This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer (raw, json) Hash identifier: XmYi91bpAZkMP9zXe7flpiRbKPWv98Gd4S3yWHURoOA= Subject key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791028C0D823E104B4EE8F5FA6DCA183 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.114.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:28:c0:d8:23:e1:04:b4:ee:8f:5f:a6:dc:a1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:00:90:3f:cb:c0:16:e0:1b:62:ed:50:e0: 4e:1b:34:2d:6a:5b:ab:f1:ee:5a:d0:e2:ca:63:66: 91:b6:ea:70:44:50:63:69:2a:4f:b6:ca:62:4b:49: 1c:4d:96:69:29:b2:15:d9:b7:04:34:29:95:c7:6a: fa:dc:be:8b:92:46:27:f3:b5:0b:6d:14:08:36:ea: c3:b7:6a:86:7d:35:4b:90:09:8f:70:20:d5:cf:8f: 31:86:71:c9:1f:9e:5d:dd:28:73:a7:44:ae:89:18: bb:62:3c:3d:9f:d6:94:e7:54:9f:17:05:bb:af:f5: ac:be:c3:a7:d9:46:39:d3:47:7a:38:ae:75:79:71: b7:60:51:71:2e:21:e9:ad:74:8b:ce:28:65:a2:6d: c9:e3:98:8e:f6:88:0f:57:60:c9:3a:34:24:40:06: 7d:da:00:c2:e2:10:23:87:00:1c:f4:01:67:c3:12: f0:61:0d:18:3e:82:0c:28:72:3c:0f:ff:f3:6e:1c: 35:48:94:fe:1c:e9:83:c2:81:f5:cc:bb:60:7e:d1: 81:c9:f5:07:8f:3a:a2:82:e0:ad:b5:10:41:95:b0: 9f:88:47:58:10:4a:1b:49:99:56:5d:e1:df:1f:b2: fa:4d:9a:6d:73:2b:60:3b:37:be:35:3d:a0:08:11: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.114.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:0b:88:dc:c5:39:c5:4b:e5:2f:77:77:3d:e6:b0:dc:d4:bd: 24:7d:10:dd:28:f2:f9:a2:bd:1d:6a:cf:9c:94:d2:5f:6b:e6: d4:50:1d:d1:6a:ca:44:8c:ca:8a:b5:cf:f7:5c:b9:61:96:0c: a5:ec:a2:0e:77:43:87:ca:cd:3c:7f:95:ed:ab:e5:bf:11:18: ab:fc:f2:1f:2f:bd:3b:9e:a4:37:57:0d:9d:c1:c6:48:ff:df: 16:f7:20:46:18:4b:b2:a0:a3:dd:6c:1a:e1:1c:30:56:df:cd: 23:c0:ae:8a:40:11:48:73:d4:fe:db:35:3e:93:bf:4e:6c:50: 4d:da:fa:6c:31:3a:77:ed:62:05:7c:36:25:9c:7c:ce:ac:2e: ef:48:ee:0e:49:88:56:18:53:01:eb:4c:f6:08:bc:f9:28:95: fa:4d:e7:0b:d2:af:52:3b:47:25:d9:13:8a:1f:b1:ad:be:d1: b3:c1:87:b0:16:2d:3e:99:c8:3f:d4:0d:06:6e:98:0f:2f:08: 80:7f:7f:de:8e:29:39:d9:33:c4:0e:3b:26:74:0b:07:cf:76: 00:0c:a7:18:f8:c6:7d:cb:3b:b4:d0:e1:00:d6:59:a1:49:59: c6:a8:cd:07:bf:f6:14:99:4a:9c:3d:ec:0c:af:ab:8f:92:c2: 43:56:0b:02 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt5ECjA2CPhBLTuj1+m3KGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTFkNTRlMTU4NWFjMDk3YzNmOTFkZWZjMDMzZGRhNTcyMmVhMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpQAkD/LwBbgG2LtUOBOGzQtalur 8e5a0OLKY2aRtupwRFBjaSpPtspiS0kcTZZpKbIV2bcENCmVx2r63L6LkkYn87UL bRQINurDt2qGfTVLkAmPcCDVz48xhnHJH55d3Shzp0SuiRi7Yjw9n9aU51SfFwW7 r/WsvsOn2UY500d6OK51eXG3YFFxLiHprXSLzihlom3J45iO9ogPV2DJOjQkQAZ9 2gDC4hAjhwAc9AFnwxLwYQ0YPoIMKHI8D//zbhw1SJT+HOmDwoH1zLtgftGByfUH jzqiguCttRBBlbCfiEdYEEobSZlWXeHfH7L6TZptcytgOze+NT2gCBFz0wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPodVOFYWsCXw/kd78Az3aVyLqHmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzRkNzAw ZS05ZjFlLTQ5NTktOWNmZC1iMmI1NzJlMjVhZmQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNGQ3MDBl LTlmMWUtNDk1OS05Y2ZkLWIyYjU3MmUyNWFmZC8xLzEtaDFVNFZoYXdKZkQtUjN2 d0RQZHBYSXVvZVkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvOcjANBgkqhkiG9w0BAQsFAAOCAQEAnwuI 3MU5xUvlL3d3Peaw3NS9JH0Q3Sjy+aK9HWrPnJTSX2vm1FAd0WrKRIzKirXP91y5 YZYMpeyiDndDh8rNPH+V7avlvxEYq/zyHy+9O56kN1cNncHGSP/fFvcgRhhLsqCj 3Wwa4RwwVt/NI8CuikARSHPU/ts1PpO/TmxQTdr6bDE6d+1iBXw2JZx8zqwu70ju DkmIVhhTAetM9gi8+SiV+k3nC9KvUjtHJdkTih+xrb7Rs8GHsBYtPpnIP9QNBm6Y Dy8IgH9/3o4pOdkzxA47JnQLB892AAynGPjGfcs7tNDhANZZoUlZxqjNB7/2FJlK nD3sDK+rj5LCQ1YLAg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:00 2026 by rpki-client