This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer (raw, json) Hash identifier: /5hjCk+MspdyWDETwsJUHjLwQfOsLjBSg2ceNB7rzeY= Subject key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7F9A30E9425D2251BEDBCD3D20D45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47347 IP: 79.142.32.0/23 IP: 2a01:7b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f9:a3:0e:94:25:d2:25:1b:ed:bc:d3:d2:0d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:95:c7:65:49:c5:9d:a6:65:06:d4:79:fc: 34:8f:70:25:62:a0:8e:1c:18:de:79:c6:bb:99:67: 5c:77:a4:ac:32:e4:f1:36:9e:8d:5a:c7:05:6a:2d: 7a:d2:4e:23:c0:57:6d:e0:9a:6e:80:f6:0a:9f:a6: 6d:53:1b:8e:c4:c7:64:6c:c5:26:35:ba:04:f4:15: e6:5b:f1:a6:71:b9:ab:bf:77:9a:f8:cf:bc:f7:b3: 6d:18:ab:a1:26:b3:a8:47:c3:4f:2d:7c:b2:e7:db: f7:64:c5:46:d5:3f:33:7f:0a:5b:d9:9c:5a:b1:9f: 2a:41:f8:b0:3b:41:4c:d0:f4:79:51:9e:de:2c:7c: b5:99:d3:c4:6c:d0:cb:f0:0c:c2:9e:db:88:0d:2e: 00:fb:4f:55:87:a2:83:47:1f:14:a1:3c:93:74:64: aa:0d:24:77:d7:94:11:7f:dd:97:93:6c:62:31:ca: 41:35:35:56:e7:8b:1f:9b:4c:55:fe:53:a6:df:5d: 1f:a9:07:7f:d0:91:1c:67:62:e9:6b:ac:41:87:90: 8e:a9:65:6f:09:cb:ed:94:09:a7:29:21:08:aa:76: a2:f0:46:88:f1:65:63:a7:ae:37:cc:80:79:f6:a6: 4a:dd:be:2c:ee:81:a9:29:7a:ed:2b:e5:0c:a9:1a: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.32.0/23 IPv6: 2a01:7b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47347 Signature Algorithm: sha256WithRSAEncryption 5a:51:f4:12:10:53:c1:ef:88:a9:54:a4:59:20:d9:2d:b3:22: 98:4d:a7:a6:99:33:bd:01:7d:5b:10:a1:82:53:bc:47:45:76: eb:b6:a5:5b:7f:fb:bb:86:03:85:3d:c6:fc:24:70:6c:7a:94: d7:61:d5:3b:77:96:0d:53:2c:bc:98:54:8f:b4:64:6e:e7:44: 5f:11:9b:11:7f:f9:0f:68:fd:59:f7:bd:89:9d:42:64:27:28: bf:e0:94:8e:50:a6:cd:e7:7c:8d:09:bd:48:16:7b:fb:cc:2f: d8:54:e5:b2:12:28:c4:ec:43:77:24:a3:e5:5e:c3:bf:61:d1: cd:08:93:83:1c:07:b6:2e:e1:cd:2f:bb:37:b8:55:1e:c1:68: 4d:06:10:a1:25:77:24:d5:10:84:37:d6:8b:dc:f6:74:2a:33: ff:80:86:58:7d:e8:a7:b6:5c:81:4e:99:03:14:ee:f5:26:c1: 7a:d0:63:b7:0b:3f:87:b0:73:17:bb:b8:cd:d4:f8:10:ff:fd: 7b:bf:79:50:d2:a9:60:4e:38:64:fe:7f:34:ca:f9:dc:37:86: bc:90:54:1f:4a:e0:b1:07:41:8f:ed:28:75:30:69:4b:80:e1: 6e:a3:fc:7b:b1:07:ba:d6:ce:01:dc:cf:b7:d3:dd:82:3a:b4: 8f:19:e6:bf -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6x/mjDpQl0iUb7bzT0g1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTdmNjllZDI2YzJlNDY4N2RiYWIyZTZjNmNjYTg4ZDE3YzRjMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6Vx2VJxZ2mZQbUefw0j3AlYqCO HBjeeca7mWdcd6SsMuTxNp6NWscFai160k4jwFdt4JpugPYKn6ZtUxuOxMdkbMUm NboE9BXmW/Gmcbmrv3ea+M+897NtGKuhJrOoR8NPLXyy59v3ZMVG1T8zfwpb2Zxa sZ8qQfiwO0FM0PR5UZ7eLHy1mdPEbNDL8AzCntuIDS4A+09Vh6KDRx8UoTyTdGSq DSR315QRf92Xk2xiMcpBNTVW54sfm0xV/lOm310fqQd/0JEcZ2Lpa6xBh5COqWVv CcvtlAmnKSEIqnai8EaI8WVjp643zIB59qZK3b4s7oGpKXrtK+UMqRovywIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPl/ae0mwuRofbqy5sbMqI0XxMMyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzMyNDQx ZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgyMzMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFl LTVlOWItNGEzMi04Y2M0LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxt eHN5b2pSZkV3ekkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAU+OIDANBAIAAjAHAwUAKgF7QDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAuPMwDQYJKoZIhvcNAQELBQADggEBAFpR9BIQU8Hv iKlUpFkg2S2zIphNp6aZM70BfVsQoYJTvEdFduu2pVt/+7uGA4U9xvwkcGx6lNdh 1Tt3lg1TLLyYVI+0ZG7nRF8RmxF/+Q9o/Vn3vYmdQmQnKL/glI5Qps3nfI0JvUgW e/vML9hU5bISKMTsQ3cko+Vew79h0c0Ik4McB7Yu4c0vuze4VR7BaE0GEKEldyTV EIQ31ovc9nQqM/+Ahlh96Ke2XIFOmQMU7vUmwXrQY7cLP4ewcxe7uM3U+BD//Xu/ eVDSqWBOOGT+fzTK+dw3hryQVB9K4LEHQY/tKHUwaUuA4W6j/HuxB7rWzgHcz7fT 3YI6tI8Z5r8= -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:26 2026 by rpki-client