This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer (raw, json) Hash identifier: 8ZJ4XuunuYkpOHql3ibHgtFwQf9sl6hdIAnUTkLopxo= Subject key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F8016487C0CB8E867A501E9780B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204272 IP: 185.108.208.0/22 IP: 2a05:4100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f8:01:64:87:c0:cb:8e:86:7a:50:1e:97:80:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5d:6d:d5:b2:b9:38:c4:81:31:91:8c:ff:cc: 32:7e:d2:ba:46:48:4d:e1:d8:8b:7e:6d:bf:61:ed: 40:50:ef:fd:a8:0d:e7:28:ee:9c:aa:0c:67:58:8a: 90:f6:97:9a:64:0a:3e:a0:9f:f9:e3:9a:23:31:7c: 21:0a:20:a4:0c:e9:93:cd:7e:67:15:a2:1e:b9:34: 61:99:c2:16:c6:9e:18:49:56:fd:e6:fa:07:fe:02: a4:8f:81:db:27:52:4b:4e:f8:2a:8c:d9:7f:46:bb: 63:92:b2:c0:12:13:7a:42:fc:e7:dd:80:bf:47:19: f6:bd:00:28:19:cb:c5:37:28:1d:e4:93:b7:0e:bf: 60:88:28:39:43:11:aa:24:03:2f:1e:b1:d1:a6:d7: ef:15:13:ae:41:76:96:13:ff:27:96:62:52:b3:9f: f9:cb:05:78:c0:03:fa:88:b5:cb:60:2e:c5:22:6c: 51:58:ce:f8:3f:7e:8b:39:f7:d4:5b:e9:29:6b:8a: 02:d2:29:7b:5b:25:9d:b5:aa:82:52:b2:fd:4d:4c: 36:66:44:f7:fa:a9:35:3a:04:aa:6b:ad:23:13:3d: 01:9b:56:2a:7e:1c:d0:19:f9:5e:43:bc:49:b6:b7: 54:4c:44:95:77:f7:27:48:11:05:1a:75:a7:55:a0: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.208.0/22 IPv6: 2a05:4100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204272 Signature Algorithm: sha256WithRSAEncryption 66:57:19:65:37:cd:2f:4e:66:c1:49:e2:d8:01:74:57:ad:e6: 36:03:0e:74:bd:81:e1:64:38:84:ca:c6:9e:51:ab:bb:d6:cb: 7a:c6:8a:32:ca:75:8d:16:72:c8:f3:73:73:f4:7e:39:34:88: c9:01:c2:29:fb:71:65:ed:f7:f9:bb:16:43:ff:0b:b1:84:d4: 38:d6:9f:a4:fa:e1:92:88:eb:ca:2f:e1:c7:ae:1e:a9:19:6d: d5:da:87:29:15:67:f0:a9:8f:fe:1c:45:d2:de:43:cf:06:e9: 5b:ee:a3:43:62:da:50:f8:28:90:b4:0a:17:2b:04:92:ed:b7: 0b:5d:14:44:40:ef:87:e0:8b:6c:2e:05:a8:12:69:c5:33:ff: 03:40:65:55:b6:04:f9:a6:40:eb:03:64:a4:32:b7:41:f2:19: 89:d8:8e:c1:97:8a:d8:4b:aa:8e:9f:aa:2f:33:fd:b2:00:b9: 6d:dc:1b:6a:44:bc:6d:83:70:a8:34:2f:81:61:56:c4:61:4e: 8d:8b:b9:27:d9:e0:1d:22:30:0f:6a:f1:9a:50:25:b6:c8:5c: 64:1f:f1:37:ee:07:64:f1:49:38:47:2d:62:39:56:d8:6b:3f: a0:a5:f8:ed:ab:66:ac:79:77:00:82:eb:89:81:46:31:bb:0f: ca:45:2c:51 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5EPgBZIfAy46GelAel4CxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWMwZjBkYTM5YTIyYTc5ZjgwYzFmMzc5YjY2OGI5MGY2ZDc0NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA311t1bK5OMSBMZGM/8wyftK6RkhN 4diLfm2/Ye1AUO/9qA3nKO6cqgxnWIqQ9peaZAo+oJ/545ojMXwhCiCkDOmTzX5n FaIeuTRhmcIWxp4YSVb95voH/gKkj4HbJ1JLTvgqjNl/RrtjkrLAEhN6Qvzn3YC/ Rxn2vQAoGcvFNygd5JO3Dr9giCg5QxGqJAMvHrHRptfvFROuQXaWE/8nlmJSs5/5 ywV4wAP6iLXLYC7FImxRWM74P36LOffUW+kpa4oC0il7WyWdtaqCUrL9TUw2ZkT3 +qk1OgSqa60jEz0Bm1YqfhzQGfleQ7xJtrdUTESVd/cnSBEFGnWnVaDEZQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPrA8No5oip5+AwfN5tmi5D210cIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4Lzg2ZWQ1 Yi1iY2MxLTRkMDMtOTVkYS1iOTlkNGQwMGY4MzEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODZlZDVi LWJjYzEtNGQwMy05NWRhLWI5OWQ0ZDAwZjgzMS8xLzEtc0R3MmptaUtubjREQjgz bTJhTGtQYlhSd2cubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArls0DANBAIAAjAHAwUDKgVBADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDHfAwDQYJKoZIhvcNAQELBQADggEBAGZXGWU3zS9O ZsFJ4tgBdFet5jYDDnS9geFkOITKxp5Rq7vWy3rGijLKdY0Wcsjzc3P0fjk0iMkB win7cWXt9/m7FkP/C7GE1DjWn6T64ZKI68ov4ceuHqkZbdXahykVZ/Cpj/4cRdLe Q88G6Vvuo0Ni2lD4KJC0ChcrBJLttwtdFERA74fgi2wuBagSacUz/wNAZVW2BPmm QOsDZKQyt0HyGYnYjsGXithLqo6fqi8z/bIAuW3cG2pEvG2DcKg0L4FhVsRhTo2L uSfZ4B0iMA9q8ZpQJbbIXGQf8TfuB2TxSThHLWI5VthrP6Cl+O2rZqx5dwCC64mB RjG7D8pFLFE= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:43 2026 by rpki-client