This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.cer (raw, json) Hash identifier: ui0irTEDZxF0xCzyv1Aeg3t0s1VAi2eGUaXCTwLvtNI= Subject key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0178FF1604DA8C5AEF940001DAED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208025 IP: 217.198.185.0/24 IP: 2a12:16c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:78:ff:16:04:da:8c:5a:ef:94:00:01:da:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3bad7d0685995ced35108b2e11525a7aab1418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:39:5c:be:6e:4e:c1:b7:9c:87:78:5b:14: 70:cf:5e:eb:6f:b1:2d:37:7d:92:62:99:ce:4a:9a: c7:fd:d2:75:f6:82:8d:c9:25:80:b3:94:aa:36:1a: 10:63:65:b0:2c:96:79:bf:d0:21:85:00:81:0c:e8: 18:2e:b9:01:53:dd:fb:f3:50:d5:e4:15:2c:66:03: 62:0a:d0:d9:40:d0:67:13:25:f3:32:c5:03:81:2c: 4e:67:29:58:a9:bd:a0:af:b6:9e:de:b1:a0:24:7c: 30:62:3b:15:85:da:8e:83:c6:88:36:8e:80:c3:87: 01:74:de:2c:d3:30:65:78:05:d9:00:88:7e:f4:1a: d1:40:e4:26:6a:69:38:f5:9c:5b:8f:b8:55:95:65: 43:0b:73:54:7b:c0:17:70:1c:a2:ea:0b:37:40:2b: 72:e7:87:8a:80:97:48:48:72:b3:e3:2a:06:a9:f4: ba:a0:16:11:e9:29:a3:45:1f:50:ae:04:1f:a5:9b: ce:72:48:93:e3:9d:0b:af:b5:d3:b3:4f:8a:c7:d8: ba:ee:f7:c9:07:e4:d7:37:50:32:b7:84:49:cb:75: c4:d6:9c:92:90:f4:50:d4:7c:ef:99:59:3c:98:55: e3:68:29:b3:40:55:42:d0:33:1e:93:8c:1c:7c:ee: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.198.185.0/24 IPv6: 2a12:16c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208025 Signature Algorithm: sha256WithRSAEncryption 0f:63:b2:fe:12:c4:67:fb:1c:6d:45:66:98:f3:59:6c:0f:ac: 29:68:c9:b4:38:6a:0a:00:50:ef:ac:da:bf:96:5f:98:08:16: 02:2c:f3:05:3f:b4:13:ca:12:ff:15:09:38:c7:6f:f6:14:b7: a8:68:84:97:23:0e:97:f8:ce:a3:10:18:1c:f7:ea:3b:8e:60: 32:6b:ac:6f:e1:fe:a0:59:57:66:f5:02:e1:af:de:a9:50:d5: b7:93:0b:52:a3:51:5c:fc:ca:26:10:8a:76:26:ad:89:4e:0b: 10:c9:df:1a:56:16:81:10:d5:6a:a5:e7:c4:02:f3:4b:2a:b7: 87:e2:04:0c:0f:cc:d8:9f:65:e7:21:48:fb:1d:cc:72:dc:2f: ad:cd:41:b7:f5:33:20:ad:cd:8e:c6:0c:02:5b:ce:5c:19:81: df:a1:d1:e2:cf:ec:5c:4d:4a:50:ca:e8:9c:3e:f5:d6:95:d4: 02:39:e3:05:ca:52:04:5f:41:51:af:c8:87:d5:49:0e:ec:b5: 0e:a0:c0:38:a9:52:65:1e:c2:bd:73:c2:a2:cc:ae:4e:70:08: 6f:d8:64:27:53:f1:66:70:f0:16:b2:b5:ae:93:03:30:a3:d2: 86:8b:fd:c1:23:ff:22:22:90:09:ac:f1:5d:f9:38:ee:9c:0f: 6a:dc:3c:b6 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt87gF4/xYE2oxa75QAAdrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNiYWQ3ZDA2ODU5OTVjZWQzNTEwOGIyZTExNTI1YTdhYWIxNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yU5XL5uTsG3nId4WxRwz17rb7Et N32SYpnOSprH/dJ19oKNySWAs5SqNhoQY2WwLJZ5v9AhhQCBDOgYLrkBU93781DV 5BUsZgNiCtDZQNBnEyXzMsUDgSxOZylYqb2gr7ae3rGgJHwwYjsVhdqOg8aINo6A w4cBdN4s0zBleAXZAIh+9BrRQOQmamk49Zxbj7hVlWVDC3NUe8AXcByi6gs3QCty 54eKgJdISHKz4yoGqfS6oBYR6SmjRR9QrgQfpZvOckiT450Lr7XTs0+Kx9i67vfJ B+TXN1Ayt4RJy3XE1pySkPRQ1HzvmVk8mFXjaCmzQFVC0DMek4wcfO7kLwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPs7rX0GhZlc7TUQiy4RUlp6qxQYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzc5ZDc0 Ni0wM2Y5LTRjNzEtYWZjNy1lNWQwYjc2ZGU1YjgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzlkNzQ2 LTAzZjktNGM3MS1hZmM3LWU1ZDBiNzZkZTViOC8xLzEtenV0ZlFhRm1WenROUkNM TGhGU1ducXJGQmcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEANnGuTANBAIAAjAHAwUAKhIWwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDLJkwDQYJKoZIhvcNAQELBQADggEBAA9jsv4SxGf7 HG1FZpjzWWwPrCloybQ4agoAUO+s2r+WX5gIFgIs8wU/tBPKEv8VCTjHb/YUt6ho hJcjDpf4zqMQGBz36juOYDJrrG/h/qBZV2b1AuGv3qlQ1beTC1KjUVz8yiYQinYm rYlOCxDJ3xpWFoEQ1Wql58QC80sqt4fiBAwPzNifZechSPsdzHLcL63NQbf1MyCt zY7GDAJbzlwZgd+h0eLP7FxNSlDK6Jw+9daV1AI54wXKUgRfQVGvyIfVSQ7stQ6g wDipUmUewr1zwqLMrk5wCG/YZCdT8WZw8Bayta6TAzCj0oaL/cEj/yIikAms8V35 OO6cD2rcPLY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:21 2026 by rpki-client