This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer File: 1-uJ7jB3msWHHmKt7hRU9a6N5774.cer (raw, json) Hash identifier: FQ3p/n7lmCScJmu3/48Y9gxW7pTPNVK/vYhsHMnWy6g= Subject key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70E934FB1432E6006D2E58E9136FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.111.34.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0e:93:4f:b1:43:2e:60:06:d2:e5:8e:91:36:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:57:04:23:b6:49:4c:1b:a7:51:af:68:8f: 0c:02:1e:cd:38:87:a5:1c:b0:8f:04:07:7e:56:a8: 9e:b9:5c:e2:62:d8:4a:e6:c7:bd:80:50:3e:fb:53: a2:65:13:fa:6e:ae:9a:c3:0c:b6:a4:d4:8a:23:1e: 62:5f:0d:24:a2:32:ae:12:6f:34:09:df:69:67:ba: 56:dd:aa:1b:10:0c:82:d0:0a:88:75:83:0c:94:73: 61:ef:5b:b3:b0:e9:85:27:87:74:d0:7c:66:99:19: 5d:03:d0:2b:7d:9a:fe:e7:e9:73:be:e4:53:01:d2: 2c:d8:0f:d1:03:3b:af:14:79:f4:d6:80:5f:2d:7c: 11:4f:7a:f1:09:7c:b2:45:b8:de:1c:ea:09:43:96: ff:cc:c1:e5:18:c1:fb:e7:e7:15:0c:fd:8c:43:8e: 0b:f2:33:57:ba:1c:94:4c:ae:5d:27:95:52:0e:39: 93:72:67:8f:0c:75:a1:95:28:48:38:31:ff:3e:f0: dc:e7:bb:89:5d:6e:7c:48:2a:a0:e3:3e:c0:44:3e: d7:45:d6:7b:2b:75:59:5c:03:af:ee:c9:28:ed:2b: fe:97:c0:ff:07:f7:4f:95:49:7f:f9:e9:af:e6:0e: f0:a1:2f:f2:10:5c:32:44:b8:0f:b5:7f:67:b4:ca: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.34.0/24 Signature Algorithm: sha256WithRSAEncryption 65:e2:1f:88:63:89:7c:30:3c:84:6f:0d:09:d9:97:cb:86:e1: 8b:e7:0a:7d:3b:72:2f:de:3d:c1:0e:89:ab:d0:b2:41:36:46: 05:50:14:be:34:f9:4b:9b:9c:b5:2a:5a:d7:f9:c6:ec:0e:a1: d6:80:e0:9e:29:e1:b8:85:24:f0:3f:1b:2c:0f:1e:d1:f7:6f: 2e:c6:e8:48:84:c1:08:c4:5b:3a:36:32:e2:e1:5f:3b:8b:f5: f6:31:10:c2:bf:5b:e0:73:5c:94:d1:5c:c2:cf:e7:e6:68:98: 36:5e:98:59:3c:76:de:95:c2:84:c3:49:4b:fd:9e:18:9a:14: 74:ea:11:0d:5f:35:62:36:b7:85:20:54:cc:63:6e:87:72:a6: 23:39:6c:f5:66:2d:b4:77:d1:4a:7c:dc:61:c9:38:a4:b7:a5: a2:73:d2:d5:10:7f:a0:84:bf:81:aa:71:da:19:fb:27:79:50: f8:e5:6e:f5:dc:ce:b3:64:dd:67:1f:2b:32:6b:31:f4:9d:5a: ae:43:d9:1d:62:fe:96:da:1a:80:03:60:22:f6:08:9d:04:42: f8:46:db:84:c3:19:7e:ef:cd:df:2a:d2:f1:dd:b8:2f:5a:a4: 3b:06:da:6b:8c:f9:5c:28:00:01:97:7e:6d:3b:74:41:ad:06: b1:29:89:13 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt3xw6TT7FDLmAG0uWOkTb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWUyN2I4YzFkZTZiMTYxYzc5OGFiN2I4NTE1M2Q2YmEzNzllZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBtXBCO2SUwbp1GvaI8MAh7NOIel HLCPBAd+VqieuVziYthK5se9gFA++1OiZRP6bq6awwy2pNSKIx5iXw0kojKuEm80 Cd9pZ7pW3aobEAyC0AqIdYMMlHNh71uzsOmFJ4d00HxmmRldA9ArfZr+5+lzvuRT AdIs2A/RAzuvFHn01oBfLXwRT3rxCXyyRbjeHOoJQ5b/zMHlGMH75+cVDP2MQ44L 8jNXuhyUTK5dJ5VSDjmTcmePDHWhlShIODH/PvDc57uJXW58SCqg4z7ARD7XRdZ7 K3VZXAOv7sko7Sv+l8D/B/dPlUl/+emv5g7woS/yEFwyRLgPtX9ntMp+owIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPrie4wd5rFhx5ire4UVPWujee++MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzk0MmVm YS0xOGE1LTQ2NDktOTkyOS03YmU3MTM2Nzk2MDgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTQyZWZh LTE4YTUtNDY0OS05OTI5LTdiZTcxMzY3OTYwOC8xLzEtdUo3akIzbXNXSEhtS3Q3 aFJVOWE2TjU3NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFvIjANBgkqhkiG9w0BAQsFAAOCAQEAZeIf iGOJfDA8hG8NCdmXy4bhi+cKfTtyL949wQ6Jq9CyQTZGBVAUvjT5S5uctSpa1/nG 7A6h1oDgninhuIUk8D8bLA8e0fdvLsboSITBCMRbOjYy4uFfO4v19jEQwr9b4HNc lNFcws/n5miYNl6YWTx23pXChMNJS/2eGJoUdOoRDV81Yja3hSBUzGNuh3KmIzls 9WYttHfRSnzcYck4pLelonPS1RB/oIS/gapx2hn7J3lQ+OVu9dzOs2TdZx8rMmsx 9J1arkPZHWL+ltoagANgIvYInQRC+EbbhMMZfu/N3yrS8d24L1qkOwbaa4z5XCgA AZd+bTt0Qa0GsSmJEw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:03 2026 by rpki-client