSR75jnDJPUrQF+4aZX36SrwIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzRmYTRi NC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUzZjUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0 LTdjOTYtNGViNy05OTQwLTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVp c2thWjRiYXhrbmcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB8BggrBgEF BQcBBwEB/wRtMGswWgQCAAEwVAMEAi2JsAMEAVvdkgMEArkttAMEArm3cAMEAMFp jQMEAMFplwMEAMFpmgMEAMFpogMEAcGUBgMEAcGh/gMEAcGkAgMEAcJjJgMEAcJj MgMEAcO9sjANBAIAAjAHAwUDKgsMgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA 6y8CAwDrvjANBgkqhkiG9w0BAQsFAAOCAQEAU2kLKD9baoTDcVkb5on8S+/oIuf2 xxUWmehP/FHbdKR2Ljk+bkrPFVnwK83glEtRkqs1fjQNCd/nb8lJu1IWUSXMkiYG TYoYIwNJPiU9AS4O4PzYCnVvrbi/EuBGKU5KUkHvPnk1e4f6BLDIaq9NMwd1aO65 TB6kpp3jFWcAxCXRm7Yb3uR1kcXKR6unL8tX/kHa5pRcq4Vo/73ZagEZ8gVrJY4Y OhObyaWNe+pVY75I0wtCSfngfhs+zrzAucyF5n/WPI3EjqaBpcECVd9wcvJCsD9e R8mmRF9BrTZaZkG/SJ4MKXvZc+klNfyX1GjODtQlBiN8ti9FaX3o2ulNDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:48 2026 by rpki-client