This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer (raw, json) Hash identifier: atf5vUpVgbDKCgsq0fbyQh/h7vOTYgC0C+8k8sn4/QQ= Subject key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834ED4C84E22072042DDCB72666D5F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212321 IP: 185.217.142.0/24 IP: 2a10:cd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ed:4c:84:e2:20:72:04:2d:dc:b7:26:66:d5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:bc:de:06:50:1c:12:58:b2:b0:01:22:b2: 56:a8:68:05:5b:bb:dd:07:1e:2b:94:e8:be:5d:db: 14:e5:81:b7:21:67:37:34:26:82:f3:93:93:90:5b: 24:b0:a2:aa:87:40:a5:8b:be:27:99:de:1e:2c:3d: c0:41:c9:e4:0e:2c:76:6f:8b:c5:8b:59:1f:13:14: b4:1b:e9:f8:06:13:2b:88:10:96:af:88:b8:b8:22: c5:e7:48:92:04:cf:c7:cf:e8:53:cf:cc:a4:39:17: 12:18:5d:e2:d5:b3:53:b6:65:81:1b:77:45:dd:10: 8f:31:5f:40:ef:fa:37:bf:61:7e:a6:42:ab:a5:87: da:df:cb:17:11:5f:25:df:b3:12:53:95:e0:87:c4: b6:5b:fd:c7:29:8d:0f:3a:51:22:e4:89:c0:60:c2: 26:94:86:4c:a6:2e:f7:f2:a8:be:97:68:f5:ec:2a: 97:7b:e4:72:a4:a9:81:da:96:d4:7a:9d:35:0c:ee: 4c:8a:22:90:9f:0d:ff:d2:f2:0a:fb:33:df:59:06: 73:12:00:d3:29:9f:68:dc:c4:37:2e:c3:0c:ad:8d: 92:70:48:81:a6:68:39:18:95:18:2b:0b:d0:f7:29: 01:82:a5:77:7c:e0:b8:fd:b0:b3:a6:87:fc:24:43: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.142.0/24 IPv6: 2a10:cd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212321 Signature Algorithm: sha256WithRSAEncryption 73:62:3d:9d:fb:97:28:77:41:99:cd:c2:8d:67:d9:f0:e0:53: d5:5f:63:e4:d8:c5:0f:02:67:d6:13:62:4a:4b:64:28:65:02: 15:c2:49:2d:5e:9e:af:69:55:89:89:79:be:05:8d:61:a8:9a: 54:83:c5:12:6d:61:90:fd:43:3e:e3:5f:d3:f3:73:66:63:ee: e9:ee:2f:fe:ed:50:d1:83:35:0d:06:d6:79:23:9a:5e:c4:e7: a4:1a:98:be:94:74:c9:45:ca:55:37:1d:e9:d3:b6:ad:ef:35: a8:c0:48:86:f0:a9:95:21:53:29:ff:22:b7:1b:18:cd:6f:5d: 95:ac:a7:80:12:8b:d3:91:85:d2:ff:87:6f:11:0d:02:6d:96: 92:cf:ff:cb:b3:ed:9e:a0:5b:54:6c:5b:1f:40:bb:b1:3a:73: a6:5b:9a:2d:aa:1e:d3:42:b0:a3:e0:c3:5a:f7:d3:d7:af:94: 87:81:94:bd:ec:8e:9f:20:11:c0:9d:8b:73:19:7a:58:cd:6a: e8:09:96:18:d7:77:3e:d1:8d:ce:fd:82:04:b1:79:4a:3f:73: 1e:07:15:5f:58:a1:87:f2:3f:77:5d:2e:ff:73:05:d5:49:3d: f8:26:87:4c:38:45:d4:09:12:de:37:47:c7:a9:80:f0:cd:97: 63:83:a6:9f -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4NO1MhOIgcgQt3LcmZtX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjAyYmFjN2I3OWEzMTA5ZTliZTNkZmU0ZjA2ZDU4NWJiOWY5MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJe83gZQHBJYsrABIrJWqGgFW7vd Bx4rlOi+XdsU5YG3IWc3NCaC85OTkFsksKKqh0Cli74nmd4eLD3AQcnkDix2b4vF i1kfExS0G+n4BhMriBCWr4i4uCLF50iSBM/Hz+hTz8ykORcSGF3i1bNTtmWBG3dF 3RCPMV9A7/o3v2F+pkKrpYfa38sXEV8l37MSU5Xgh8S2W/3HKY0POlEi5InAYMIm lIZMpi738qi+l2j17CqXe+RypKmB2pbUep01DO5MiiKQnw3/0vIK+zPfWQZzEgDT KZ9o3MQ3LsMMrY2ScEiBpmg5GJUYKwvQ9ykBgqV3fOC4/bCzpof8JEPlqwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPsCuse3mjEJ6b49/k8G1YW7n5BRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzIwMGUy Yi1kM2E0LTQ1NTctOTczNS00OTUwZjg2Y2JiNWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJi LWQzYTQtNDU1Ny05NzM1LTQ5NTBmODZjYmI1Yi8xLzEtd0s2eDdlYU1RbnB2ajMt VHdiVmhidWZrRkUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEALnZjjANBAIAAjAHAwUDKhDNADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPWEwDQYJKoZIhvcNAQELBQADggEBAHNiPZ37lyh3 QZnNwo1n2fDgU9VfY+TYxQ8CZ9YTYkpLZChlAhXCSS1enq9pVYmJeb4FjWGomlSD xRJtYZD9Qz7jX9Pzc2Zj7unuL/7tUNGDNQ0G1nkjml7E56QamL6UdMlFylU3HenT tq3vNajASIbwqZUhUyn/IrcbGM1vXZWsp4ASi9ORhdL/h28RDQJtlpLP/8uz7Z6g W1RsWx9Au7E6c6Zbmi2qHtNCsKPgw1r309evlIeBlL3sjp8gEcCdi3MZeljNaugJ lhjXdz7Rjc79ggSxeUo/cx4HFV9YoYfyP3ddLv9zBdVJPfgmh0w4RdQJEt43R8ep gPDNl2ODpp8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:37 2026 by rpki-client