This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer (raw, json) Hash identifier: wsaharJuBik2GMIE02fMoNidEsvnetXxWmYLNg/z2ZI= Subject key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3C1FDD1346B8BB285F998ACA974F9259 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 08 Feb 2026 07:20:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201541 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3c:1f:dd:13:46:b8:bb:28:5f:99:8a:ca:97:4f:92:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 8 07:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:72:46:0c:0a:4d:90:0f:8c:8b:20:24:9b: 39:16:2b:43:5e:51:1d:f5:bf:24:dd:c7:7e:80:e3: ac:35:c3:62:cd:f0:1d:39:30:de:5c:f0:2f:6b:18: db:d0:8e:31:0a:57:1a:34:9c:f5:30:88:e0:e8:c2: 6b:ac:fb:3f:81:c4:71:8c:1b:5a:61:fd:4b:87:c8: ea:0f:9b:db:c2:d0:36:52:d6:8a:72:1a:6a:42:22: 39:1b:34:14:7f:ab:ca:d9:3e:e8:b7:36:4f:d7:a9: ac:69:d5:b7:47:5d:32:22:fd:95:11:ca:be:48:40: be:55:5f:4e:35:97:40:95:8d:08:b2:99:a8:e1:64: 59:ad:33:9e:20:c6:94:d5:b2:78:cd:09:f7:83:39: 60:d8:99:53:35:b3:20:5b:ec:5a:14:6c:c5:58:76: 14:93:f8:5c:f9:3a:56:d6:45:e1:30:21:84:d4:0e: 8e:f3:8b:37:13:77:25:e0:d6:ed:93:b3:1a:cc:a5: b7:52:f8:55:42:04:29:ae:3b:33:75:a1:d9:74:96: ca:dd:f1:7e:a4:30:1e:4a:db:7c:71:6f:51:5e:53: 6f:1f:67:92:8e:7f:e0:99:51:72:b3:8c:c1:d5:ea: 15:d3:a1:a6:b3:12:fa:33:f8:95:40:6f:4e:34:7f: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201541 Signature Algorithm: sha256WithRSAEncryption 3f:6f:bb:0c:33:35:55:3e:62:96:ec:60:54:6f:ac:a3:a0:4f: 3b:25:35:69:a4:85:2f:d1:12:bc:30:99:da:f4:71:35:bf:4c: 81:bb:61:b7:39:b8:6e:78:b6:ef:a5:19:b9:a3:94:46:3d:fc: c5:bd:99:f0:64:ff:40:7f:a4:e0:61:c6:02:b4:8e:c5:2d:bb: 3e:f9:73:5c:31:76:68:83:ec:f7:49:98:2d:9c:24:b1:76:af: 68:c3:f0:84:79:1b:6a:68:09:5e:8f:c9:5b:62:1c:56:67:f0: 6c:8e:07:b7:e0:73:8c:af:1b:b0:e8:88:4b:af:dd:db:7a:2b: b4:1b:cb:cf:13:7f:c4:6a:7c:9c:ba:1e:74:6f:66:c8:40:ff: 28:4b:62:f0:99:36:66:cc:41:33:e1:12:41:3d:b8:60:ca:01: 16:f0:fa:ae:bb:7c:a2:dc:91:1e:88:c1:0f:57:43:d4:a1:df: 50:49:5d:a2:e9:60:80:b5:c8:9c:4e:26:dd:9e:ab:61:35:e3: 2d:a7:69:d4:73:b9:87:19:bf:1e:0b:a8:c2:e4:23:0b:c3:dc: 97:c1:f7:f6:78:23:60:93:a5:7e:ed:4c:d4:c0:0e:23:9a:12: a0:d2:4a:6a:5d:ef:02:3a:7b:0c:9c:5f:38:23:24:23:5f:fe: 1f:20:29:a9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZw8H90TRri7KF+ZisqXT5JZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA4MDcyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ2NTVhYTI5Y2I0YzgzOTQ3ZjVmYTZjNjhmMDRjMjM5MGI1MTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwStyRgwKTZAPjIsgJJs5FitDXlEd 9b8k3cd+gOOsNcNizfAdOTDeXPAvaxjb0I4xClcaNJz1MIjg6MJrrPs/gcRxjBta Yf1Lh8jqD5vbwtA2UtaKchpqQiI5GzQUf6vK2T7otzZP16msadW3R10yIv2VEcq+ SEC+VV9ONZdAlY0Ispmo4WRZrTOeIMaU1bJ4zQn3gzlg2JlTNbMgW+xaFGzFWHYU k/hc+TpW1kXhMCGE1A6O84s3E3cl4Nbtk7MazKW3UvhVQgQprjszdaHZdJbK3fF+ pDAeStt8cW9RXlNvH2eSjn/gmVFys4zB1eoV06GmsxL6M/iVQG9ONH/gWwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPpGVaopy0yDlH9fpsaPBMI5C1EiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2Y0OWQ4 NC00YTFjLTQwZmQtYmFhNi1jODYxNWE1NDBjZGQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0 LTRhMWMtNDBmZC1iYWE2LWM4NjE1YTU0MGNkZC8xLzEta1pWcWluTFRJT1VmMS1t eG84RXdqa0xVU0kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDE0UwDQYJKoZIhvcNAQELBQADggEBAD9vuwwzNVU+ YpbsYFRvrKOgTzslNWmkhS/RErwwmdr0cTW/TIG7Ybc5uG54tu+lGbmjlEY9/MW9 mfBk/0B/pOBhxgK0jsUtuz75c1wxdmiD7PdJmC2cJLF2r2jD8IR5G2poCV6PyVti HFZn8GyOB7fgc4yvG7DoiEuv3dt6K7Qby88Tf8RqfJy6HnRvZshA/yhLYvCZNmbM QTPhEkE9uGDKARbw+q67fKLckR6IwQ9XQ9Sh31BJXaLpYIC1yJxOJt2eq2E14y2n adRzuYcZvx4LqMLkIwvD3JfB9/Z4I2CTpX7tTNTADiOaEqDSSmpd7wI6ewycXzgj JCNf/h8gKak= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:27 2026 by rpki-client