This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer (raw, json) Hash identifier: Y7yNcgpZKK8vO2GAGG+t13CagoLQmhVkVGbAbwEqhuY= Subject key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7AAFCEF3B5B3B16F944EC7AD3C6B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209323 IP: 147.78.144.0/22 IP: 2a09:24c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:aa:fc:ef:3b:5b:3b:16:f9:44:ec:7a:d3:c6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f973209625e2a03ddeecf91bb480548e5729d479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:c3:7f:43:c3:8d:dd:2c:84:d2:f2:23:e7: 04:70:a3:77:77:54:87:27:00:04:fe:14:7c:11:e9: 14:e1:18:64:fa:83:be:66:cd:4d:77:e0:ed:36:10: ae:53:14:9b:c1:f8:30:d4:93:e4:4f:49:e8:b6:09: ae:1f:79:77:11:b4:3b:9f:c5:3f:9f:8c:c1:fd:53: ff:8a:0e:30:52:55:63:b2:71:03:74:d5:13:fb:ac: 7e:25:95:f9:23:8e:56:70:5b:47:b1:63:47:7e:8b: dd:c3:41:bc:89:73:46:6e:c8:00:58:70:6d:81:a1: 03:0b:e0:ef:fe:b7:48:92:e5:58:62:58:f0:7b:7b: ef:1a:2b:16:6b:09:87:28:06:38:b6:bc:86:60:d0: e7:1f:71:32:24:e4:0a:2e:aa:5b:fe:f2:fe:70:c5: 6f:fa:51:23:4c:7b:9c:10:b7:41:36:60:60:8a:14: 05:34:f3:87:aa:21:e8:f1:7b:00:75:32:38:a6:f5: 3d:fa:8c:92:66:30:8e:c3:07:ac:5c:f7:dc:82:a0: 6c:8b:e0:e8:a1:87:f6:00:5e:61:62:36:12:ca:49: 1b:43:08:fe:3b:bb:c8:78:dd:78:ed:d1:d2:2c:45: a9:fb:3b:38:d2:22:8b:33:00:a9:01:dd:b4:d4:59: 88:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.144.0/22 IPv6: 2a09:24c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209323 Signature Algorithm: sha256WithRSAEncryption 77:ed:5b:cc:87:56:90:e7:97:50:87:28:45:16:ba:ed:61:a0: 00:9a:b3:98:35:9a:51:01:d6:1d:e8:36:63:02:65:22:56:17: b3:c1:86:0c:c2:7e:27:8b:34:39:f3:05:db:4e:b8:89:54:53: 30:2b:e6:4d:e3:c3:d1:4d:5c:5c:32:d4:51:5a:d7:cb:fa:37: d6:79:ce:ea:c4:48:49:96:25:3f:3f:a0:37:a0:29:ab:c7:ad: 1e:fa:88:d0:f9:7e:7e:8c:16:75:cb:58:33:db:ab:07:e0:d0: ce:34:e3:30:a6:67:38:55:17:46:02:c6:5b:71:d5:a6:9a:d6: f6:1e:80:8b:aa:80:f8:86:79:91:03:17:83:a1:69:31:7d:04: 9f:9a:8a:29:ae:d6:b5:42:ef:9d:bf:96:5c:c9:54:99:45:fc: 66:01:5f:02:da:93:58:09:69:40:46:45:e6:78:24:ff:71:93: b3:4f:bd:29:af:d7:5e:00:8a:35:32:72:e4:fd:fb:b0:6c:d2: 18:25:6b:e4:50:e4:ab:bb:5e:42:c9:d8:29:47:55:10:f8:8c: f4:3e:b7:9f:4a:c2:ad:a7:bc:73:af:0d:c7:db:80:38:30:b9: 5e:7b:c4:0c:f1:b3:c9:bf:5b:c7:d8:61:45:75:59:bf:0b:30: d9:53:5b:8c -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6x6r87ztbOxb5ROx608a2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTczMjA5NjI1ZTJhMDNkZGVlY2Y5MWJiNDgwNTQ4ZTU3MjlkNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWfDf0PDjd0shNLyI+cEcKN3d1SH JwAE/hR8EekU4Rhk+oO+Zs1Nd+DtNhCuUxSbwfgw1JPkT0notgmuH3l3EbQ7n8U/ n4zB/VP/ig4wUlVjsnEDdNUT+6x+JZX5I45WcFtHsWNHfovdw0G8iXNGbsgAWHBt gaEDC+Dv/rdIkuVYYljwe3vvGisWawmHKAY4tryGYNDnH3EyJOQKLqpb/vL+cMVv +lEjTHucELdBNmBgihQFNPOHqiHo8XsAdTI4pvU9+oySZjCOwwesXPfcgqBsi+Do oYf2AF5hYjYSykkbQwj+O7vIeN147dHSLEWp+zs40iKLMwCpAd201FmIDwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPlzIJYl4qA93uz5G7SAVI5XKdR5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2FmNTRl OC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFlYzIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4 LWJkNjMtNDI3ZC04Y2M4LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGti dElCVWpsY3AxSGsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEApNOkDANBAIAAjAHAwUAKgkkwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDMaswDQYJKoZIhvcNAQELBQADggEBAHftW8yHVpDn l1CHKEUWuu1hoACas5g1mlEB1h3oNmMCZSJWF7PBhgzCfieLNDnzBdtOuIlUUzAr 5k3jw9FNXFwy1FFa18v6N9Z5zurESEmWJT8/oDegKavHrR76iND5fn6MFnXLWDPb qwfg0M404zCmZzhVF0YCxltx1aaa1vYegIuqgPiGeZEDF4OhaTF9BJ+aiimu1rVC 752/llzJVJlF/GYBXwLak1gJaUBGReZ4JP9xk7NPvSmv114AijUycuT9+7Bs0hgl a+RQ5Ku7XkLJ2ClHVRD4jPQ+t59Kwq2nvHOvDcfbgDgwuV57xAzxs8m/W8fYYUV1 Wb8LMNlTW4w= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:59 2026 by rpki-client