This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.cer (raw, json) Hash identifier: x5YK1St71uPPBTJNPEl0yq/trE7+EIUaP8JbgiFuIOA= Subject key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAB7BF6985E9F9231BDFE3A9BFC5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51975 IP: 46.151.208.0/21 IP: 185.79.248.0/22 IP: 2a05:78c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ab:7b:f6:98:5e:9f:92:31:bd:fe:3a:9b:fc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:fe:80:86:63:da:e5:5b:5a:83:e1:c8:f0: 67:da:86:dc:e0:ac:14:cd:34:3d:da:c1:97:ca:44: fc:f8:ce:82:30:7a:b7:45:07:b9:c2:47:a9:b9:b0: ae:41:10:b9:a7:36:1f:f6:40:87:a2:43:33:a2:9c: 19:ee:fb:c2:f8:99:f2:f5:e6:1a:e7:e7:70:30:66: cf:72:f4:2f:c6:cc:74:a8:f7:bb:30:48:33:49:8c: 9f:47:c0:d8:89:2c:5d:ea:82:95:19:23:88:46:23: 34:7e:63:90:a5:ff:2a:ef:09:1e:63:51:a6:d7:8c: 61:b0:78:02:d3:55:65:dd:d9:c5:55:c3:5d:56:84: 55:da:97:42:ee:e0:d4:69:bb:c9:31:2f:a8:24:e9: 11:18:35:d1:2d:78:9f:dc:8e:11:82:08:95:2f:09: 52:a3:02:2b:6d:fb:0b:44:05:d9:21:21:dd:99:a9: ce:ec:61:53:f8:bd:01:0c:0b:3d:bc:1a:5b:8b:79: bc:7b:b8:14:e6:2b:66:27:e3:71:ce:9f:ae:ba:ff: f9:5f:83:05:9f:d3:ff:ae:47:4c:a1:02:60:58:4a: 10:e2:79:73:bc:ed:f5:1a:72:69:80:5a:88:a3:9b: a6:a0:3a:8d:32:95:29:82:21:b8:3c:f9:65:c3:a5: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.208.0/21 185.79.248.0/22 IPv6: 2a05:78c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51975 Signature Algorithm: sha256WithRSAEncryption 84:91:ee:2c:c1:09:d1:55:d1:ea:9b:94:ac:43:0c:80:68:e9: 10:90:44:33:4e:7d:d0:94:6b:90:ad:88:58:b5:65:94:0d:63: f7:ec:72:61:28:90:67:5b:fc:65:0a:f2:d2:54:9c:48:96:5d: 72:e7:6e:55:ca:71:b9:bc:13:2c:39:1c:3d:60:ae:7e:5f:37: 9c:23:c5:4a:aa:0f:35:05:68:b8:2a:e3:6c:0d:c5:dd:35:fe: 2e:20:c5:1f:eb:2b:b4:1e:df:64:57:65:71:d0:e1:68:f2:1f: 22:10:bc:65:cf:ae:f6:1d:0a:50:7a:1b:6b:99:b3:9a:7e:0f: 05:dd:5f:57:71:dd:f1:ca:eb:68:c1:1f:07:29:93:08:3a:b6: aa:96:28:5e:20:65:64:db:a9:b3:9f:b4:63:ad:82:ad:2e:3a: b9:8d:09:72:ca:88:fe:4e:ab:6c:75:4b:d4:f5:d9:76:85:d7: 7b:49:f2:73:e0:37:3d:2f:13:77:14:2e:ac:e5:aa:b7:d7:1b: 46:82:08:d5:d9:89:ee:ff:1b:41:97:8f:e3:4f:01:e8:ce:54: 49:1d:3a:a1:2e:05:2a:a5:39:d0:82:d6:22:4f:a6:bb:f8:36: b9:a5:38:97:2f:0d:8c:10:4c:25:4f:84:af:66:42:87:91:0e: 38:f4:e1:b4 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt87at79phen5Ixvf46m/xfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWNkOTAxYWJhMGQzNmI2NTZjZjk4ZTBjMDI5MTdlM2FhYTI4OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5L+gIZj2uVbWoPhyPBn2obc4KwU zTQ92sGXykT8+M6CMHq3RQe5wkepubCuQRC5pzYf9kCHokMzopwZ7vvC+Jny9eYa 5+dwMGbPcvQvxsx0qPe7MEgzSYyfR8DYiSxd6oKVGSOIRiM0fmOQpf8q7wkeY1Gm 14xhsHgC01Vl3dnFVcNdVoRV2pdC7uDUabvJMS+oJOkRGDXRLXif3I4RggiVLwlS owIrbfsLRAXZISHdmanO7GFT+L0BDAs9vBpbi3m8e7gU5itmJ+Nxzp+uuv/5X4MF n9P/rkdMoQJgWEoQ4nlzvO31GnJpgFqIo5umoDqNMpUpgiG4PPllw6XPQQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2E1MjZj YS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJmYzYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNh LTM3OWUtNDk1ZC04ZjE1LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpn d0NrWDQ2cWlpYlEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAy6X0AMEArlP+DANBAIAAjAHAwUDKgV4wDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAywcwDQYJKoZIhvcNAQELBQADggEBAISR 7izBCdFV0eqblKxDDIBo6RCQRDNOfdCUa5CtiFi1ZZQNY/fscmEokGdb/GUK8tJU nEiWXXLnblXKcbm8Eyw5HD1grn5fN5wjxUqqDzUFaLgq42wNxd01/i4gxR/rK7Qe 32RXZXHQ4WjyHyIQvGXPrvYdClB6G2uZs5p+DwXdX1dx3fHK62jBHwcpkwg6tqqW KF4gZWTbqbOftGOtgq0uOrmNCXLKiP5Oq2x1S9T12XaF13tJ8nPgNz0vE3cULqzl qrfXG0aCCNXZie7/G0GXj+NPAejOVEkdOqEuBSqlOdCC1iJPprv4NrmlOJcvDYwQ TCVPhK9mQoeRDjj04bQ= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:05 2026 by rpki-client