This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer File: 1-h3je7xsBkINpibAu01yMjHpPoQ.cer (raw, json) Hash identifier: 5o/+UeA8D7jl8q7LU4aSQZwSh1Z3RXUrxK+8vRTsX4M= Subject key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38532CA4A11673E2FF1CE9E072FA16 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203167 IP: 195.88.197.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:53:2c:a4:a1:16:73:e2:ff:1c:e9:e0:72:fa:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:a9:92:4b:89:f6:22:eb:78:64:82:a7:9b: 86:4b:ad:b5:b7:46:0e:62:c6:b4:30:91:8d:4b:fc: a7:77:95:b4:7b:71:3c:b7:e6:48:ea:b5:b6:3a:ce: e9:cf:8d:45:72:7f:23:d4:ae:eb:82:f1:69:89:1a: f6:ee:b6:aa:88:cd:52:3f:ef:70:c1:70:b8:ac:ce: de:58:9a:d6:54:4c:fb:44:a5:d2:b2:c4:12:d5:02: 3c:a3:2e:2b:d1:dd:5b:3f:92:46:1b:50:73:df:fd: 69:79:33:a3:b3:76:9e:65:a1:65:81:67:f2:ac:76: 2a:5c:0c:51:f6:57:71:17:7c:63:42:00:80:f6:7e: 8a:33:ca:11:5e:9c:9e:20:1a:51:c3:3b:32:49:e7: b0:ba:ec:09:4f:27:6c:13:df:39:24:fa:1f:e4:33: 35:a6:88:e2:58:78:32:1c:61:8d:e4:d2:e7:94:e7: cd:de:13:4f:e2:2e:3b:54:a7:13:ed:4f:42:11:f7: a0:b0:33:78:f7:ca:64:6b:fd:96:a4:28:2d:57:9f: 12:7d:a9:00:98:12:dd:9e:4d:5a:c6:06:0f:bf:a6: 39:a9:b7:fd:55:60:5d:95:14:66:c2:34:d6:4f:80: 9c:ac:d6:a4:ad:c2:8f:39:5f:5e:2d:79:83:b7:9e: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.197.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203167 Signature Algorithm: sha256WithRSAEncryption 88:a5:25:51:15:6c:59:3c:40:9d:c2:c5:23:94:4b:09:57:21: 47:26:8d:f9:9c:d4:7f:52:89:a7:7a:44:63:15:0f:fd:45:de: f3:ed:27:34:f7:57:c7:45:6d:ce:d1:e1:0c:a8:dd:55:ce:d8: f1:2e:70:98:0b:74:12:36:fb:48:96:84:d0:f4:2e:0b:04:1e: 58:e0:cc:86:75:61:1a:e6:e8:10:7c:49:c8:d3:d8:f0:9a:fe: 12:07:f6:81:b4:88:7b:07:51:aa:8b:e8:26:56:f4:2b:eb:07: d5:4d:e7:17:9e:f4:fd:25:ef:f4:4b:4a:1e:5c:b6:ff:f9:40: 57:29:1b:a2:5f:a0:0a:30:2e:68:73:a6:68:b7:7c:46:f8:73: 36:42:db:c7:a3:e2:20:c4:e5:fe:fb:14:1b:d8:62:b6:9d:77: 11:ca:aa:34:53:f1:1a:4b:7a:14:c2:4d:11:96:cc:19:c9:7b: d8:22:e8:7d:b0:6c:76:89:44:70:73:ae:85:54:3d:5d:e6:95: 3c:0c:ff:7b:47:fe:28:ff:20:0c:8c:6e:5c:31:ea:2c:b7:33: 53:0d:3f:d4:ed:dd:04:4a:72:01:71:aa:02:cc:b3:f8:2c:8c: e7:f4:3c:0a:44:6d:5c:9f:95:ec:69:35:ec:5b:5d:c9:01:40: cf:d1:fd:96 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt+OFMspKEWc+L/HOngcvoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTFkZTM3YmJjNmMwNjQyMGRhNjI2YzBiYjRkNzIzMjMxZTkzZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSSpkkuJ9iLreGSCp5uGS621t0YO Ysa0MJGNS/ynd5W0e3E8t+ZI6rW2Os7pz41Fcn8j1K7rgvFpiRr27raqiM1SP+9w wXC4rM7eWJrWVEz7RKXSssQS1QI8oy4r0d1bP5JGG1Bz3/1peTOjs3aeZaFlgWfy rHYqXAxR9ldxF3xjQgCA9n6KM8oRXpyeIBpRwzsySeewuuwJTydsE985JPof5DM1 pojiWHgyHGGN5NLnlOfN3hNP4i47VKcT7U9CEfegsDN498pka/2WpCgtV58SfakA mBLdnk1axgYPv6Y5qbf9VWBdlRRmwjTWT4CcrNakrcKPOV9eLXmDt56ibwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPod43u8bAZCDaYmwLtNcjIx6T6EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzYwOGY2 ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2ODAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZk LThjZDEtNDk5ZS1hNTE4LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJB dTAxeU1qSHBQb1EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNYxTAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDGZ8wDQYJKoZIhvcNAQELBQADggEBAIilJVEVbFk8QJ3CxSOUSwlXIUcmjfmc 1H9Siad6RGMVD/1F3vPtJzT3V8dFbc7R4Qyo3VXO2PEucJgLdBI2+0iWhND0LgsE HljgzIZ1YRrm6BB8ScjT2PCa/hIH9oG0iHsHUaqL6CZW9CvrB9VN5xee9P0l7/RL Sh5ctv/5QFcpG6JfoAowLmhzpmi3fEb4czZC28ej4iDE5f77FBvYYraddxHKqjRT 8RpLehTCTRGWzBnJe9gi6H2wbHaJRHBzroVUPV3mlTwM/3tH/ij/IAyMblwx6iy3 M1MNP9Tt3QRKcgFxqgLMs/gsjOf0PApEbVyflexpNexbXckBQM/R/ZY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:22 2026 by rpki-client