This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.cer (raw, json) Hash identifier: /x3m/20pNodhUxPOQxmzdEmysd+EXL4t+RKup1XEwV0= Subject key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C738ECF7E737B88C3FA08A12D31075 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48251 IP: 94.127.232.0/21 IP: 185.220.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:38:ec:f7:e7:37:b8:8c:3f:a0:8a:12:d3:10:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:90:b8:7b:77:ed:ed:96:29:e5:65:a0:b9: 76:70:2a:43:4a:48:a1:0b:a3:46:50:b0:cf:a5:8b: 37:f2:11:e1:0d:8e:76:5a:0e:61:6b:6e:c3:92:e4: fa:28:9b:3a:a5:06:a8:4e:1d:a6:d3:84:92:2b:3e: 70:31:a7:f7:b7:60:96:6b:bc:47:7c:ab:48:0e:cc: 05:0c:b1:b4:af:ee:5d:36:55:81:a9:61:ff:2e:c5: 8a:09:ca:f9:8b:2b:e5:00:39:d5:90:d9:7c:fa:f5: d9:82:77:be:84:38:f1:e5:ff:55:9d:8c:8e:41:74: f9:60:d2:f9:41:f2:bb:0b:df:b3:3f:8f:3a:4a:c1: c1:7c:79:70:a2:ca:8d:6a:e2:0f:f8:10:b0:b1:5a: 13:7f:65:02:85:b7:20:1c:f5:46:84:57:ac:fb:17: 67:33:95:98:af:6f:c2:23:3e:23:73:62:27:10:ca: ab:3a:1e:f1:0b:41:39:ad:b8:2e:00:e3:75:84:9f: 80:89:60:da:5d:93:27:c6:ee:0a:b3:bd:ef:7d:37: b5:a6:54:6d:8a:69:a0:e1:65:2b:8b:a9:c0:5a:df: 21:ec:ba:ff:04:11:9d:a6:5c:62:2c:cf:f0:b8:ec: 93:41:17:bc:d0:1f:60:71:6c:81:39:3d:f4:26:77: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.232.0/21 185.220.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48251 Signature Algorithm: sha256WithRSAEncryption 90:af:25:1d:62:1c:c9:5e:ee:a2:d4:97:7f:0d:fe:a2:b8:ae: 1b:09:d7:24:f9:1e:15:d8:8f:b3:f9:ba:92:4d:69:68:7a:f4: bf:4e:f5:5d:08:f2:1d:00:d0:7c:5c:d3:f1:13:44:ff:7a:53: 4c:db:dd:91:70:49:75:1b:ce:91:d4:90:21:17:53:da:10:03: 8b:7e:39:5a:c0:f2:ab:fa:43:fd:c6:5b:eb:1f:7c:ac:d8:94: e8:1e:94:d9:28:4a:a7:32:79:d5:b4:6b:6a:74:e9:ad:72:40: a7:f5:42:68:e1:f8:0a:c3:bb:2e:24:1e:01:82:37:d6:d4:93: 55:26:a4:37:5e:2e:12:c8:55:b5:30:46:5e:c5:e5:33:71:a8: 66:c1:21:7e:54:39:5f:1e:bb:87:21:61:99:06:c5:f0:83:e6: a9:0c:98:af:05:87:90:54:18:7b:93:61:46:82:93:a5:51:94: 61:90:63:3c:a9:ba:e5:b3:87:bf:e1:8e:28:d1:68:43:b0:63: 84:82:86:71:b0:0c:02:dc:2f:2d:91:39:76:97:34:95:70:3d: 85:28:db:6c:9d:1f:50:94:b6:78:67:21:8d:bd:ce:d0:79:5b: 10:a1:75:04:25:76:18:8e:51:3b:a6:33:f2:f5:10:ef:04:dd: e8:b1:b5:eb -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt3xzjs9+c3uIw/oIoS0xB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTc0NjhkY2NhZTQzYzIzOWY4NTMwZTgyMzVlM2EyZDRmY2QzZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zmQuHt37e2WKeVloLl2cCpDSkih C6NGULDPpYs38hHhDY52Wg5ha27DkuT6KJs6pQaoTh2m04SSKz5wMaf3t2CWa7xH fKtIDswFDLG0r+5dNlWBqWH/LsWKCcr5iyvlADnVkNl8+vXZgne+hDjx5f9VnYyO QXT5YNL5QfK7C9+zP486SsHBfHlwosqNauIP+BCwsVoTf2UChbcgHPVGhFes+xdn M5WYr2/CIz4jc2InEMqrOh7xC0E5rbguAON1hJ+AiWDaXZMnxu4Ks73vfTe1plRt immg4WUri6nAWt8h7Lr/BBGdplxiLM/wuOyTQRe80B9gcWyBOT30JnfuswIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2EwYzgx Ni03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5ZWMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2 LTc2NWUtNGQxYS04NjZiLWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERv STE0NkxVX05Qbk0ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEA15/6AMEArncNDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMAvHswDQYJKoZIhvcNAQELBQADggEBAJCvJR1iHMle7qLUl38N/qK4 rhsJ1yT5HhXYj7P5upJNaWh69L9O9V0I8h0A0Hxc0/ETRP96U0zb3ZFwSXUbzpHU kCEXU9oQA4t+OVrA8qv6Q/3GW+sffKzYlOgelNkoSqcyedW0a2p06a1yQKf1Qmjh +ArDuy4kHgGCN9bUk1UmpDdeLhLIVbUwRl7F5TNxqGbBIX5UOV8eu4chYZkGxfCD 5qkMmK8Fh5BUGHuTYUaCk6VRlGGQYzypuuWzh7/hjijRaEOwY4SChnGwDALcLy2R OXaXNJVwPYUo22ydH1CUtnhnIY29ztB5WxChdQQldhiOUTumM/L1EO8E3eixtes= -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:50 2026 by rpki-client