This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.cer (raw, json) Hash identifier: aBXdy9APejqQq3qt6oCbt9pu1z8apmSXSfFuK5gsxm0= Subject key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378D462ADC49A58A24184949E44E6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.130.210.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8d:46:2a:dc:49:a5:8a:24:18:49:49:e4:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:fb:ce:c1:e4:26:6d:15:cf:5f:db:8a:2d: 24:72:b6:ee:eb:a0:73:e8:1f:b5:27:ec:fa:84:8b: 92:ec:b9:20:79:70:95:ff:5a:6d:3c:f1:16:34:0a: 5b:e6:5d:55:53:07:64:95:f9:3f:4d:fb:be:bd:ab: 73:cb:32:b3:ba:78:64:7f:be:58:39:12:97:56:0b: c6:f8:0e:42:c2:fc:41:a7:f7:2a:4a:10:c0:c7:c1: 51:02:27:03:5c:e5:41:44:c5:96:8c:aa:42:29:ff: 3f:bf:68:8d:c5:d8:3a:bb:0e:1f:0a:9b:68:0e:d3: 79:d9:90:fc:a8:62:88:bc:ac:58:e8:f5:8d:12:5f: f7:f5:7f:3c:9a:a9:e1:99:9f:7b:25:48:bb:d6:3c: c0:7f:32:bf:01:ca:16:42:bc:40:64:2e:aa:57:c4: a8:c8:2a:17:40:e7:60:1c:46:8f:87:6b:dd:9e:3a: 27:a8:4c:2d:ad:71:12:41:7f:88:72:82:a8:a4:58: 9f:71:d6:d3:0a:f4:3d:23:0b:13:47:de:30:91:91: 6a:15:d8:2e:1c:b0:af:6a:b3:b3:a9:86:c3:1f:7f: df:7b:d5:ec:21:66:ac:4c:ca:8f:e6:84:7b:98:f9: ba:f7:4f:7c:0b:43:76:69:7f:1a:8c:f5:fb:0b:8e: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.210.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a2:96:41:d6:31:55:fc:43:2e:80:70:40:7d:e5:db:73:0f: 48:f6:d2:56:db:77:90:f2:1a:b9:02:df:52:71:6f:a9:02:bc: 27:09:10:d4:11:a5:0e:ba:30:5b:64:46:ba:3f:bb:9c:c8:28: 47:ab:74:6b:c6:52:f5:a4:1c:bc:ce:32:e6:ff:5a:aa:00:72: 03:00:d0:f9:c4:12:f0:56:b9:3a:21:19:93:12:ba:e6:38:f9: 63:ce:5e:34:cb:b7:fa:85:aa:ed:36:45:5d:bd:e3:f1:79:84: 26:ca:2f:48:7b:9e:8d:9f:93:21:ae:3b:48:0e:d5:89:9e:25: c0:8d:89:c3:d0:af:f1:06:75:aa:de:5c:eb:b9:cf:6c:4d:aa: 56:87:1b:a5:ee:33:06:77:cc:c0:7b:01:a8:03:ea:bd:53:d4: 73:eb:ae:f2:35:f6:84:fd:ff:52:b6:c8:e8:da:2c:31:2f:98: fb:d8:12:ac:86:33:44:9c:0e:6d:0b:ae:08:9c:d9:1b:39:2a: f7:d3:da:f7:ed:51:bc:e3:1d:02:d7:ef:52:6a:22:f6:e8:e0: a8:ba:26:ef:24:d1:56:a3:57:94:15:a9:01:42:74:ef:b5:d0: 04:09:61:a5:44:67:4a:f3:d7:8c:b4:ac:15:09:56:de:05:95: 00:a1:5d:5b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt+N41GKtxJpYokGElJ5E5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTZiOTA4MDQ4MTNhNjU3Njg4Nzk4YWRkZTdiZGJkMGU2ZDBlNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3L7zsHkJm0Vz1/bii0kcrbu66Bz 6B+1J+z6hIuS7LkgeXCV/1ptPPEWNApb5l1VUwdklfk/Tfu+vatzyzKzunhkf75Y ORKXVgvG+A5CwvxBp/cqShDAx8FRAicDXOVBRMWWjKpCKf8/v2iNxdg6uw4fCpto DtN52ZD8qGKIvKxY6PWNEl/39X88mqnhmZ97JUi71jzAfzK/AcoWQrxAZC6qV8So yCoXQOdgHEaPh2vdnjonqEwtrXESQX+IcoKopFifcdbTCvQ9IwsTR94wkZFqFdgu HLCvarOzqYbDH3/fe9XsIWasTMqP5oR7mPm69098C0N2aX8ajPX7C45c1wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPprkIBIE6ZXaIeYrd5729Dm0OU+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2E5ZTNk Yi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1OWYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2Ri LTIyNmQtNDFlMi1iZTA5LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0 M252YjBPYlE1VDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOC0jANBgkqhkiG9w0BAQsFAAOCAQEAqqKW QdYxVfxDLoBwQH3l23MPSPbSVtt3kPIauQLfUnFvqQK8JwkQ1BGlDrowW2RGuj+7 nMgoR6t0a8ZS9aQcvM4y5v9aqgByAwDQ+cQS8Fa5OiEZkxK65jj5Y85eNMu3+oWq 7TZFXb3j8XmEJsovSHuejZ+TIa47SA7ViZ4lwI2Jw9Cv8QZ1qt5c67nPbE2qVocb pe4zBnfMwHsBqAPqvVPUc+uu8jX2hP3/UrbI6NosMS+Y+9gSrIYzRJwObQuuCJzZ Gzkq99Pa9+1RvOMdAtfvUmoi9ujgqLom7yTRVqNXlBWpAUJ077XQBAlhpURnSvPX jLSsFQlW3gWVAKFdWw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:35 2026 by rpki-client