This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer (raw, json) Hash identifier: rKYmB/wmHwH16gjGk9kTTPDgxeXtfS9OYScgL1uRBZU= Subject key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECAF9D407048FF4C05488841478B72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61200 IP: 103.232.44.0/22 IP: 185.16.20.0/22 IP: 2a03:cbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:af:9d:40:70:48:ff:4c:05:48:88:41:47:8b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b3:ab:f6:74:d6:c5:2b:84:a0:6b:06:dc:fc: 7b:ad:32:ba:71:d3:c4:cd:ba:5b:99:2f:26:0b:8d: 22:27:80:9e:22:e3:b1:5f:51:7c:69:f5:ed:6a:98: b4:d0:ad:46:58:67:ad:26:03:f3:f3:cf:ef:0d:72: c6:b7:38:5e:95:f4:0b:af:26:d5:80:c3:cf:ab:ad: 2b:af:54:b7:7a:15:da:34:bf:80:80:b0:1b:a8:1c: 77:f6:ce:5e:33:33:ec:71:07:bf:fc:ec:c8:4e:07: b5:30:0e:11:8d:1b:bd:61:57:50:7e:95:82:d0:59: c1:7f:b4:3e:8b:45:40:93:a9:c2:f6:0d:4e:b2:92: ac:2f:97:c2:40:6f:70:6f:e3:04:87:22:f1:71:95: 30:69:7f:df:00:c9:d4:e5:24:76:61:f8:8c:d0:e1: 1c:58:68:49:3c:7a:f0:ff:d8:00:52:05:5e:20:95: 11:c4:04:1f:0a:dc:16:39:2a:1b:a1:ce:71:96:cd: c4:48:a9:6c:48:50:c4:e8:45:d1:04:95:21:6f:4a: c4:b9:93:dd:56:d8:78:fc:b1:25:67:28:bc:9b:e7: b9:58:be:97:8e:20:d8:26:3d:4a:64:b2:c7:ac:97: 32:2d:5e:48:48:ed:2b:fb:d3:ec:ab:46:a2:f5:56: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.44.0/22 185.16.20.0/22 IPv6: 2a03:cbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61200 Signature Algorithm: sha256WithRSAEncryption 8a:10:b5:5b:6d:e1:de:a0:71:3c:4e:44:f0:0c:8c:86:f7:57: 40:43:57:af:03:cd:87:f8:62:29:f3:0b:bd:44:d6:05:3b:27: 4a:4f:63:44:19:a4:a9:d1:b4:a1:26:6a:c3:7f:c2:19:8f:71: 0b:58:e1:f6:4f:87:9c:52:9a:46:5a:9a:fc:b4:11:64:84:49: 44:15:ef:bf:b6:2b:7a:31:55:55:86:f3:ec:66:7f:ef:96:07: 83:24:bd:1e:f7:44:71:3d:d2:68:71:c4:14:30:32:06:30:e9: e5:2a:43:4f:23:ae:5b:b3:bf:26:44:e9:60:e4:8b:43:ff:4f: 11:41:78:54:b3:2e:b5:19:ac:94:16:ed:51:04:b3:51:1c:c8: f5:01:41:3e:46:40:7b:4b:e7:2a:fe:e1:7d:0a:41:31:83:66: a5:8c:90:09:15:c9:f2:d8:a0:e1:62:44:67:9d:65:07:ff:a3: 23:0e:d1:ea:3d:7e:37:01:26:70:32:3f:be:66:9b:9d:6f:94: 2c:d8:61:b8:b5:21:ea:d7:d5:7a:a4:86:7c:62:f9:16:12:0b: e8:1f:72:02:cc:70:8f:8f:dd:38:2c:1b:3f:09:b4:fc:83:5a: ee:85:af:06:67:2b:43:e8:ec:81:e1:64:8f:21:74:c3:40:b8: 8b:44:9a:e5 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt57K+dQHBI/0wFSIhBR4tyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTIzYWViNmE1ZDlhMzRiODM2MDc3Nzc3NzZmYjg3NjRmYjc2ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57Or9nTWxSuEoGsG3Px7rTK6cdPE zbpbmS8mC40iJ4CeIuOxX1F8afXtapi00K1GWGetJgPz88/vDXLGtzhelfQLrybV gMPPq60rr1S3ehXaNL+AgLAbqBx39s5eMzPscQe//OzITge1MA4RjRu9YVdQfpWC 0FnBf7Q+i0VAk6nC9g1OspKsL5fCQG9wb+MEhyLxcZUwaX/fAMnU5SR2YfiM0OEc WGhJPHrw/9gAUgVeIJURxAQfCtwWOSoboc5xls3ESKlsSFDE6EXRBJUhb0rEuZPd Vth4/LElZyi8m+e5WL6XjiDYJj1KZLLHrJcyLV5ISO0r+9Psq0ai9VaqDQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPojrral2aNLg2B3d3dvuHZPt28AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzM2ZTZm MC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2FhMDIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYw LWViMmMtNGNmOC04NTY1LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQz ZDItNGRrLTNid0EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAmfoLAMEArkQFDANBAIAAjAHAwUDKgPLwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7xAwDQYJKoZIhvcNAQELBQADggEBAIoQ tVtt4d6gcTxORPAMjIb3V0BDV68DzYf4YinzC71E1gU7J0pPY0QZpKnRtKEmasN/ whmPcQtY4fZPh5xSmkZamvy0EWSESUQV77+2K3oxVVWG8+xmf++WB4MkvR73RHE9 0mhxxBQwMgYw6eUqQ08jrluzvyZE6WDki0P/TxFBeFSzLrUZrJQW7VEEs1EcyPUB QT5GQHtL5yr+4X0KQTGDZqWMkAkVyfLYoOFiRGedZQf/oyMO0eo9fjcBJnAyP75m m51vlCzYYbi1IerX1Xqkhnxi+RYSC+gfcgLMcI+P3TgsGz8JtPyDWu6FrwZnK0Po 7IHhZI8hdMNAuItEmuU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:23 2026 by rpki-client