This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer (raw, json) Hash identifier: vLpZ/byoL1q+TP/Qxj0VAdNCH9zgx0HDI5/R7AubPSE= Subject key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5445E52E967071473FD02E51C05C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205685 IP: 185.209.68.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:54:45:e5:2e:96:70:71:47:3f:d0:2e:51:c0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:2f:9a:67:73:b9:12:ff:12:c1:fe:b6:5b: b0:73:54:26:35:39:d8:bc:d3:fe:ef:bb:1f:ac:db: e8:6b:0f:3b:1b:54:10:31:11:e5:2a:90:ab:e5:d7: a8:76:11:f3:fb:7b:ea:06:3e:44:82:ae:79:66:18: af:f0:d9:5f:96:a0:43:2f:2e:0b:5d:de:63:59:67: d5:01:26:b5:46:00:75:37:01:01:14:fc:80:b1:73: 6c:30:f8:68:4a:be:e3:c0:5b:44:e9:7b:b4:20:14: 93:1d:5a:03:df:8e:a9:98:1f:9e:db:40:27:cc:18: 8b:52:46:6b:5c:73:d8:83:6f:fd:09:fa:21:1f:e9: 72:12:5a:2d:48:9e:78:85:1f:3d:72:19:94:2b:c4: 19:d1:42:46:20:be:81:62:85:07:6e:53:fb:b0:eb: 77:f5:2a:39:11:a4:27:9d:a5:38:c8:e5:3d:3d:2c: bd:ae:7e:aa:92:49:7f:1c:da:c6:03:b6:7f:08:4e: a7:ea:1a:3d:34:20:99:76:28:80:c4:96:bc:33:3c: db:ed:47:b2:64:84:81:88:32:0f:15:21:00:fd:cc: e9:ae:58:4c:83:85:cb:14:9e:5d:05:f8:06:36:28: 9e:ef:0f:e5:a2:16:b2:dd:a4:29:7c:c9:07:81:9c: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.68.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205685 Signature Algorithm: sha256WithRSAEncryption 36:66:f0:5e:6b:7d:5c:8c:5d:b4:7c:b9:00:22:2b:b6:c9:06: 52:b1:72:80:cd:3b:c8:2e:a6:2e:72:78:84:e7:bb:74:26:69: 41:c5:b0:f9:6e:17:d4:40:4c:50:20:51:e3:86:49:24:bf:7a: 98:e8:f5:86:1e:ec:fd:ff:42:3b:12:0a:a5:f6:9f:4c:8f:79: 2d:88:9e:b7:b4:4e:f4:53:38:ef:f2:d9:c3:d0:2e:d4:00:97: e6:03:6b:ee:fe:e1:77:47:e5:94:b6:68:10:f2:a7:7e:f3:5b: 92:47:a6:a1:9d:35:7a:c5:60:a7:10:26:94:7e:cd:e2:ea:ee: 4c:8c:bf:73:62:29:88:4e:9f:73:8e:9c:d7:3a:4a:97:e2:d9: 27:31:ad:b4:7d:21:d9:46:3c:99:25:f6:eb:35:b2:49:97:e5: 75:f7:91:51:8b:a5:1e:ae:18:00:a9:aa:e3:26:8b:f6:35:15: da:d0:44:ee:d9:3a:f9:59:a6:9d:f6:8d:9b:49:78:e0:e5:5f: 8c:5a:8f:ce:ed:75:c5:ce:5d:c8:f1:83:2f:f2:1a:1f:6b:cb: ae:35:bc:e9:97:4c:be:bd:d8:c4:2b:fb:c7:8b:6c:2d:68:eb: 61:a4:95:8d:1f:92:b5:d7:e8:e5:51:ad:a3:6b:7e:3f:b6:cb: 08:b2:fe:09 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9XFRF5S6WcHFHP9AuUcBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQwZmIzOWQ2YjExZmQxNWZjYmI0MTYzNDAzMTU1ZDFkNDU1YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOkvmmdzuRL/EsH+tluwc1QmNTnY vNP+77sfrNvoaw87G1QQMRHlKpCr5deodhHz+3vqBj5Egq55Zhiv8NlflqBDLy4L Xd5jWWfVASa1RgB1NwEBFPyAsXNsMPhoSr7jwFtE6Xu0IBSTHVoD346pmB+e20An zBiLUkZrXHPYg2/9CfohH+lyElotSJ54hR89chmUK8QZ0UJGIL6BYoUHblP7sOt3 9So5EaQnnaU4yOU9PSy9rn6qkkl/HNrGA7Z/CE6n6ho9NCCZdiiAxJa8Mzzb7Uey ZISBiDIPFSEA/czprlhMg4XLFJ5dBfgGNiie7w/lohay3aQpfMkHgZwvKwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPrQ+znWsR/RX8u0FjQDFV0dRVwFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzMwNGUz ZC0xZjBlLTQ0ZWItYjJjMS1lNzkyZjg5Y2JjZTIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMzA0ZTNk LTFmMGUtNDRlYi1iMmMxLWU3OTJmODljYmNlMi8xLzEtdEQ3T2RheEg5RmZ5N1FX TkFNVlhSMUZYQVUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEArnRRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDI3UwDQYJKoZIhvcNAQELBQADggEBADZm8F5rfVyMXbR8uQAiK7bJBlKxcoDN O8gupi5yeITnu3QmaUHFsPluF9RATFAgUeOGSSS/epjo9YYe7P3/QjsSCqX2n0yP eS2Inre0TvRTOO/y2cPQLtQAl+YDa+7+4XdH5ZS2aBDyp37zW5JHpqGdNXrFYKcQ JpR+zeLq7kyMv3NiKYhOn3OOnNc6Spfi2ScxrbR9IdlGPJkl9us1skmX5XX3kVGL pR6uGACpquMmi/Y1FdrQRO7ZOvlZpp32jZtJeODlX4xaj87tdcXOXcjxgy/yGh9r y641vOmXTL692MQr+8eLbC1o62GklY0fkrXX6OVRraNrfj+2ywiy/gk= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:15 2026 by rpki-client