This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer (raw, json) Hash identifier: lIMxM+Rsc7px4XNR3vv4D+AZEWSOESy+2LhwXmI47P4= Subject key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791108BBF76CE28B20251511ACF66097 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62088 IP: 45.93.132.0/22 IP: 146.19.244.0/24 IP: 185.48.56.0/22 IP: 185.245.184.0/22 IP: 2a01:9520::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:08:bb:f7:6c:e2:8b:20:25:15:11:ac:f6:60:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:a5:7f:27:4d:12:1a:3f:99:18:81:60:be: 3f:d0:76:2d:63:6c:f2:c4:c9:7c:bf:50:fb:99:54: cf:34:91:8d:b3:a6:51:87:91:21:b9:16:a4:81:35: dd:7b:6a:c5:27:93:2c:29:cb:67:19:8e:c8:53:9b: a5:ad:eb:67:81:92:8d:9c:b6:51:86:fc:f4:4b:2a: ff:09:0b:26:89:94:92:c8:04:b2:02:b2:89:af:ab: 56:9f:f1:43:d8:55:31:82:f4:77:5d:80:b0:44:3a: ff:73:ac:b5:bf:8c:c6:7d:a9:39:31:ae:bb:10:4b: 7f:3f:f6:42:25:66:ae:91:0e:7d:3d:83:4b:f7:b3: 32:29:3e:6a:76:0d:7e:94:12:c3:57:b8:06:b9:64: 3a:9f:5f:3b:94:02:7c:2a:4d:41:4f:1f:6e:2f:f1: 2d:14:9d:be:a8:a9:13:3a:24:56:a3:22:4a:8f:66: 19:25:38:de:8c:e3:0a:f8:7a:fe:99:3d:56:76:2a: 72:d6:b6:58:6e:f0:30:1d:01:e6:04:8a:6b:dd:28: 2a:43:cc:31:c8:80:ae:b1:36:19:fb:f4:ab:9b:da: 3c:bb:04:78:19:bf:ab:5d:68:15:2b:6f:20:44:ec: 48:df:7e:cd:d3:16:76:8a:d2:e8:d6:a9:f8:17:04: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.132.0/22 146.19.244.0/24 185.48.56.0/22 185.245.184.0/22 IPv6: 2a01:9520::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62088 Signature Algorithm: sha256WithRSAEncryption 86:3a:38:7d:04:57:97:60:63:42:75:51:fe:22:ef:2b:85:d4: 94:61:17:14:ef:99:3d:59:e8:9e:ae:2f:d7:85:e2:08:bd:27: c7:69:72:0f:9a:47:03:c6:ee:b2:1f:77:96:a0:ed:6f:3e:13: 42:9f:c2:91:46:5d:75:d7:be:90:81:70:95:c1:ad:d3:f6:db: 08:01:bc:d6:40:3f:7a:ad:b1:1f:3c:ec:ae:ab:71:35:ad:9f: 94:41:04:b2:f0:de:a4:03:b7:d8:83:77:75:9d:88:7f:c4:a1: 6c:06:5d:17:e2:be:44:72:dd:9e:71:b0:22:67:4a:8c:56:65: 49:f3:0c:82:2c:09:3a:f0:32:92:20:68:39:0b:c4:d6:a7:4a: 29:fd:a7:81:fa:b5:ed:5e:19:c3:74:9f:75:21:bb:97:c6:2f: 95:33:bc:e7:f6:9d:64:37:f3:09:00:fa:31:af:ef:9d:4b:9e: e5:4f:0a:d2:c3:fb:40:e8:4c:e7:91:bb:ea:2b:30:75:ee:68: d1:5d:5d:4a:27:6c:b5:ae:dd:8b:09:80:b9:bf:29:98:36:60: 7f:c2:a2:1a:e0:36:72:92:9e:2c:28:06:1d:33:4e:bc:62:d3: fb:5c:7a:55:3b:86:7d:92:76:05:8d:f9:62:af:8f:cb:94:56: 41:0e:40:84 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt5EQi792ziiyAlFRGs9mCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTlmNjVlMWJlNDJhNjViNDk0Y2YyNjQyYTRkZDhlMzI4ZDBmOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9mlfydNEho/mRiBYL4/0HYtY2zy xMl8v1D7mVTPNJGNs6ZRh5EhuRakgTXde2rFJ5MsKctnGY7IU5ulretngZKNnLZR hvz0Syr/CQsmiZSSyASyArKJr6tWn/FD2FUxgvR3XYCwRDr/c6y1v4zGfak5Ma67 EEt/P/ZCJWaukQ59PYNL97MyKT5qdg1+lBLDV7gGuWQ6n187lAJ8Kk1BTx9uL/Et FJ2+qKkTOiRWoyJKj2YZJTjejOMK+Hr+mT1Wdipy1rZYbvAwHQHmBIpr3SgqQ8wx yICusTYZ+/Srm9o8uwR4Gb+rXWgVK28gROxI337N0xZ2itLo1qn4FwQK0QIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFPmfZeG+QqZbSUzyZCpN2OMo0PnOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzZkZjhi YS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThmZmQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJh LWQ0Y2ItNDcwNS1iZjU1LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEpr S2szWTR5alEtYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEAi1dhAMEAJIT9AMEArkwOAMEArn1uDANBAIA AjAHAwUDKgGVIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8ogwDQYJKoZIhvcN AQELBQADggEBAIY6OH0EV5dgY0J1Uf4i7yuF1JRhFxTvmT1Z6J6uL9eF4gi9J8dp cg+aRwPG7rIfd5ag7W8+E0KfwpFGXXXXvpCBcJXBrdP22wgBvNZAP3qtsR887K6r cTWtn5RBBLLw3qQDt9iDd3WdiH/EoWwGXRfivkRy3Z5xsCJnSoxWZUnzDIIsCTrw MpIgaDkLxNanSin9p4H6te1eGcN0n3Uhu5fGL5UzvOf2nWQ38wkA+jGv751LnuVP CtLD+0DoTOeRu+orMHXuaNFdXUonbLWu3YsJgLm/KZg2YH/CohrgNnKSniwoBh0z Trxi0/tcelU7hn2SdgWN+WKvj8uUVkEOQIQ= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:39 2026 by rpki-client