This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.cer (raw, json) Hash identifier: EWj6ozYetKdNvFTf9N11BijIe4MOMCtWpy/3zWaD8QY= Subject key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910428B3CAEA0BB7E694E553D4E8A2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212700 IP: 45.13.144.0/22 IP: 2a0e:ef00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:8b:3c:ae:a0:bb:7e:69:4e:55:3d:4e:8a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97fdecadb3261334387cf091d02e0713b781d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:c6:75:4c:2b:ce:f2:33:57:7b:a2:1f:97: ae:c6:59:f1:de:3f:5c:1d:cd:01:cf:47:59:68:ba: 71:7f:c1:c0:a4:48:74:32:18:0d:cd:5d:ed:9f:a2: 6b:5a:db:5c:8c:fa:2d:32:b1:81:66:e7:10:97:95: 60:8a:ef:d4:90:91:0d:36:5f:36:d7:94:25:3e:61: b3:42:80:f2:bc:0c:dc:6c:82:f7:0f:22:a3:3a:3a: f2:ea:5f:96:93:ea:68:58:e6:e0:da:79:c2:f7:67: 3f:a0:89:a7:4e:6b:c1:82:20:c9:f3:ac:64:dd:d3: 43:98:54:b1:77:e7:27:48:b0:46:cd:90:c9:b3:ee: 51:b3:9e:fa:8c:7c:ef:84:cd:34:25:03:de:69:01: 11:3e:d7:e2:0e:15:0e:4f:ef:36:8c:f9:d0:91:72: f8:42:2c:c9:d3:c1:70:a1:a3:21:2f:d8:56:a6:b2: 52:17:bb:ce:c9:01:0f:30:a7:10:41:bc:8e:d8:88: 38:93:69:1b:f8:cb:90:16:b4:9e:cf:b8:69:63:99: 7a:8d:89:67:33:0e:9e:41:2c:2d:e4:68:36:47:04: 24:67:ed:99:5a:97:cd:0e:3e:43:21:8b:0f:9e:1d: e1:a8:b2:7f:74:eb:04:fb:6a:bf:f2:f5:f0:79:56: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.144.0/22 IPv6: 2a0e:ef00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212700 Signature Algorithm: sha256WithRSAEncryption 95:3a:eb:fa:f5:8e:6f:8c:a8:f2:2f:00:91:46:41:0e:81:c7: bd:f7:1d:1c:7f:97:aa:47:f9:3e:6b:b4:09:86:1b:36:51:7a: d7:05:69:a9:45:26:13:8c:b4:28:91:d7:03:dd:5c:d2:31:c5: 16:06:04:d3:60:2b:5f:a5:d0:b3:0e:45:39:b8:30:4f:be:7e: 12:b8:2b:46:eb:07:1b:77:c7:15:19:a4:cf:2f:7c:bd:7f:a5: f4:73:c0:b6:96:53:be:48:5e:92:58:7c:a1:6b:60:43:a4:4d: b4:8d:0f:ce:b0:6a:ec:c4:02:df:b8:96:4e:95:d7:57:38:9f: 72:ec:9a:de:9f:ab:12:00:97:49:ac:69:27:31:61:b3:78:12: 09:1c:fc:3b:e2:d9:14:d0:1f:8a:18:48:53:9c:74:0e:f6:a7: 34:a4:25:d5:7c:27:ae:96:6f:b3:cb:bf:19:62:db:bd:00:4e: 2b:91:c2:d7:be:77:e4:42:53:1e:fb:89:25:62:b8:11:81:a6: f8:9e:45:79:de:b7:00:18:eb:d2:f2:c4:7b:ee:fd:c7:1e:6c: ca:c7:e3:2e:29:5f:db:2d:b6:ea:c6:fa:d2:02:cd:16:4a:bc: 97:c7:9b:67:9f:b7:cd:46:ca:46:47:5b:10:1e:58:1a:2b:32: 14:ec:e6:ce -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5EEKLPK6gu35pTlU9ToouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTdmZGVjYWRiMzI2MTMzNDM4N2NmMDkxZDAyZTA3MTNiNzgxZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyDGdUwrzvIzV3uiH5euxlnx3j9c Hc0Bz0dZaLpxf8HApEh0MhgNzV3tn6JrWttcjPotMrGBZucQl5Vgiu/UkJENNl82 15QlPmGzQoDyvAzcbIL3DyKjOjry6l+Wk+poWObg2nnC92c/oImnTmvBgiDJ86xk 3dNDmFSxd+cnSLBGzZDJs+5Rs576jHzvhM00JQPeaQERPtfiDhUOT+82jPnQkXL4 QizJ08FwoaMhL9hWprJSF7vOyQEPMKcQQbyO2Ig4k2kb+MuQFrSez7hpY5l6jYln Mw6eQSwt5Gg2RwQkZ+2ZWpfNDj5DIYsPnh3hqLJ/dOsE+2q/8vXweVZMHwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPl/3srbMmEzQ4fPCR0C4HE7eB0xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2E4YTM2 NC03NDMwLTRkYTYtOGY0My1lYjdiZjJiZGRkMDgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0 LTc0MzAtNGRhNi04ZjQzLWViN2JmMmJkZGQwOC8xLzEtWF9leXRzeVlUTkRoODhK SFFMZ2NUdDRIVEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0NkDANBAIAAjAHAwUDKg7vADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPtwwDQYJKoZIhvcNAQELBQADggEBAJU66/r1jm+M qPIvAJFGQQ6Bx733HRx/l6pH+T5rtAmGGzZRetcFaalFJhOMtCiR1wPdXNIxxRYG BNNgK1+l0LMORTm4ME++fhK4K0brBxt3xxUZpM8vfL1/pfRzwLaWU75IXpJYfKFr YEOkTbSND86wauzEAt+4lk6V11c4n3Lsmt6fqxIAl0msaScxYbN4Egkc/Dvi2RTQ H4oYSFOcdA72pzSkJdV8J66Wb7PLvxli270ATiuRwte+d+RCUx77iSViuBGBpvie RXnetwAY69LyxHvu/ccebMrH4y4pX9stturG+tICzRZKvJfHm2eft81GykZHWxAe WBorMhTs5s4= -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:09 2026 by rpki-client