This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer (raw, json) Hash identifier: RF7qcnUrdIrW+47/CZDHUFZ7n/W87l8PfEWmJlJK5qc= Subject key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66BB49572794109DB7BA39E292342 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42744 IP: 194.110.151.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6b:b4:95:72:79:41:09:db:7b:a3:9e:29:23:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:89:74:d0:46:69:c1:7c:34:d8:1e:fd:e5: b9:94:fc:1b:ba:15:08:aa:58:f9:30:f9:04:3f:34: 68:08:29:eb:67:d0:96:0a:dc:a1:20:ad:a1:e8:79: b4:c0:18:4d:26:ca:b9:21:bf:78:75:18:0e:d7:8f: 27:25:3b:9f:b8:c4:f7:65:25:46:75:bb:b8:20:66: d5:1a:df:f8:4b:af:d2:39:cd:0c:e0:5f:2b:c0:ea: e0:66:38:fb:00:d0:6a:83:35:5a:2c:35:22:1d:dd: 38:ca:e5:b5:e2:0b:c9:01:b1:f0:53:60:1f:44:bf: 01:ee:43:62:11:39:b4:9c:03:cd:0d:c3:86:a7:de: e1:fd:77:8d:15:94:7e:01:46:c7:d1:47:57:17:1b: e5:3f:0b:f9:69:45:77:ab:df:34:e9:ca:dd:50:d3: d8:77:b4:94:13:f0:5f:95:3e:f5:1f:cd:09:c9:cb: fd:ff:55:ce:ca:0c:bb:f1:41:29:8e:08:92:bd:d1: 59:b2:2c:27:6a:ab:ad:27:0c:e0:2e:58:d0:b5:08: b6:e6:9b:d7:de:62:3b:0e:ae:c2:28:aa:35:fd:2a: 25:2a:6a:34:1b:a2:5e:0f:78:b9:11:f6:71:5b:d0: e5:d1:70:f3:65:45:c0:66:17:52:54:33:21:8d:ad: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.151.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42744 Signature Algorithm: sha256WithRSAEncryption 51:a5:89:0b:63:30:bc:b7:d6:52:4b:ec:b8:df:e7:1b:83:ae: 07:44:65:70:ac:83:30:4e:44:d4:6e:46:a4:fe:9e:42:ed:d5: 7f:14:4d:14:86:96:81:bf:6a:a3:fd:07:bd:03:c6:51:6b:9e: 4a:80:21:bb:6d:2b:53:c9:bc:f6:07:85:9f:64:ed:b8:5f:26: 3a:fa:b2:e2:8e:ab:0e:6d:58:e0:c9:72:7c:4f:0e:e9:ed:48: e7:2d:7b:d3:32:42:9f:da:c3:f4:80:cc:8e:c3:b6:d0:17:39: ba:e2:99:74:59:4d:d9:e3:58:54:e8:c1:c6:02:5e:2a:00:91: 12:f0:a8:62:00:a7:f6:81:b3:a3:4e:04:91:aa:d8:36:d7:f7: aa:62:da:b6:29:b1:70:a7:92:93:14:b9:54:13:90:5f:15:38: d3:61:53:a2:67:6c:0f:53:de:9e:11:ec:61:a9:4f:a9:e2:0a: 66:9b:20:59:4c:fb:10:6d:02:a6:72:ad:2b:b3:ee:d1:de:da: 6e:27:23:03:30:f1:81:c3:2b:6d:cf:ff:5d:aa:7d:ad:15:cf: b9:c3:ea:e3:f0:01:96:dd:cb:f9:0c:5c:b1:0d:f9:ab:2d:c6: fe:f9:a3:f0:9c:7a:57:37:fc:a0:af:d0:1c:76:97:10:cd:11: 5f:cf:97:2d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt3xmu0lXJ5QQnbe6OeKSNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE0Y2MyMGE3MGVmNWEwMzE0NmE3ZGM1YTc5ZGRiNTA2NWJlZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHuJdNBGacF8NNge/eW5lPwbuhUI qlj5MPkEPzRoCCnrZ9CWCtyhIK2h6Hm0wBhNJsq5Ib94dRgO148nJTufuMT3ZSVG dbu4IGbVGt/4S6/SOc0M4F8rwOrgZjj7ANBqgzVaLDUiHd04yuW14gvJAbHwU2Af RL8B7kNiETm0nAPNDcOGp97h/XeNFZR+AUbH0UdXFxvlPwv5aUV3q9806crdUNPY d7SUE/BflT71H80Jycv9/1XOygy78UEpjgiSvdFZsiwnaqutJwzgLljQtQi25pvX 3mI7Dq7CKKo1/SolKmo0G6JeD3i5EfZxW9Dl0XDzZUXAZhdSVDMhja2y9QIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPoUzCCnDvWgMUan3Fp53bUGW+3oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzUwYmZj ZS0zODVlLTQwNjQtYmRlNy01OWZlYzJiOWY5MTQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNTBiZmNl LTM4NWUtNDA2NC1iZGU3LTU5ZmVjMmI5ZjkxNC8xLzEtaFRNSUtjTzlhQXhScWZj V25uZHRRWmI3ZWcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJulzAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMApvgwDQYJKoZIhvcNAQELBQADggEBAFGliQtjMLy31lJL7Ljf5xuDrgdEZXCs gzBORNRuRqT+nkLt1X8UTRSGloG/aqP9B70DxlFrnkqAIbttK1PJvPYHhZ9k7bhf Jjr6suKOqw5tWODJcnxPDuntSOcte9MyQp/aw/SAzI7DttAXObrimXRZTdnjWFTo wcYCXioAkRLwqGIAp/aBs6NOBJGq2DbX96pi2rYpsXCnkpMUuVQTkF8VONNhU6Jn bA9T3p4R7GGpT6niCmabIFlM+xBtAqZyrSuz7tHe2m4nIwMw8YHDK23P/12qfa0V z7nD6uPwAZbdy/kMXLEN+astxv75o/Ccelc3/KCv0Bx2lxDNEV/Ply0= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:04 2026 by rpki-client