This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer File: 1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer (raw, json) Hash identifier: 3VInyjazT8Op1Z461QbWsdpchhz8fSyuHTzexOk2zgM= Subject key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C535C4041F6F6E7B20184385EFCD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212629 IP: 185.145.108.0/22 IP: 2a07:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:53:5c:40:41:f6:f6:e7:b2:01:84:38:5e:fc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:bc:f1:52:eb:9e:7c:cf:11:98:db:d8:62: 72:2c:10:e7:fa:7b:2a:3b:14:66:78:b1:68:92:9a: 13:33:f3:22:9e:10:12:70:49:56:aa:2e:d7:2d:cf: 56:fb:29:a8:dd:d9:4f:b9:3d:da:36:a7:e6:06:0d: 4e:d1:0b:56:63:e0:45:16:3b:33:0b:e6:94:b7:76: c4:68:17:6a:ea:fc:2b:c9:9b:2c:0f:d7:92:66:6d: 0f:2d:14:df:a7:b3:7d:52:cc:ff:7b:c3:bd:ed:27: 57:ba:3c:86:41:29:60:c1:5b:bd:21:6d:b6:e6:d6: db:95:b1:97:e5:b2:c9:b7:2b:73:57:5b:11:2e:a2: 65:e4:34:79:26:06:37:b6:7f:f4:7c:d4:6f:73:ed: 7d:71:d3:18:30:fb:c6:37:58:38:f7:24:53:9a:d9: a4:d9:2a:13:29:1e:39:dc:5c:ce:fb:9d:56:ad:a8: 5d:d6:61:22:b8:0a:85:da:1e:94:4d:23:1e:3d:30: 48:c2:08:8f:ad:07:ca:d5:62:fd:8a:2e:66:9f:54: c4:d4:78:e3:86:6b:d9:f5:28:a8:65:ba:db:b3:f1: 42:bb:7c:c9:65:db:cf:45:7a:c7:97:0b:6c:13:cb: 75:8f:74:52:ed:f6:e4:10:14:65:50:1e:f1:f5:14: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.108.0/22 IPv6: 2a07:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212629 Signature Algorithm: sha256WithRSAEncryption 37:5a:34:4c:f1:80:76:13:16:a3:86:97:2f:34:78:5d:6f:0f: 99:23:69:01:47:bb:f0:da:c1:fb:4d:e4:d9:3d:15:53:ce:05: 37:c1:15:e2:9a:ec:68:78:8b:99:7a:17:22:47:eb:ff:d1:8a: 8d:4a:11:79:12:54:f4:5a:e7:3b:aa:10:25:a7:e0:fa:a6:c7: c0:02:98:d3:ee:e1:2e:0f:bd:83:af:8e:22:5b:0c:b4:ca:54: 6e:84:56:03:f2:c5:8b:d7:3d:88:13:ea:fe:36:b8:0b:54:8e: 03:0f:f8:89:eb:87:d6:f6:63:8d:c2:a8:17:eb:3d:ff:c9:0e: b5:d8:2d:5b:74:cb:99:68:0d:45:6b:45:b2:53:fe:82:62:76: a4:ca:7f:57:3a:e2:47:6d:c9:56:e9:4f:22:cd:cf:bc:3a:f6: 2a:c0:dd:88:01:26:a8:46:17:1c:9f:b3:09:59:cc:8f:da:ce: ff:4e:2b:a1:0e:1b:e7:d4:85:69:51:25:e2:62:ea:15:d2:25: db:b7:ff:82:91:ea:7f:12:e0:90:ed:85:1f:43:81:81:4b:a7: 46:65:19:9f:6a:01:0f:e0:60:c7:42:7b:bd:45:e4:d4:b0:fe: ef:ef:a9:71:28:ba:c4:60:2f:0e:35:09:4d:66:72:fd:f7:ad: a5:d6:86:f5 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt9XFNcQEH29ueyAYQ4XvzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBhZWUwZTFiZjgyMTJjMDIyNWU3ODViMzk0ZjA0MTZiYjMyYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OS88VLrnnzPEZjb2GJyLBDn+nsq OxRmeLFokpoTM/MinhAScElWqi7XLc9W+ymo3dlPuT3aNqfmBg1O0QtWY+BFFjsz C+aUt3bEaBdq6vwryZssD9eSZm0PLRTfp7N9Usz/e8O97SdXujyGQSlgwVu9IW22 5tbblbGX5bLJtytzV1sRLqJl5DR5JgY3tn/0fNRvc+19cdMYMPvGN1g49yRTmtmk 2SoTKR453FzO+51Wrahd1mEiuAqF2h6UTSMePTBIwgiPrQfK1WL9ii5mn1TE1Hjj hmvZ9SioZbrbs/FCu3zJZdvPRXrHlwtsE8t1j3RS7fbkEBRlUB7x9RRkhQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPsK7g4b+CEsAiXnhbOU8EFrsyu3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzA1MWY4 OC04NTdjLTRlNGItYmQzZC1mMWI4OTM4ODc4ODQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMDUxZjg4 LTg1N2MtNGU0Yi1iZDNkLWYxYjg5Mzg4Nzg4NC8xLzEtd3J1RGh2NElTd0NKZWVG czVUd1FXdXpLN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArmRbDANBAIAAjAHAwUDKgdIwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPpUwDQYJKoZIhvcNAQELBQADggEBADdaNEzxgHYT FqOGly80eF1vD5kjaQFHu/DawftN5Nk9FVPOBTfBFeKa7Gh4i5l6FyJH6//Rio1K EXkSVPRa5zuqECWn4Pqmx8ACmNPu4S4PvYOvjiJbDLTKVG6EVgPyxYvXPYgT6v42 uAtUjgMP+Inrh9b2Y43CqBfrPf/JDrXYLVt0y5loDUVrRbJT/oJidqTKf1c64kdt yVbpTyLNz7w69irA3YgBJqhGFxyfswlZzI/azv9OK6EOG+fUhWlRJeJi6hXSJdu3 /4KR6n8S4JDthR9DgYFLp0ZlGZ9qAQ/gYMdCe71F5NSw/u/vqXEousRgLw41CU1m cv33raXWhvU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:23 2026 by rpki-client