This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer (raw, json) Hash identifier: NcSG7f9b+z8rau7a34OeXeDaoc4R93lot9LxI9bjL8c= Subject key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103A138E20FFE1D42B421B7D8EE31B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50893 IP: 91.216.1.0/24 IP: 91.227.101.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:13:8e:20:ff:e1:d4:2b:42:1b:7d:8e:e3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad92323d22b44275dcecd4de295b44794623e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:c1:8b:cf:93:84:61:d4:9c:f3:35:4b:c6: d3:7b:db:e6:b5:89:02:50:80:cd:b7:21:d0:9b:a1: 87:11:8b:e8:5a:46:ba:ae:e1:03:b3:ec:ce:02:55: c4:67:d0:f0:4f:f2:99:5d:b1:14:7a:29:63:17:89: c6:98:90:a1:6e:64:2c:76:49:c0:c9:12:20:7d:74: 78:70:71:aa:ec:1b:0d:11:ec:7e:64:8e:14:44:c7: a6:26:d3:db:33:ea:94:b9:f4:52:17:f0:fb:9c:80: 0c:88:83:b5:bf:d4:28:42:fd:45:61:80:91:97:8b: 69:06:b9:5b:44:48:ca:a5:6f:97:16:a6:91:e2:76: c7:4b:d1:3d:06:d3:4d:3a:0e:aa:b1:71:be:91:11: 48:d9:c4:1d:1f:50:08:ac:df:08:eb:2c:a1:0f:a6: fe:7e:2c:5d:8a:ed:52:64:16:5a:7f:59:f5:c5:60: 4c:b6:5c:08:38:af:7e:06:77:da:d2:ae:48:d6:3b: d2:f3:8e:83:c7:18:6f:58:59:18:2f:4a:6f:19:6d: 41:d3:09:11:fc:30:9c:55:06:23:d6:7b:05:48:f3: 1c:67:6a:4d:6f:9c:a5:22:00:ed:8f:d0:21:9a:0b: b8:ad:06:7e:8d:46:e7:d2:5d:08:2a:8e:0c:6b:92: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.1.0/24 91.227.101.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50893 Signature Algorithm: sha256WithRSAEncryption 56:df:70:85:89:0d:16:34:ef:68:a1:21:da:91:4e:c3:8f:4d: f6:91:2f:37:3c:e9:f9:aa:a0:09:fc:d0:5b:98:ce:40:e1:9b: 22:40:d0:14:41:ec:d0:4b:ab:c9:3d:be:ec:18:cd:38:74:9a: 4e:08:09:e9:ec:a9:d6:f7:d5:a8:0f:e8:fc:d4:3f:d0:e4:89: 81:6b:a0:58:5a:4d:98:0c:44:54:ce:86:32:0c:91:29:c7:3c: 34:74:14:53:64:77:8a:85:76:bb:aa:fc:2d:a3:86:66:f9:62: 9d:e3:da:ca:dc:f3:8c:4c:5f:2f:2c:aa:e4:8f:d1:80:c9:f4: 4d:b2:17:f0:e5:eb:c6:f1:a2:02:68:91:8f:91:94:90:5b:2a: ef:13:ff:f0:eb:af:99:b5:f5:46:95:d6:e0:3d:ca:c3:d1:34: 2a:d9:ec:c2:9b:c2:06:3c:f1:32:0b:54:f7:50:d1:79:d3:20: 45:b1:80:e8:a7:3d:5a:74:b9:32:3f:f9:58:20:2e:cf:87:a0: f7:11:4c:44:af:8a:07:d1:27:ae:86:f8:26:42:f6:0f:98:f2: 42:1e:09:bd:84:f3:01:4a:be:b2:f3:2c:77:a3:32:77:f1:b7: d6:b1:61:5b:68:3e:c1:c2:d5:88:b7:18:db:8b:11:4b:4a:c0: 69:07:eb:f7 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt5EDoTjiD/4dQrQht9juMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQ5MjMyM2QyMmI0NDI3NWRjZWNkNGRlMjk1YjQ0Nzk0NjIzZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiDBi8+ThGHUnPM1S8bTe9vmtYkC UIDNtyHQm6GHEYvoWka6ruEDs+zOAlXEZ9DwT/KZXbEUeiljF4nGmJChbmQsdknA yRIgfXR4cHGq7BsNEex+ZI4URMemJtPbM+qUufRSF/D7nIAMiIO1v9QoQv1FYYCR l4tpBrlbREjKpW+XFqaR4nbHS9E9BtNNOg6qsXG+kRFI2cQdH1AIrN8I6yyhD6b+ fixdiu1SZBZaf1n1xWBMtlwIOK9+Bnfa0q5I1jvS846DxxhvWFkYL0pvGW1B0wkR /DCcVQYj1nsFSPMcZ2pNb5ylIgDtj9Ahmgu4rQZ+jUbn0l0IKo4Ma5JTnwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPrZIyPSK0QnXc7NTeKVtEeUYj6SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzQ5ZjNh ZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1ODEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2Fk LWVmOWUtNGZjNC05NWM0LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFO NHBXMFI1UmlQcEkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvYAQMEAFvjZTAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMAxs0wDQYJKoZIhvcNAQELBQADggEBAFbfcIWJDRY072ihIdqRTsOP TfaRLzc86fmqoAn80FuYzkDhmyJA0BRB7NBLq8k9vuwYzTh0mk4ICensqdb31agP 6PzUP9DkiYFroFhaTZgMRFTOhjIMkSnHPDR0FFNkd4qFdruq/C2jhmb5Yp3j2src 84xMXy8squSP0YDJ9E2yF/Dl68bxogJokY+RlJBbKu8T//Drr5m19UaV1uA9ysPR NCrZ7MKbwgY88TILVPdQ0XnTIEWxgOinPVp0uTI/+VggLs+HoPcRTESvigfRJ66G +CZC9g+Y8kIeCb2E8wFKvrLzLHejMnfxt9axYVtoPsHC1Yi3GNuLEUtKwGkH6/c= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:32 2026 by rpki-client