This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer File: 1-XQtd30IJBai2EfUADozG1DiQj4.cer (raw, json) Hash identifier: PQw6qTCse3oyg+bnjYySzRtM1BnCJ66b8kV5YSL5qZ8= Subject key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC4B1B953280E18131E4CA51E2498C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39373 IP: 195.178.100.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4b:1b:95:32:80:e1:81:31:e4:ca:51:e2:49:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9742d777d082416a2d847d4003a331b50e2423e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:fd:8d:c2:ac:e3:67:7d:32:8a:54:38:f9: 11:e4:69:c2:15:88:61:86:11:4f:04:47:ce:ca:ef: fa:d9:c6:09:28:8c:1b:7f:ad:aa:29:62:f7:20:62: eb:71:ac:d3:9f:cd:85:05:12:fc:17:e7:77:04:0b: f3:e5:fa:29:9c:b3:e4:d7:8d:ef:45:45:b4:29:64: 92:69:22:0a:84:dd:59:76:1e:39:61:16:64:1a:56: 7c:0b:dc:e2:c4:e7:6e:db:6e:61:ce:29:92:d4:6c: d6:2a:35:1d:7e:b0:bb:82:9d:13:5f:25:05:49:db: 35:1f:63:d7:a3:58:c5:5b:d6:a8:9b:7b:71:f7:d9: 0c:bc:4a:b4:0c:fe:3d:9c:05:55:6e:07:b1:b5:bb: 1b:16:57:00:1c:3c:16:41:3a:92:22:4c:36:8f:dc: e7:4f:6a:b1:f6:47:de:5e:5c:7e:b7:7e:d9:55:62: 77:c5:c8:bf:b4:ff:53:79:81:18:41:34:9f:89:14: a1:fc:96:1a:f9:bf:79:b4:9b:dd:fa:f2:95:d8:47: aa:b9:f4:76:9f:59:4e:0e:74:22:08:9c:2e:fe:66: 7c:5d:82:49:c8:a2:e5:cb:7f:4f:c2:3d:23:77:c9: 1c:b1:63:aa:12:17:c0:e0:0e:a1:24:bb:7f:20:2b: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.100.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39373 Signature Algorithm: sha256WithRSAEncryption a6:17:34:e9:cf:d6:76:89:44:cd:d9:18:75:c9:6d:08:bf:c3: 33:7f:76:22:33:49:9e:42:94:3a:d9:be:4f:65:4f:52:04:42: c3:d2:3c:ac:36:97:18:be:99:7a:be:68:37:ec:7b:a5:dd:ba: 82:ec:cd:a7:95:b1:bd:ae:8a:2a:90:53:19:96:3d:58:74:ea: 5d:e2:60:07:ce:b9:ad:7f:ee:6f:e4:65:3b:bc:06:81:5d:d6: 65:28:6a:b7:5d:38:19:f8:6e:e3:4d:fb:2b:f3:8e:e1:2c:f6: 5f:d2:1a:bd:6a:a2:80:cd:11:8d:a9:cc:3f:de:5d:57:ca:93: bf:2f:8e:87:cf:a3:0c:4a:dd:c1:84:4c:57:51:f5:7a:72:38: a7:cc:2a:76:90:94:57:17:12:f9:7f:d9:6f:9a:79:85:3e:85: 8c:2f:28:8e:2e:34:c4:82:e6:8e:b7:73:6e:c2:b3:12:69:25: 7e:74:4e:33:f8:23:86:54:10:93:84:52:00:35:67:ca:e3:d4: 6e:53:5b:03:c5:ba:8d:c4:ef:88:92:b5:0a:02:6e:55:57:02: 16:34:79:1e:37:13:2f:40:4b:b5:48:da:e0:ac:5e:fe:fa:12: a0:95:9e:ad:f4:cb:f0:d9:74:97:8a:28:a8:80:aa:1f:3c:87: 02:e0:e5:0c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt57EsblTKA4YEx5MpR4kmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTc0MmQ3NzdkMDgyNDE2YTJkODQ3ZDQwMDNhMzMxYjUwZTI0MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaz9jcKs42d9MopUOPkR5GnCFYhh hhFPBEfOyu/62cYJKIwbf62qKWL3IGLrcazTn82FBRL8F+d3BAvz5fopnLPk143v RUW0KWSSaSIKhN1Zdh45YRZkGlZ8C9zixOdu225hzimS1GzWKjUdfrC7gp0TXyUF Sds1H2PXo1jFW9aom3tx99kMvEq0DP49nAVVbgextbsbFlcAHDwWQTqSIkw2j9zn T2qx9kfeXlx+t37ZVWJ3xci/tP9TeYEYQTSfiRSh/JYa+b95tJvd+vKV2EequfR2 n1lODnQiCJwu/mZ8XYJJyKLly39Pwj0jd8kcsWOqEhfA4A6hJLt/ICt/WwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPl0LXd9CCQWothH1AA6MxtQ4kI+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzQ4Mjcw OC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMzZDYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4 LWMxZDQtNDBmYy05MzIxLTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZV QURvekcxRGlRajQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcOyZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAmc0wDQYJKoZIhvcNAQELBQADggEBAKYXNOnP1naJRM3ZGHXJbQi/wzN/diIz SZ5ClDrZvk9lT1IEQsPSPKw2lxi+mXq+aDfse6XduoLszaeVsb2uiiqQUxmWPVh0 6l3iYAfOua1/7m/kZTu8BoFd1mUoarddOBn4buNN+yvzjuEs9l/SGr1qooDNEY2p zD/eXVfKk78vjofPowxK3cGETFdR9XpyOKfMKnaQlFcXEvl/2W+aeYU+hYwvKI4u NMSC5o63c27CsxJpJX50TjP4I4ZUEJOEUgA1Z8rj1G5TWwPFuo3E74iStQoCblVX AhY0eR43Ey9AS7VI2uCsXv76EqCVnq30y/DZdJeKKKiAqh88hwLg5Qw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:28 2026 by rpki-client