This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer (raw, json) Hash identifier: GUGc0Ua24mbB8XJtl2nWLnfWUdfYSRciN+SX4PON4YU= Subject key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38F790347BD36307A9F13BF8793C78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28684 AS: 203574 IP: 193.34.174.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:90:34:7b:d3:63:07:a9:f1:3b:f8:79:3c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:2e:38:c5:0d:be:13:1b:53:d0:f2:8f:7e: ab:ed:43:b3:0b:7f:fb:dd:bc:1f:cb:1f:41:1d:b2: 7d:9a:cf:c7:df:48:87:1f:fc:cf:75:2b:15:67:a2: bf:d1:73:f2:fe:35:a9:9f:4e:5a:b3:af:06:e1:71: 8e:a7:f5:a4:b3:6d:6c:c3:bd:be:14:a4:47:2b:ee: 2a:24:b0:e3:9b:32:ff:06:5a:0b:8f:ba:b7:51:07: 32:70:73:32:eb:61:1d:cd:92:f2:f9:70:13:d7:63: 38:c0:5a:83:f5:b2:41:1b:1e:8b:66:e9:e1:ee:1e: b4:1c:c0:72:e9:bd:32:3e:df:c4:16:85:c1:57:56: cb:93:33:2b:21:3c:9d:b7:61:5c:76:14:8f:f7:ea: 47:25:48:42:71:b7:b3:a3:09:d8:bc:7c:b9:4f:84: 03:0a:83:e4:6d:b9:2b:09:a9:8a:81:81:7d:b8:04: 13:3b:50:ac:d1:66:b9:0f:0e:8c:47:f0:03:ce:d6: 2e:2e:72:52:03:28:2e:2b:16:e7:56:35:30:16:2a: 08:54:72:02:9a:8c:67:88:f0:12:08:81:7c:ca:95: 27:a6:cf:20:a7:55:5e:20:e0:20:50:4d:17:9a:ea: 06:2c:91:ba:96:7f:a3:8f:5b:16:86:96:74:ab:d6: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.174.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28684 203574 Signature Algorithm: sha256WithRSAEncryption ad:00:c2:02:db:3f:16:e3:93:1c:c2:09:e9:47:55:f7:fe:b2: 21:c2:43:73:30:a4:01:ae:5b:3a:07:01:65:c5:d7:46:de:42: c4:82:b7:2e:24:54:c2:8c:40:45:e6:52:b3:61:0a:00:40:13: 9f:e8:ff:c4:9a:7f:96:70:f7:05:84:cb:20:94:69:f7:f7:ee: d9:8d:b6:f9:32:cf:50:26:17:69:df:6c:5c:16:03:77:a3:fa: d1:9a:0f:4d:43:7a:aa:63:49:a4:a1:ba:ed:a1:7d:3e:64:ad: e6:7a:2c:a3:fc:67:05:68:c3:e4:fa:6a:59:4d:09:d2:04:3b: dc:78:8c:22:40:e6:72:75:ec:f0:35:8c:4b:49:5d:b7:4e:b2: bb:07:74:d1:77:ab:c4:cb:38:d0:79:69:2f:f9:8f:1a:01:db: d6:e8:fe:13:0d:2e:28:df:c6:f8:a8:ec:cb:35:0d:31:62:e2: 8f:4a:b1:9b:1b:8d:55:8a:17:d1:f0:b4:51:4e:b5:fc:d4:f0: d9:99:a1:79:8f:e1:25:b5:1b:cc:09:36:08:a6:f3:ea:8b:6e: a5:a3:b5:08:bd:59:7c:14:a4:ed:c2:2f:d0:da:7e:20:24:0e: 0f:e0:c3:c1:dd:27:fb:e8:1b:67:fb:d8:db:53:35:8b:59:ba: b2:70:06:55 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt+OPeQNHvTYwep8Tv4eTx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTY5MmZkYTAxOTY4N2Q1OGQ3MWJmMzJjMDkwOGQxMmU0NmI0Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA038uOMUNvhMbU9Dyj36r7UOzC3/7 3bwfyx9BHbJ9ms/H30iHH/zPdSsVZ6K/0XPy/jWpn05as68G4XGOp/Wks21sw72+ FKRHK+4qJLDjmzL/BloLj7q3UQcycHMy62EdzZLy+XAT12M4wFqD9bJBGx6LZunh 7h60HMBy6b0yPt/EFoXBV1bLkzMrITydt2FcdhSP9+pHJUhCcbezownYvHy5T4QD CoPkbbkrCamKgYF9uAQTO1Cs0Wa5Dw6MR/ADztYuLnJSAyguKxbnVjUwFioIVHIC moxniPASCIF8ypUnps8gp1VeIOAgUE0XmuoGLJG6ln+jj1sWhpZ0q9Y9BQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFPppL9oBlofVjXG/MsCQjRLka0ylMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzhiZmVj NC1iZDZmLTQ2NTAtYTRkOC1hZDFjMzBjMTFlNWEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0 LWJkNmYtNDY1MC1hNGQ4LWFkMWMzMGMxMWU1YS8xLzEtbWt2MmdHV2g5V05jYjh5 d0pDTkV1UnJUS1UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEirjAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgJwDAIDAxs2MA0GCSqGSIb3DQEBCwUAA4IBAQCtAMIC2z8W45McwgnpR1X3/rIh wkNzMKQBrls6BwFlxddG3kLEgrcuJFTCjEBF5lKzYQoAQBOf6P/Emn+WcPcFhMsg lGn39+7Zjbb5Ms9QJhdp32xcFgN3o/rRmg9NQ3qqY0mkobrtoX0+ZK3meiyj/GcF aMPk+mpZTQnSBDvceIwiQOZydezwNYxLSV23TrK7B3TRd6vEyzjQeWkv+Y8aAdvW 6P4TDS4o38b4qOzLNQ0xYuKPSrGbG41VihfR8LRRTrX81PDZmaF5j+EltRvMCTYI pvPqi26lo7UIvVl8FKTtwi/Q2n4gJA4P4MPB3Sf76Btn+9jbUzWLWbqycAZV -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:40 2026 by rpki-client