This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer (raw, json) Hash identifier: P1qBaXk0wqwTO5WAk75RlEFkDovt3XWbawPQUYLPXIM= Subject key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC5B2F3EDFDFAF60F5922E375CAF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51377 IP: 185.210.176.0/22 IP: 193.221.124.0/24 IP: 2a0b:b3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c5:b2:f3:ed:fd:fa:f6:0f:59:22:e3:75:ca:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:99:f9:bc:19:35:c4:01:0d:11:eb:41:68: a9:7b:f3:d2:c1:a0:f4:34:7e:72:e1:a3:eb:87:3e: 63:87:70:ab:00:df:d6:ac:73:a0:04:86:eb:10:71: bf:d3:0b:fd:d7:46:e9:6f:64:87:a9:cb:aa:c9:10: 82:95:5b:02:eb:59:34:ca:ef:50:cf:8f:a5:52:cb: a9:41:c0:b2:5d:b9:cf:6b:29:25:94:84:ff:00:e5: 98:b5:3d:4a:53:45:d2:ca:aa:0c:5d:35:98:8c:d3: e7:60:66:41:b5:1a:af:22:eb:e6:b5:fd:c2:f5:46: 72:87:fa:1f:02:ff:24:75:48:50:52:a2:ab:01:99: d0:3a:7c:68:56:f7:4c:96:d9:f2:32:a2:14:3c:87: 7f:89:60:cc:28:5a:84:28:34:14:44:8f:0e:e0:7f: 23:d9:3b:a3:a5:81:57:7d:20:dd:f6:dc:21:a8:ca: d6:73:ef:06:64:a2:fc:6f:58:40:4e:76:60:e8:56: f0:18:21:c9:5b:9a:c5:47:16:4d:c6:11:8b:1b:04: 1d:7b:65:03:71:45:dc:1a:f0:36:36:7c:7d:69:2b: d8:d5:5e:60:51:a1:91:4a:c1:b4:e0:9d:95:df:d3: 33:c0:0b:76:9d:83:f2:52:52:82:9b:1f:b6:28:79: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.176.0/22 193.221.124.0/24 IPv6: 2a0b:b3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51377 Signature Algorithm: sha256WithRSAEncryption a9:d1:3b:ed:6b:d1:e5:7b:6b:8b:69:87:15:e3:e2:28:e3:67: bb:28:96:5b:13:a6:7e:08:d3:0e:2f:d3:77:89:f0:fe:44:55: 7e:92:77:d2:8b:81:2e:26:ec:42:71:9c:f7:3b:8a:64:35:6f: 84:ed:41:53:31:2d:a6:70:e5:fc:d1:73:ab:b8:59:c1:d2:3a: 73:01:f6:f6:be:e6:96:9b:93:c2:09:03:56:a3:66:bf:52:a1: f9:38:6a:41:0f:05:03:5e:6e:ed:12:cd:03:0e:89:89:35:02: 2e:59:4c:72:08:ca:c0:77:5d:b5:86:08:a1:93:4b:8e:a7:0b: 2f:d0:8e:86:e4:b0:9e:42:48:58:38:99:dc:01:ba:e3:8e:22: a3:34:56:b1:f1:1a:94:c3:58:77:de:0e:c0:83:6a:c1:65:93: 02:de:fd:fb:96:3d:ab:61:1f:21:da:9d:88:db:7a:e2:c3:f8: ba:94:f9:c7:34:43:a1:b6:d5:17:4a:04:9c:9c:db:b8:22:6a: 9f:e7:9d:c3:80:82:aa:21:dc:7b:d2:25:a1:43:32:a0:2b:d2: 37:98:20:e3:56:23:64:f3:20:cf:de:1f:38:b1:da:2c:ab:45: be:9e:1a:6d:6b:0e:d5:9b:7b:f9:6e:7e:b5:aa:d7:81:e5:f1: 7a:c6:a0:9b -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt9XMWy8+39+vYPWSLjdcrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdjZmFjNmFmMTA4NjYwZDk0ZTJmY2VkNjFlNjFmZjIxOWMwYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumWZ+bwZNcQBDRHrQWipe/PSwaD0 NH5y4aPrhz5jh3CrAN/WrHOgBIbrEHG/0wv910bpb2SHqcuqyRCClVsC61k0yu9Q z4+lUsupQcCyXbnPaykllIT/AOWYtT1KU0XSyqoMXTWYjNPnYGZBtRqvIuvmtf3C 9UZyh/ofAv8kdUhQUqKrAZnQOnxoVvdMltnyMqIUPId/iWDMKFqEKDQURI8O4H8j 2TujpYFXfSDd9twhqMrWc+8GZKL8b1hATnZg6FbwGCHJW5rFRxZNxhGLGwQde2UD cUXcGvA2Nnx9aSvY1V5gUaGRSsG04J2V39MzwAt2nYPyUlKCmx+2KHmndwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPp8+savEIZg2U4vztYeYf8hnApWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzY4MjIz MC1iNGNkLTQ1OTUtYmQxZS0zMmE0MWJhM2UzYzUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMw LWI0Y2QtNDU5NS1iZDFlLTMyYTQxYmEzZTNjNS8xLzEtbno2eHE4UWhtRFpUaV9P MWg1aF95R2NDbFkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArnSsAMEAMHdfDANBAIAAjAHAwUDKguzwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAyLEwDQYJKoZIhvcNAQELBQADggEBAKnR O+1r0eV7a4tphxXj4ijjZ7sollsTpn4I0w4v03eJ8P5EVX6Sd9KLgS4m7EJxnPc7 imQ1b4TtQVMxLaZw5fzRc6u4WcHSOnMB9va+5pabk8IJA1ajZr9Sofk4akEPBQNe bu0SzQMOiYk1Ai5ZTHIIysB3XbWGCKGTS46nCy/QjobksJ5CSFg4mdwBuuOOIqM0 VrHxGpTDWHfeDsCDasFlkwLe/fuWPathHyHanYjbeuLD+LqU+cc0Q6G21RdKBJyc 27giap/nncOAgqoh3HvSJaFDMqAr0jeYIONWI2TzIM/eHzix2iyrRb6eGm1rDtWb e/lufrWq14Hl8XrGoJs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:59 2026 by rpki-client