This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer (raw, json) Hash identifier: Op2nsP153LSfAyacRGkLHvPuLos/6ZgouNkAUI2Ll+Q= Subject key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35771D3E4F15E52A01B2A6DB551F2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.238.237.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:77:1d:3e:4f:15:e5:2a:01:b2:a6:db:55:1f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:46:12:ea:cf:5a:d9:49:f1:4b:b7:9b:e9: a9:02:ed:35:80:43:97:75:6a:2a:7f:12:67:29:6f: b6:6c:61:68:36:73:d6:39:d3:e6:81:b3:2b:39:26: 72:76:d7:24:38:99:9a:31:98:06:9a:bb:5b:ce:4c: 06:6f:c2:a2:61:58:5e:49:bb:33:9d:5c:f7:2c:a9: 47:d4:96:d4:c5:66:6e:89:4b:ba:3b:30:21:d3:b5: f5:48:68:26:b4:86:1b:43:e0:81:e7:e9:92:29:7d: 31:46:7b:16:c5:6c:94:f3:e1:b1:6f:38:d0:7a:5e: 2d:79:7c:9e:7a:52:57:a2:2e:5d:0a:98:2a:61:0d: 5c:b3:ba:0e:52:c4:0c:96:3d:e0:c6:a4:a7:d5:de: ff:5a:c1:48:fa:db:e3:7a:c5:55:8e:bc:0a:55:4a: f6:d0:24:51:b3:ce:47:8b:06:08:5a:f4:3d:cb:bb: 41:19:7a:c7:4e:e5:21:3a:d2:45:1f:c0:df:dd:72: be:91:f0:2b:92:3a:b4:b8:8e:2a:c1:dd:cb:22:ce: b4:31:a4:7b:bf:80:a5:34:1a:3a:63:71:c1:1f:ab: 09:9e:8e:e4:31:26:76:8e:62:07:06:70:59:ce:9a: e7:fd:b7:47:4f:df:75:2c:4c:2b:56:12:6a:37:02: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.237.0/24 Signature Algorithm: sha256WithRSAEncryption 30:3e:f3:7f:dd:ad:a3:e0:dd:c0:c9:45:9a:1a:cd:70:06:2c: 83:6c:4f:92:1e:83:00:50:22:8c:55:a9:27:da:35:ce:33:6d: 07:31:6f:98:85:3b:c3:d7:ae:7e:25:64:00:36:8b:ce:43:7c: 2e:cf:52:85:f4:e3:24:04:fd:ee:90:2f:51:18:36:31:09:f9: 1e:de:a4:c6:6f:d0:ee:6d:a1:09:1d:4f:14:8f:4e:8e:57:49: 11:8f:87:a6:13:52:15:ad:42:29:24:3e:d7:6c:49:d0:07:ce: c8:04:f6:ab:45:f1:ce:56:81:90:12:73:62:b1:19:27:02:02: f5:09:a0:b9:74:a7:94:14:34:cd:06:eb:f7:fe:67:c1:0b:20: 37:19:48:c1:ec:f5:23:55:44:10:e8:41:e5:33:34:1f:49:47: 80:d7:ac:10:7e:d4:c4:94:5f:44:c1:b9:55:b9:3d:e4:a2:99: 63:15:03:77:94:09:04:0f:46:c1:ec:1a:9e:e2:3b:77:8b:9b: 65:c4:f9:15:41:29:36:5c:df:5b:e9:31:89:a9:61:21:fd:f6: a7:4b:ea:7c:6f:a4:fe:fa:d6:f3:6a:1b:9e:0e:f9:54:55:aa: 99:2b:8a:7f:3b:7c:9b:19:33:23:99:48:e3:e6:d7:42:af:93: fb:0e:3b:47 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt7NXcdPk8V5SoBsqbbVR8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTY0NmE2MzIzYjNkNmZjMzRhZTQ5ZDhiZTg4ODRmNzI5MmJkYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UhGEurPWtlJ8Uu3m+mpAu01gEOX dWoqfxJnKW+2bGFoNnPWOdPmgbMrOSZydtckOJmaMZgGmrtbzkwGb8KiYVheSbsz nVz3LKlH1JbUxWZuiUu6OzAh07X1SGgmtIYbQ+CB5+mSKX0xRnsWxWyU8+GxbzjQ el4teXyeelJXoi5dCpgqYQ1cs7oOUsQMlj3gxqSn1d7/WsFI+tvjesVVjrwKVUr2 0CRRs85HiwYIWvQ9y7tBGXrHTuUhOtJFH8Df3XK+kfArkjq0uI4qwd3LIs60MaR7 v4ClNBo6Y3HBH6sJno7kMSZ2jmIHBnBZzprn/bdHT991LEwrVhJqNwIYUwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPpkamMjs9b8NK5J2L6IhPcpK9v0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzZiZjU0 Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJjZTQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRj LWQ4MDYtNDYzYS1hZjM3LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Z dm9pRTl5a3IyX1EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvu7TANBgkqhkiG9w0BAQsFAAOCAQEAMD7z f92to+DdwMlFmhrNcAYsg2xPkh6DAFAijFWpJ9o1zjNtBzFvmIU7w9eufiVkADaL zkN8Ls9ShfTjJAT97pAvURg2MQn5Ht6kxm/Q7m2hCR1PFI9OjldJEY+HphNSFa1C KSQ+12xJ0AfOyAT2q0XxzlaBkBJzYrEZJwIC9QmguXSnlBQ0zQbr9/5nwQsgNxlI wez1I1VEEOhB5TM0H0lHgNesEH7UxJRfRMG5Vbk95KKZYxUDd5QJBA9GwewanuI7 d4ubZcT5FUEpNlzfW+kxialhIf32p0vqfG+k/vrW82obng75VFWqmSuKfzt8mxkz I5lI4+bXQq+T+w47Rw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:25 2026 by rpki-client