This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer (raw, json) Hash identifier: piFsd/lXnvLNZoPFzs6/rnjAftwqyTsP3NsDEhhl+MI= Subject key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E9BF8F5BE121F902348C1B5EDB0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212405 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e9:bf:8f:5b:e1:21:f9:02:34:8c:1b:5e:db:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:e2:aa:a7:5f:b1:e4:c4:cd:ba:8c:78:ba: 17:4a:45:5a:26:23:57:31:09:ad:d4:c9:5b:fd:e9: 88:8c:70:fd:a2:a3:92:8f:23:78:b1:9b:1b:69:99: cd:42:92:7c:d9:c8:89:83:8d:4f:2a:59:7e:23:70: 9d:38:c4:1f:1d:f7:30:60:fa:90:0d:9d:14:ee:0f: 7b:0c:d2:53:72:67:df:f1:99:96:81:d9:d4:6c:8e: 91:f1:1f:2a:70:44:43:65:2a:98:b4:9e:66:e4:eb: 30:bb:e0:b2:25:4e:bf:e1:61:4f:da:b4:be:82:a2: 31:9c:73:d9:6b:bb:2f:87:75:11:4a:60:1a:7a:b7: d3:93:19:da:2e:0b:04:22:1a:23:75:7e:33:29:f5: df:09:a5:79:0c:45:8b:6d:27:c9:23:9d:a4:03:3a: c4:a4:2c:10:1b:46:b6:55:e7:ec:68:47:fe:00:87: fc:53:b5:ad:4d:44:d0:14:4d:4f:99:98:a1:06:71: 22:7b:2f:aa:10:d4:2b:ae:43:dd:b6:5a:bb:40:c0: 12:dc:3f:cc:ff:63:7d:05:f5:eb:25:e4:fc:0f:2e: 05:eb:e5:39:aa:4c:d9:b9:9f:64:7a:f7:30:fc:ea: 4f:a9:c4:e3:2d:47:02:18:e1:de:f6:42:39:ca:01: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212405 Signature Algorithm: sha256WithRSAEncryption 25:f6:05:b8:a6:70:fd:e4:49:e9:10:3a:d1:8a:67:4e:ee:ab: 11:93:e5:cb:d4:d0:13:e1:57:7b:62:af:fa:32:af:b0:64:d7: cf:58:cc:f0:44:57:86:84:25:16:fa:e7:a7:91:f3:f1:b8:bf: 64:a1:85:9d:70:13:5c:48:33:47:e3:2d:b2:bf:4c:05:f3:ed: 35:2e:a3:05:67:47:ac:02:d4:98:ad:d8:4d:69:de:c5:98:35: 0e:9b:85:31:6e:dc:92:8e:31:df:c2:a2:d1:90:5d:ce:38:bc: 13:9e:94:0f:2b:be:b6:1e:b5:7d:d5:84:0c:03:1c:1b:34:4c: 60:9b:fe:22:d2:ea:7d:da:31:3b:71:e2:f1:77:80:db:9a:77: 97:4c:2d:f6:da:1f:5c:c1:91:17:b4:a4:5f:4f:41:19:eb:da: 62:a6:0a:28:6a:ff:0f:70:4f:72:6d:ce:e9:d4:e8:52:c3:0f: f3:66:bf:82:c8:cb:c6:62:96:99:c2:fd:d4:42:24:ef:83:ab: d1:4b:ef:b4:11:bc:48:c9:28:de:1d:f2:2d:e3:6c:f3:04:7a: 7d:c6:2d:e0:8f:3c:fd:ff:71:b4:86:d4:ed:1c:c7:15:17:49: d6:d7:57:6f:31:79:76:68:2d:32:30:8d:71:4d:35:fa:e3:d6: 26:78:cb:d2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt4NOm/j1vhIfkCNIwbXtsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTUwMmQ5YTNkMDdkMWZjMGM4MzJmOTY3ZmRmM2VmODgwZGMzZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltziqqdfseTEzbqMeLoXSkVaJiNX MQmt1Mlb/emIjHD9oqOSjyN4sZsbaZnNQpJ82ciJg41PKll+I3CdOMQfHfcwYPqQ DZ0U7g97DNJTcmff8ZmWgdnUbI6R8R8qcERDZSqYtJ5m5Oswu+CyJU6/4WFP2rS+ gqIxnHPZa7svh3URSmAaerfTkxnaLgsEIhojdX4zKfXfCaV5DEWLbSfJI52kAzrE pCwQG0a2VefsaEf+AIf8U7WtTUTQFE1PmZihBnEiey+qENQrrkPdtlq7QMAS3D/M /2N9BfXrJeT8Dy4F6+U5qkzZuZ9kevcw/OpPqcTjLUcCGOHe9kI5ygGtdQIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPpQLZo9B9H8DIMvln/fPviA3D4jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2Q1ZjJh Yi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVmZjQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFi LTA5MjAtNDYyOC04NWUxLWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1X Zjk4LS1JRGNQaU0ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPbUwDQYJKoZIhvcNAQELBQADggEBACX2BbimcP3k SekQOtGKZ07uqxGT5cvU0BPhV3tir/oyr7Bk189YzPBEV4aEJRb656eR8/G4v2Sh hZ1wE1xIM0fjLbK/TAXz7TUuowVnR6wC1Jit2E1p3sWYNQ6bhTFu3JKOMd/CotGQ Xc44vBOelA8rvrYetX3VhAwDHBs0TGCb/iLS6n3aMTtx4vF3gNuad5dMLfbaH1zB kRe0pF9PQRnr2mKmCihq/w9wT3JtzunU6FLDD/Nmv4LIy8ZilpnC/dRCJO+Dq9FL 77QRvEjJKN4d8i3jbPMEen3GLeCPPP3/cbSG1O0cxxUXSdbXV28xeXZoLTIwjXFN Nfrj1iZ4y9I= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:49 2026 by rpki-client