This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.cer (raw, json) Hash identifier: jKp1GIuzZQnF9Pegy08wJXeivRSpMe34Yiawocye4Us= Subject key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28501AEEC16DA204FB0EDFA5D984D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.38.140.0/23 IP: 193.39.6.0/23 IP: 2a0f:b580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:85:01:ae:ec:16:da:20:4f:b0:ed:fa:5d:98:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:96:b5:c9:08:5e:7c:67:cf:07:4b:43:4b: c4:f6:a0:06:8a:11:cf:b8:f1:28:4d:62:ca:75:a8: 29:3e:a0:aa:65:f6:54:2d:fe:d4:82:c4:cd:ae:08: 7a:57:fa:8b:7d:cb:34:5a:85:40:ff:dd:7a:1e:cc: 73:9a:5b:7a:48:f0:2a:93:db:61:9e:47:33:14:3e: fb:fd:76:2c:ac:ca:9c:55:e1:86:96:0d:5b:07:97: 9d:8b:cd:b6:ca:93:f5:0d:5f:c8:d2:b1:a9:fd:93: 40:f0:11:36:ff:d5:b7:4c:9e:f3:0a:cc:bf:81:bf: 06:44:1b:50:98:b1:45:5e:0a:80:83:df:fd:76:90: 32:6e:e9:7c:cf:e5:51:07:4b:07:6b:5d:b5:4d:4b: 15:e8:bf:86:9d:02:eb:ce:8b:21:42:0f:b8:54:51: 21:05:69:61:14:75:85:6a:1b:06:4f:38:5a:b9:bc: b1:e1:87:9e:47:ee:52:b9:08:f5:81:15:64:8f:b6: 2f:4a:46:29:b5:2b:b3:31:fe:88:81:36:0e:bd:b7: a4:2e:c1:7e:96:45:d7:86:f0:74:3b:8b:86:ff:82: 3d:e9:76:73:ee:7b:75:06:9e:ae:63:67:5c:0c:c1: 7f:4c:25:fc:72:92:45:9d:35:74:d2:20:ff:30:ca: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.140.0/23 193.39.6.0/23 IPv6: 2a0f:b580::/29 Signature Algorithm: sha256WithRSAEncryption ad:8a:b8:48:d3:50:a0:3d:01:98:a6:c5:0a:17:b3:24:7d:b1: 0c:53:79:db:78:49:7f:54:3f:78:2a:4d:ec:78:bb:44:4c:1c: 3e:0c:71:64:f7:1f:fe:5b:bb:22:00:47:ab:97:df:3d:65:c3: 0d:d1:ae:c5:8c:37:4a:a5:f9:8d:11:8e:06:fc:86:5d:1f:8a: 28:5f:24:30:8f:05:24:f8:b7:d5:a3:da:45:b5:4b:f5:fc:b0: e5:50:32:4c:01:40:b9:50:00:44:57:23:8f:cb:b9:36:63:ce: 15:95:76:c9:6f:e7:a9:6b:f6:12:21:93:d4:d0:d5:79:8c:ee: 18:2c:c8:10:85:53:aa:3d:cd:30:32:8d:20:ed:dd:15:9d:7f: 2f:b7:45:61:30:38:d2:62:64:65:a8:67:35:8a:9f:90:4c:9a: 3b:1e:28:d4:7c:7c:62:6a:5a:92:86:7e:db:a9:d8:00:07:b9: 69:b5:23:1f:59:b7:f4:a2:f5:f4:f8:47:b9:75:cc:5d:b3:5f: 5a:f1:c6:07:d6:8a:3b:51:3d:c7:b0:c6:88:5a:fc:57:78:f7: f8:1f:6a:11:fa:8f:1b:23:66:f6:6c:6a:76:07:94:fd:52:f7: 41:5d:35:12:95:30:15:d8:b3:0c:ab:44:19:9f:71:a5:e0:71: 6d:56:f9:b6 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt4ooUBruwW2iBPsO36XZhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNkOTBhNDg5ZTJkNDljNTY0ZTA4YTNhMmYzNDQ1ZmIyYzhkNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuOWtckIXnxnzwdLQ0vE9qAGihHP uPEoTWLKdagpPqCqZfZULf7UgsTNrgh6V/qLfcs0WoVA/916Hsxzmlt6SPAqk9th nkczFD77/XYsrMqcVeGGlg1bB5edi822ypP1DV/I0rGp/ZNA8BE2/9W3TJ7zCsy/ gb8GRBtQmLFFXgqAg9/9dpAybul8z+VRB0sHa121TUsV6L+GnQLrzoshQg+4VFEh BWlhFHWFahsGTzhaubyx4YeeR+5SuQj1gRVkj7YvSkYptSuzMf6IgTYOvbekLsF+ lkXXhvB0O4uG/4I96XZz7nt1Bp6uY2dcDMF/TCX8cpJFnTV00iD/MMpiCQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFPs9kKSJ4tScVk4Io6LzRF+yyNQEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzMwYTU1 ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBkMjMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVk LTk5NTktNDhlOC05YTgxLTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lq b3ZORVg3TEkxQVEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAcEmjAMEAcEnBjANBAIAAjAHAwUDKg+1gDAN BgkqhkiG9w0BAQsFAAOCAQEArYq4SNNQoD0BmKbFChezJH2xDFN523hJf1Q/eCpN 7Hi7REwcPgxxZPcf/lu7IgBHq5ffPWXDDdGuxYw3SqX5jRGOBvyGXR+KKF8kMI8F JPi31aPaRbVL9fyw5VAyTAFAuVAARFcjj8u5NmPOFZV2yW/nqWv2EiGT1NDVeYzu GCzIEIVTqj3NMDKNIO3dFZ1/L7dFYTA40mJkZahnNYqfkEyaOx4o1Hx8YmpakoZ+ 26nYAAe5abUjH1m39KL19PhHuXXMXbNfWvHGB9aKO1E9x7DGiFr8V3j3+B9qEfqP GyNm9mxqdgeU/VL3QV01EpUwFdizDKtEGZ9xpeBxbVb5tg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:02 2026 by rpki-client