This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer (raw, json) Hash identifier: pMaXfBgByTYG2CU6zRdxGYLJFCcehG0o7INBak3egZE= Subject key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39109F241FF0F14AA574793C8695B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 151.100.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:9f:24:1f:f0:f1:4a:a5:74:79:3c:86:95:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d422367433765b541a37390a998997b737c46472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:10:3e:a1:b1:67:50:fb:97:42:fd:2b:b0: 6f:c5:06:90:43:ee:ed:c7:6f:ec:79:ab:10:37:5a: 95:af:1c:02:55:d2:0e:20:b9:d0:c6:c5:80:5a:1a: 00:91:39:e5:0a:99:f4:5f:5b:e8:bb:e6:5f:51:47: 10:c1:6e:2b:33:5e:35:d2:54:df:4e:6b:79:c0:35: 4d:16:51:cc:e7:d7:ce:5c:7c:47:28:3f:be:20:6c: 47:b1:97:29:78:5d:fb:e9:f8:f4:fc:3d:3a:d6:eb: bf:aa:e9:9f:ab:a4:e4:ac:d4:2e:4c:32:1e:55:a4: 32:3a:83:80:f5:5b:0f:41:3b:34:2a:0f:8b:26:c2: 98:53:55:c5:b0:24:4d:a8:a9:dc:09:1c:10:8a:f9: 36:75:38:6d:ff:da:fc:56:df:32:24:9f:c9:9c:38: c8:d9:34:03:5b:26:2a:b7:7c:63:48:43:d4:7e:0e: 98:08:a6:e1:36:73:12:2f:49:b0:16:ec:96:7b:be: 51:2e:ba:c6:18:e0:02:c0:7f:5f:79:b1:ac:56:af: c1:be:58:82:ea:16:d2:36:1d:d3:c2:b0:1f:be:ef: 5e:6f:c0:89:c3:f7:01:dc:a5:b4:7c:7b:c5:51:ea: a7:7f:a7:ed:bb:84:66:a2:22:6c:72:b9:30:3c:76: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:64:58:7a:ec:83:dc:af:f8:d1:f1:c6:fc:3c:be:99:45:db: 67:d3:e6:01:56:7a:d7:d2:d1:a3:bc:d0:ad:1d:a1:51:0c:5a: 13:01:91:e1:9d:a7:c1:6b:1e:e2:33:14:7d:3b:b0:1f:de:cf: eb:8e:2e:7c:ef:63:c0:61:50:b2:3b:a8:00:61:89:32:3a:43: 60:3e:e0:cd:49:05:76:8e:0f:78:77:ae:ab:e1:12:a1:f0:62: 05:89:e2:db:6c:57:56:a7:24:3d:93:31:00:b5:f9:8d:c8:95: de:99:a5:14:44:3f:19:96:c9:33:13:f8:4f:39:ac:2e:34:a7: 46:80:62:96:c3:d4:17:40:0e:98:b9:1c:26:d0:30:2c:8d:01: 37:eb:46:cd:ec:47:f4:fe:dd:0f:c7:48:69:ee:13:5e:60:54: 14:3e:52:9c:55:3a:c2:71:20:f2:83:7c:7e:1b:64:cc:ca:86: 51:8f:a0:ff:86:0e:d2:dd:a7:6e:16:47:a5:8e:00:3d:b8:48: ef:4a:00:b1:4c:10:8c:54:03:cf:6b:11:02:5b:3b:47:ca:8d: ac:10:81:12:ef:22:5b:36:a6:21:d3:60:b8:8f:36:15:aa:f1: 81:b1:ad:ef:be:6b:7a:90:a1:03:f1:4b:f0:de:05:ba:5c:f2: 08:a9:a0:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+ORCfJB/w8UqldHk8hpWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDIyMzY3NDMzNzY1YjU0MWEzNzM5MGE5OTg5OTdiNzM3YzQ2NDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEoQPqGxZ1D7l0L9K7BvxQaQQ+7t x2/seasQN1qVrxwCVdIOILnQxsWAWhoAkTnlCpn0X1vou+ZfUUcQwW4rM1410lTf Tmt5wDVNFlHM59fOXHxHKD++IGxHsZcpeF376fj0/D061uu/qumfq6TkrNQuTDIe VaQyOoOA9VsPQTs0Kg+LJsKYU1XFsCRNqKncCRwQivk2dTht/9r8Vt8yJJ/JnDjI 2TQDWyYqt3xjSEPUfg6YCKbhNnMSL0mwFuyWe75RLrrGGOACwH9febGsVq/BvliC 6hbSNh3TwrAfvu9eb8CJw/cB3KW0fHvFUeqnf6ftu4RmoiJscrkwPHYOVQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNQiNnQzdltUGjc5CpmJl7c3xGRyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzQ1YmUz Mi04MjFmLTQ1MTQtYWEzMS1iYzc1NDY2MDQ3YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvNDViZTMy LTgyMWYtNDUxNC1hYTMxLWJjNzU0NjYwNDdjOS8xLzFDSTJkRE4yVzFRYU56a0tt WW1YdHpmRVpISS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAl2QwDQYJKoZIhvcNAQELBQADggEBABBkWHrs g9yv+NHxxvw8vplF22fT5gFWetfS0aO80K0doVEMWhMBkeGdp8FrHuIzFH07sB/e z+uOLnzvY8BhULI7qABhiTI6Q2A+4M1JBXaOD3h3rqvhEqHwYgWJ4ttsV1anJD2T MQC1+Y3Ild6ZpRREPxmWyTMT+E85rC40p0aAYpbD1BdADpi5HCbQMCyNATfrRs3s R/T+3Q/HSGnuE15gVBQ+UpxVOsJxIPKDfH4bZMzKhlGPoP+GDtLdp24WR6WOAD24 SO9KALFMEIxUA89rEQJbO0fKjawQgRLvIls2piHTYLiPNhWq8YGxre++a3qQoQPx S/DeBbpc8gipoEo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:43 2026 by rpki-client