This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer File: 1-qWsXSKtkHinLhNplihyR-nx4TE.cer (raw, json) Hash identifier: NIZGm1FMDYPv3BcOYH91O6kTADMvgNhR0d4p90DoqNI= Subject key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F5EDECAFB633FAB9DB55075A8173 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207729 IP: 185.15.139.0/24 IP: 2a0f:cfc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:ed:ec:af:b6:33:fa:b9:db:55:07:5a:81:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:94:b5:69:f9:da:13:d6:6f:4b:0d:94:30: e6:d8:be:a5:07:3a:6a:06:84:a6:17:ba:75:e4:76: b8:6f:2c:a6:fb:de:fa:35:cf:b5:01:2d:1a:6f:53: 08:c4:e8:99:41:6c:94:2e:7d:91:9f:4b:ff:71:a6: 7b:46:b0:6b:c6:a2:6e:15:42:a2:c4:19:c7:51:7a: 9a:c4:37:86:17:fc:1a:c2:c9:1c:f2:d8:b9:62:8a: 8b:5c:38:e0:6c:2e:c6:93:08:1e:15:e0:6f:8c:75: e5:fa:96:76:32:70:5e:bc:c7:4a:bd:69:79:cb:da: 43:6c:8b:46:3b:bf:56:37:2c:68:3f:77:a4:af:e8: 15:49:02:55:92:16:76:06:cf:bc:40:6e:3b:35:5f: 1c:e2:21:05:33:dc:58:52:97:fd:7f:8f:f0:39:d9: 1c:96:9f:56:84:e2:2c:30:a5:b2:61:5f:3c:35:3e: 2a:4b:69:24:33:4e:21:5e:92:c4:ff:c0:07:bc:cb: 52:6f:e6:f6:6e:2e:23:ba:24:5e:8e:f9:b5:85:b9: 5b:59:6b:36:cf:4e:dd:3a:4f:5c:c8:50:69:a5:0f: 48:44:f4:d3:2f:ab:f5:33:47:6a:b2:96:58:07:72: a7:b0:04:76:85:fd:87:9b:d4:59:c9:85:a7:2c:13: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.139.0/24 IPv6: 2a0f:cfc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207729 Signature Algorithm: sha256WithRSAEncryption 9c:1c:b5:41:9d:7e:56:0c:4c:04:d0:48:6b:4a:ba:da:52:b9: a6:db:5b:36:d2:76:ec:dc:e7:89:7b:0a:5f:fe:5e:c7:26:c7: 7f:32:bb:d5:64:60:1c:46:30:7f:c1:82:df:e6:28:6d:6f:aa: 39:a2:5c:bf:1a:6b:1d:ae:84:ea:62:70:78:03:77:3a:04:97: 17:78:17:25:72:f0:e9:42:6d:e9:ee:06:36:10:e5:ee:d9:aa: 57:a9:44:59:72:b2:a7:4d:3c:1a:4a:f2:84:50:2b:39:9e:22: 1d:ef:72:44:b1:29:d9:24:2e:33:45:85:51:8e:51:a2:b4:f6: 61:bf:05:68:71:6f:af:3d:3e:cc:07:1e:1d:bd:b0:77:3a:c7: b7:01:d4:03:4a:86:7f:4b:9d:2a:cb:06:4b:6d:e3:5c:23:c9: de:27:38:69:69:65:b8:62:5b:ad:52:ce:f6:e0:09:2d:1b:2e: b7:b0:b2:8c:af:84:82:6b:19:04:84:98:83:56:5b:ee:60:2a: 58:90:78:74:57:0c:7e:8d:b0:1e:84:56:c2:a1:d9:96:87:fa: b5:dc:79:4a:6c:79:fc:10:7c:3e:7f:4c:35:ae:b5:38:25:bd: 5b:1f:1e:26:b3:46:ac:1d:06:c1:9e:9c:22:e1:13:f9:04:f1: 0b:4f:e9:53 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4NPXt7K+2M/q521UHWoFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWE1YWM1ZDIyYWQ5MDc4YTcyZTEzNjk5NjI4NzI0N2U5ZjFlMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM2UtWn52hPWb0sNlDDm2L6lBzpq BoSmF7p15Ha4byym+976Nc+1AS0ab1MIxOiZQWyULn2Rn0v/caZ7RrBrxqJuFUKi xBnHUXqaxDeGF/wawskc8ti5YoqLXDjgbC7GkwgeFeBvjHXl+pZ2MnBevMdKvWl5 y9pDbItGO79WNyxoP3ekr+gVSQJVkhZ2Bs+8QG47NV8c4iEFM9xYUpf9f4/wOdkc lp9WhOIsMKWyYV88NT4qS2kkM04hXpLE/8AHvMtSb+b2bi4juiRejvm1hblbWWs2 z07dOk9cyFBppQ9IRPTTL6v1M0dqspZYB3KnsAR2hf2Hm9RZyYWnLBOJlwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPqlrF0irZB4py4TaZYockfp8eExMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2I1NWMw NC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIyMTkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0 LTZkNGEtNDk0OS1hYWE4LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5w bGloeVItbng0VEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEALkPizANBAIAAjAHAwUAKg/PwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDK3EwDQYJKoZIhvcNAQELBQADggEBAJwctUGdflYM TATQSGtKutpSuabbWzbSduzc54l7Cl/+Xscmx38yu9VkYBxGMH/Bgt/mKG1vqjmi XL8aax2uhOpicHgDdzoElxd4FyVy8OlCbenuBjYQ5e7ZqlepRFlysqdNPBpK8oRQ KzmeIh3vckSxKdkkLjNFhVGOUaK09mG/BWhxb689PswHHh29sHc6x7cB1ANKhn9L nSrLBktt41wjyd4nOGlpZbhiW61SzvbgCS0bLrewsoyvhIJrGQSEmINWW+5gKliQ eHRXDH6NsB6EVsKh2ZaH+rXceUpsefwQfD5/TDWutTglvVsfHiazRqwdBsGenCLh E/kE8QtP6VM= -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:43 2026 by rpki-client