This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer (raw, json) Hash identifier: 0a3fMmmGsH5nUItSJDZ53xS1uVUP3Pw+tsgp30Q2ytU= Subject key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA69ABC352E5AF8BD5DEB72E9537159 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34820 IP: 45.152.96.0/22 IP: 85.159.104.0/21 IP: 185.110.140.0/22 IP: 185.140.40.0/22 IP: 2a0c:2540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9a:bc:35:2e:5a:f8:bd:5d:eb:72:e9:53:71:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa3c481607619c835d09f2471d976d7cf74a0439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:22:46:76:22:9c:30:ee:32:57:c4:f1:96: bf:71:ec:93:30:c8:35:bb:5a:b1:75:a5:18:7c:4c: 9d:40:c4:b9:e9:68:d7:48:96:76:70:0b:ff:d8:85: 14:1f:9a:a1:6a:d5:d1:40:84:07:64:6e:e8:c8:24: 15:cd:ae:52:17:b9:22:88:14:1b:a5:6f:3e:b7:d4: df:f7:04:03:31:70:a3:fe:3a:ae:05:bd:ca:af:38: 7f:fb:9e:21:e0:d9:f4:d3:0a:05:30:9b:41:62:37: 9d:d8:b5:64:e1:dc:c8:92:f6:dc:35:08:a8:8d:22: f7:eb:59:8e:b0:ec:7b:b6:92:39:06:73:84:9e:6c: fc:d3:61:4a:1e:aa:9f:5f:72:36:b8:87:76:4f:5e: c9:55:c8:b8:ad:69:6c:58:fb:e9:9c:19:e5:bd:eb: 24:5a:55:1f:cd:5e:dc:f4:06:c4:bd:ab:25:0b:90: 76:d4:3c:99:8f:b3:fe:07:8a:c1:a2:44:fe:63:e2: 21:5f:12:47:66:06:8c:b4:8e:06:5d:e6:09:10:22: 8c:e8:68:b4:57:13:78:d5:1a:d3:ee:70:c6:45:25: 44:3c:65:7f:3a:6a:09:fb:5c:01:99:59:2d:44:7a: ee:a2:9b:a2:0c:9e:19:cb:93:b4:fe:e3:81:d4:dc: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.96.0/22 85.159.104.0/21 185.110.140.0/22 185.140.40.0/22 IPv6: 2a0c:2540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34820 Signature Algorithm: sha256WithRSAEncryption 4b:76:5e:02:82:3a:cd:70:14:12:54:d3:af:0f:5d:66:cc:6e: 6a:2f:dc:4f:1c:1c:55:21:61:f6:94:73:ce:c3:04:f5:7c:0e: 61:5b:1a:b8:93:6d:b2:59:ab:4b:d2:e5:9c:3c:43:9a:e1:6a: 3b:7c:ed:46:e6:05:98:f7:51:0a:dd:cd:d8:78:6c:9e:3b:00: dc:75:c1:34:15:74:ff:f0:dc:ba:e9:8c:da:7d:c7:d2:0a:f4: 62:df:70:ff:b0:0a:0c:8c:0a:d3:c5:ea:2c:17:a9:36:3b:0d: e6:f9:a5:5b:c3:27:d6:b4:2c:54:dc:b2:65:f1:a3:aa:d7:39: bc:86:01:8c:35:c7:6a:b9:0f:c1:09:77:01:d0:fb:9d:d7:ce: b7:fd:2e:9e:9f:77:04:ee:ea:53:db:f3:18:03:58:55:62:44: 7a:97:42:60:90:ea:ad:cd:98:0e:50:cc:e2:f3:6e:ad:cd:f7: de:de:1b:c9:92:5a:52:7e:7b:ae:d7:c2:5e:42:d5:3c:f1:5b: c0:f3:9b:00:1e:4f:5e:0f:b1:2d:1a:eb:16:b4:82:dc:a5:80: 69:99:d4:76:b8:b3:54:b4:c6:d8:f9:f0:87:21:1f:b8:da:e1: 18:5d:f4:d3:ea:f9:e8:8d:5f:a1:ad:e8:ba:99:a8:21:42:b1: a4:c9:84:41 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt+ppq8NS5a+L1d63LpU3FZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTNjNDgxNjA3NjE5YzgzNWQwOWYyNDcxZDk3NmQ3Y2Y3NGEwNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RYiRnYinDDuMlfE8Za/ceyTMMg1 u1qxdaUYfEydQMS56WjXSJZ2cAv/2IUUH5qhatXRQIQHZG7oyCQVza5SF7kiiBQb pW8+t9Tf9wQDMXCj/jquBb3Krzh/+54h4Nn00woFMJtBYjed2LVk4dzIkvbcNQio jSL361mOsOx7tpI5BnOEnmz802FKHqqfX3I2uId2T17JVci4rWlsWPvpnBnlvesk WlUfzV7c9AbEvaslC5B21DyZj7P+B4rBokT+Y+IhXxJHZgaMtI4GXeYJECKM6Gi0 VxN41RrT7nDGRSVEPGV/OmoJ+1wBmVktRHruopuiDJ4Zy5O0/uOB1Nz1LwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzk5ODQ4 Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYyOWQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhi LWM0ZjgtNDZhYi04OTIzLTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpI SFpkdGZQZEtCRGsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEAi2YYAMEA1WfaAMEArlujAMEArmMKDANBAIA AjAHAwUDKgwlQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAiAQwDQYJKoZIhvcN AQELBQADggEBAEt2XgKCOs1wFBJU068PXWbMbmov3E8cHFUhYfaUc87DBPV8DmFb GriTbbJZq0vS5Zw8Q5rhajt87UbmBZj3UQrdzdh4bJ47ANx1wTQVdP/w3LrpjNp9 x9IK9GLfcP+wCgyMCtPF6iwXqTY7Deb5pVvDJ9a0LFTcsmXxo6rXObyGAYw1x2q5 D8EJdwHQ+53Xzrf9Lp6fdwTu6lPb8xgDWFViRHqXQmCQ6q3NmA5QzOLzbq3N997e G8mSWlJ+e67Xwl5C1TzxW8DzmwAeT14PsS0a6xa0gtylgGmZ1Ha4s1S0xtj58Ich H7ja4Rhd9NPq+eiNX6Gt6LqZqCFCsaTJhEE= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:30 2026 by rpki-client