This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer (raw, json) Hash identifier: fSI1Y+4pX7qsBdpkLFWKDph7VbZfHPzoxk31uP6jptk= Subject key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35CC2F078938F83A471EF5F848CF45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25009 IP: 185.21.112.0/22 IP: 2a03:240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cc:2f:07:89:38:f8:3a:47:1e:f5:f8:48:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:aa:9e:f8:6e:f9:14:80:fa:0a:95:4b:e7: e0:3f:c7:0e:a2:8a:b9:90:c2:f9:fb:11:3d:d9:a9: 38:7b:15:61:b8:d0:c3:1f:e7:59:f7:93:e0:b5:26: d9:34:75:8b:7b:88:ec:60:43:40:1b:f9:fe:57:44: 37:9f:30:53:a1:57:bf:28:a9:60:ec:92:77:39:86: e2:e5:2d:a6:c5:d0:34:12:e9:a3:06:95:22:dd:a1: 9d:72:e1:37:76:03:68:fc:c5:f1:82:07:13:19:55: 5a:fb:26:67:2d:6d:37:fa:65:59:71:30:f1:95:9f: 48:03:66:4f:02:95:c7:d8:31:f0:6c:dd:14:12:9c: 5b:3b:60:93:c8:0b:fb:8e:f2:5f:d0:91:34:60:cd: ad:d4:9f:fe:0a:79:66:fe:c2:1b:12:8b:bf:0e:48: 69:79:91:65:ec:40:55:87:1b:30:9e:de:fe:1c:21: 03:f0:4e:c1:0c:d7:a6:45:ab:26:b8:4e:3a:4f:65: d8:67:a4:32:d7:ff:69:62:8b:58:a9:fc:91:a7:6a: e0:e6:23:cd:db:4e:5a:fc:23:d7:be:2e:d9:c9:fb: 08:e4:f5:fb:06:2f:d9:54:5d:b8:d8:6e:9b:bd:37: ff:98:69:a9:4d:9d:ca:9d:99:80:a9:3c:1a:b9:47: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.112.0/22 IPv6: 2a03:240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25009 Signature Algorithm: sha256WithRSAEncryption 6b:0d:f5:4c:3b:11:e3:47:c8:56:69:96:38:8f:9e:36:bb:ad: 53:88:77:c3:54:d1:17:84:c3:f3:33:92:14:38:31:14:8e:36: 84:97:8b:6e:95:89:e0:4a:bf:f5:5b:89:25:83:9a:d3:43:f7: 5d:17:65:fa:46:13:62:59:30:0c:e9:82:5b:2b:27:df:bd:fe: 5c:eb:18:32:57:95:c8:65:9f:9d:50:45:48:1a:fc:46:6f:52: fc:3e:6b:74:da:dc:44:04:77:21:dd:ff:e3:bb:96:ee:00:eb: e8:14:3e:7c:27:bf:59:7e:df:23:77:73:57:c2:de:a7:b9:12: 12:e2:98:24:37:e9:e5:0b:8e:5b:ff:02:e2:a8:c3:2d:15:66: a5:f9:31:77:be:0d:26:08:a6:8a:fc:bf:1b:3b:83:6b:84:2c: 11:b9:70:35:19:97:fb:52:79:04:1c:5a:17:43:64:3d:1b:61: 58:9d:c1:b2:1b:ef:1c:79:06:c3:82:90:c2:7c:56:7a:54:db: f0:82:06:ad:ea:45:77:c3:d6:8d:32:36:30:17:46:17:8a:f2: 0b:dc:4f:63:3d:ef:11:bb:e2:4a:56:eb:3f:d2:d1:bc:5e:9f: f8:90:b1:f7:f2:48:6e:0e:00:e2:a2:a7:6f:a3:cb:c7:d5:f1: e0:d2:1a:39 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NcwvB4k4+DpHHvX4SM9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTU1ZDI4NzcxMzJhYWFkY2RmNTQwNThhY2JmOWUwN2VkZGI1OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkuqnvhu+RSA+gqVS+fgP8cOooq5 kML5+xE92ak4exVhuNDDH+dZ95PgtSbZNHWLe4jsYENAG/n+V0Q3nzBToVe/KKlg 7JJ3OYbi5S2mxdA0EumjBpUi3aGdcuE3dgNo/MXxggcTGVVa+yZnLW03+mVZcTDx lZ9IA2ZPApXH2DHwbN0UEpxbO2CTyAv7jvJf0JE0YM2t1J/+Cnlm/sIbEou/Dkhp eZFl7EBVhxswnt7+HCED8E7BDNemRasmuE46T2XYZ6Qy1/9pYotYqfyRp2rg5iPN 205a/CPXvi7ZyfsI5PX7Bi/ZVF242G6bvTf/mGmpTZ3KnZmAqTwauUftrQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPpV0odxMqqtzfVAWKy/ngft21mMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzkyZDIw OC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRlZjYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4 LWEyMmEtNDIxYy04YzViLWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZ ckwtZUItM2JXWXcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArkVcDANBAIAAjAHAwUDKgMCQDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJhsTANBgkqhkiG9w0BAQsFAAOCAQEAaw31TDsR40fI VmmWOI+eNrutU4h3w1TRF4TD8zOSFDgxFI42hJeLbpWJ4Eq/9VuJJYOa00P3XRdl +kYTYlkwDOmCWysn373+XOsYMleVyGWfnVBFSBr8Rm9S/D5rdNrcRAR3Id3/47uW 7gDr6BQ+fCe/WX7fI3dzV8Lep7kSEuKYJDfp5QuOW/8C4qjDLRVmpfkxd74NJgim ivy/GzuDa4QsEblwNRmX+1J5BBxaF0NkPRthWJ3BshvvHHkGw4KQwnxWelTb8IIG repFd8PWjTI2MBdGF4ryC9xPYz3vEbviSlbrP9LRvF6f+JCx9/JIbg4A4qKnb6PL x9Xx4NIaOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:36 2026 by rpki-client