This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.cer (raw, json) Hash identifier: ziYRVoXIX5EoYbAnVwqeBDdguA1wpNTCbwFfuJeSyxI= Subject key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C112990250464073FF79832D5E5F3B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204304 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:29:90:25:04:64:07:3f:f7:98:32:d5:e5:f3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d456ee7e484ae2ef0920d095bcae268fafd69619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:99:02:eb:03:11:10:09:59:c6:57:20:4b: 74:42:94:6d:db:7d:78:aa:04:89:5e:cb:4c:6f:5f: 52:df:53:80:40:a3:f9:78:8a:e3:ab:02:30:5a:77: 4d:59:52:03:96:55:a6:6f:1b:b1:c2:f4:d0:8e:0d: ab:f2:75:9c:c6:d7:ad:34:4e:15:e6:41:db:2d:88: 46:95:3b:f7:af:0f:af:e6:f6:cc:72:b8:c8:f9:2b: f8:40:72:e9:56:a9:dc:48:04:d0:77:6c:0f:a1:3a: 87:4a:23:69:63:9e:40:76:ac:ae:75:68:68:75:0f: 4e:88:62:49:cb:df:24:fb:48:12:d7:45:f3:87:16: 7c:6f:84:dc:a0:4d:1f:80:96:bf:66:96:db:f0:1a: 95:04:70:54:6a:72:b1:23:f6:1d:0a:fc:e4:f8:a6: 00:33:f7:2f:1a:95:c1:fd:5f:9d:2b:03:39:aa:1f: 36:ef:ec:81:46:51:59:d0:10:9f:75:83:39:77:20: 8b:1b:44:c3:e0:c5:fb:a7:46:48:c9:38:13:db:7c: 67:a1:47:0e:e6:88:cf:11:b5:4f:f4:a8:ea:1a:6a: 7d:cf:de:24:89:e4:96:d8:0c:6b:b0:35:f0:37:b3: 8e:4e:25:7e:37:f4:a7:b3:57:f3:f9:4c:7e:d0:84: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204304 Signature Algorithm: sha256WithRSAEncryption 24:a8:69:7e:17:a8:bc:4c:2e:7a:e8:d2:4e:b8:83:77:13:b1: d7:13:4e:b6:2d:c7:36:96:d6:14:25:29:dc:81:7c:d4:41:37: 72:15:a4:c2:34:0b:3e:08:f2:6a:63:d4:95:1b:64:44:20:44: 9f:92:6c:ae:83:f3:4d:a9:f0:c7:72:7b:a1:5a:81:a4:4c:f0: 6e:b1:a8:06:c1:6b:dd:14:8b:42:0a:e4:cf:db:56:13:b8:75: 1e:88:dd:eb:5b:fa:39:60:2b:10:b5:df:77:87:44:2f:8a:3f: 10:c3:45:62:ae:dd:40:e5:de:7f:49:1e:86:3e:58:bb:5a:46: 79:aa:f3:6b:5d:f6:be:31:95:85:ad:55:94:d2:96:47:0f:b9: 13:e0:59:32:33:bc:e5:80:61:9f:3c:96:6f:03:c8:7d:10:90: 18:81:91:78:b7:d5:d7:cb:0d:da:8c:be:0b:74:5e:b6:3e:01: 25:04:a0:de:0b:40:07:ca:21:77:4b:aa:11:7c:9b:bd:2e:7e: d8:3a:40:b3:1c:30:91:a8:ad:9b:1a:a1:71:5a:86:e6:77:84: e0:99:12:37:e9:af:c7:05:b8:ac:f3:84:b4:cc:03:90:9b:21: 7b:a5:b5:1c:45:ac:58:5f:b7:cc:46:a9:06:b3:12:97:7c:08: 4e:fd:a6:82 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8ESmQJQRkBz/3mDLV5fOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU2ZWU3ZTQ4NGFlMmVmMDkyMGQwOTViY2FlMjY4ZmFmZDY5NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveuZAusDERAJWcZXIEt0QpRt2314 qgSJXstMb19S31OAQKP5eIrjqwIwWndNWVIDllWmbxuxwvTQjg2r8nWcxtetNE4V 5kHbLYhGlTv3rw+v5vbMcrjI+Sv4QHLpVqncSATQd2wPoTqHSiNpY55AdqyudWho dQ9OiGJJy98k+0gS10XzhxZ8b4TcoE0fgJa/Zpbb8BqVBHBUanKxI/YdCvzk+KYA M/cvGpXB/V+dKwM5qh827+yBRlFZ0BCfdYM5dyCLG0TD4MX7p0ZIyTgT23xnoUcO 5ojPEbVP9KjqGmp9z94kieSW2AxrsDXwN7OOTiV+N/Sns1fz+Ux+0ISRFQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNRW7n5ISuLvCSDQlbyuJo+v1pYZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzZlOWMy Ny00ZTE1LTQ4ODUtODdhZS01NGU5ZmZkM2JiZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNmU5YzI3 LTRlMTUtNDg4NS04N2FlLTU0ZTlmZmQzYmJlMC8xLzFGYnVma2hLNHU4SklOQ1Z2 SzRtajZfV2xoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeEDANBgkqhkiG9w0BAQsFAAOCAQEAJKhpfheovEwu eujSTriDdxOx1xNOti3HNpbWFCUp3IF81EE3chWkwjQLPgjyamPUlRtkRCBEn5Js roPzTanwx3J7oVqBpEzwbrGoBsFr3RSLQgrkz9tWE7h1Hojd61v6OWArELXfd4dE L4o/EMNFYq7dQOXef0kehj5Yu1pGearza132vjGVha1VlNKWRw+5E+BZMjO85YBh nzyWbwPIfRCQGIGReLfV18sN2oy+C3Retj4BJQSg3gtAB8ohd0uqEXybvS5+2DpA sxwwkaitmxqhcVqG5neE4JkSN+mvxwW4rPOEtMwDkJshe6W1HEWsWF+3zEapBrMS l3wITv2mgg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:17 2026 by rpki-client