This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer File: 1-eS-AUv4OU5M185shKT6hPLln18.cer (raw, json) Hash identifier: vN5FNfCphGYtJ9o9NpdTUQVX59RyskhhuNMizyCtHD4= Subject key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA318DAEA1FCF42185E01A76AAF60B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216183 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:31:8d:ae:a1:fc:f4:21:85:e0:1a:76:aa:f6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:ff:2a:89:32:22:7a:10:f9:11:0d:3d:f1: 39:c2:35:79:10:52:f5:57:38:40:0d:a9:a4:a1:d2: 1b:82:77:1c:b0:ac:ae:a9:60:32:64:ad:56:51:c6: b8:ff:93:4d:bf:a3:4b:03:88:e5:b0:4e:19:cc:12: d9:67:3c:a9:a9:66:37:58:b4:99:7d:a5:e0:66:c0: b1:72:d0:ee:d8:d2:00:25:af:89:06:5f:ad:b0:f0: a3:81:90:68:33:46:5a:0a:2f:3a:85:68:eb:f9:38: 5c:db:bd:44:77:ed:62:44:31:d9:41:85:10:c2:a9: f3:fa:7d:a3:b9:7c:87:e8:50:bb:fe:2e:fb:26:16: 01:b5:a5:fa:5e:a2:ef:4d:f2:57:67:55:11:5b:62: df:da:0e:d1:d0:a9:70:b3:ea:a4:d8:60:53:dc:df: e1:9e:ec:16:3f:b6:b7:9a:ea:3c:b1:3d:3e:8b:ec: 73:42:8c:d9:74:c0:01:97:78:9a:56:aa:f1:00:de: b2:8e:c8:42:4b:8d:00:64:24:65:cd:1e:96:81:07: 5e:df:07:23:92:65:06:e8:c0:b3:ca:67:c1:58:6a: cd:fb:74:d7:52:42:5d:87:b3:bc:6b:aa:82:ad:16: 2d:33:2c:6c:79:13:7d:f2:47:26:9d:86:5b:7f:08: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216183 Signature Algorithm: sha256WithRSAEncryption 1e:c5:1c:23:53:f0:cf:cc:1c:d5:08:08:36:19:bf:66:74:67: 56:ff:fb:b4:37:04:30:3b:d8:db:68:5a:41:67:55:aa:8f:42: c3:00:e7:2a:75:8a:e6:e2:46:98:7e:e5:33:93:c3:e7:81:d6: 7a:7a:d5:95:d0:31:fc:77:43:83:39:cf:df:2c:9b:47:b8:c5: c2:a6:8e:18:83:58:e4:a0:86:c0:b6:a8:2d:42:b8:e8:5c:e5: 0e:d7:f1:b9:a7:09:7e:7d:16:78:92:eb:2d:96:80:38:ff:32: ae:ab:48:fe:18:e8:a5:86:a8:a4:37:8b:ec:8e:4f:f4:7f:b5: 0f:0d:52:23:14:b6:cd:0b:07:22:bf:cd:5b:5e:c6:e3:0b:d4: 27:40:c1:3a:47:e7:15:fa:6a:a3:e6:30:1a:02:01:9e:be:c8: 53:50:ad:9e:fc:66:18:58:3c:99:ac:60:f5:0d:bd:19:4e:98: 2b:7d:04:e7:0e:7d:2c:6f:98:8f:8d:e1:dd:33:8d:b7:d8:68: d7:5a:05:dc:d5:54:88:f9:14:b7:5a:c2:11:ac:3f:f2:21:9e: 9a:c8:a8:bb:b9:57:14:c2:0b:40:45:77:47:7d:07:67:ee:8e: b5:0a:3d:ed:22:81:69:e3:a2:be:ad:a9:dd:c5:77:15:57:fb: 40:16:d9:c1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt9yjGNrqH89CGF4Bp2qvYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU0YmUwMTRiZjgzOTRlNGNkN2NlNmM4NGE0ZmE4NGYyZTU5ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzr/KokyInoQ+RENPfE5wjV5EFL1 VzhADamkodIbgnccsKyuqWAyZK1WUca4/5NNv6NLA4jlsE4ZzBLZZzypqWY3WLSZ faXgZsCxctDu2NIAJa+JBl+tsPCjgZBoM0ZaCi86hWjr+Thc271Ed+1iRDHZQYUQ wqnz+n2juXyH6FC7/i77JhYBtaX6XqLvTfJXZ1URW2Lf2g7R0Klws+qk2GBT3N/h nuwWP7a3muo8sT0+i+xzQozZdMABl3iaVqrxAN6yjshCS40AZCRlzR6WgQde3wcj kmUG6MCzymfBWGrN+3TXUkJdh7O8a6qCrRYtMyxseRN98kcmnYZbfwjVbwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPnkvgFL+DlOTNfObISk+oTy5Z9fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzRkNTg5 Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0MzYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlm LTJkNTAtNDI0Yy05YjQ5LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVz aEtUNmhQTGxuMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDTHcwDQYJKoZIhvcNAQELBQADggEBAB7FHCNT8M/M HNUICDYZv2Z0Z1b/+7Q3BDA72NtoWkFnVaqPQsMA5yp1iubiRph+5TOTw+eB1np6 1ZXQMfx3Q4M5z98sm0e4xcKmjhiDWOSghsC2qC1CuOhc5Q7X8bmnCX59FniS6y2W gDj/Mq6rSP4Y6KWGqKQ3i+yOT/R/tQ8NUiMUts0LByK/zVtexuML1CdAwTpH5xX6 aqPmMBoCAZ6+yFNQrZ78ZhhYPJmsYPUNvRlOmCt9BOcOfSxvmI+N4d0zjbfYaNda BdzVVIj5FLdawhGsP/IhnprIqLu5VxTCC0BFd0d9B2fujrUKPe0igWnjor6tqd3F dxVX+0AW2cE= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:30 2026 by rpki-client