This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer (raw, json) Hash identifier: pC51/mse3gN5RE6rjmCogWbR6al0C/fhz/4K1N2feRM= Subject key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA42EF68402DF21B9F0F7B06F82A0B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.120.234.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2e:f6:84:02:df:21:b9:f0:f7:b0:6f:82:a0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:46:14:4e:2a:9f:e6:b6:cb:c6:dd:27:b2: 6c:54:bd:b8:d7:47:39:1c:e1:54:5c:36:16:0e:e2: 8a:6e:69:46:f9:33:ad:b9:d7:87:6f:7a:c4:c3:08: ec:0a:ed:62:64:60:58:44:12:f9:57:f1:58:4c:a3: c1:14:54:49:ca:39:9c:54:4e:d0:36:de:5c:c4:67: 02:8b:61:fd:77:9f:6a:50:45:b2:52:91:e0:ad:e4: 8b:54:79:9e:b8:de:e5:20:d8:cd:00:94:fa:13:06: 2d:06:02:fb:0d:c0:f9:e1:b4:03:18:0c:cb:bc:66: 1d:38:ed:24:24:a3:33:74:22:e7:e2:e8:d9:63:78: 9b:0e:94:5c:74:e7:45:f1:94:aa:ed:89:c4:48:d9: 4d:2d:2c:3f:ab:e5:61:0d:8a:ff:59:d8:11:63:42: 21:47:86:e5:f6:f2:63:0d:43:d0:2b:5f:b3:3b:3b: 3d:b9:f7:ae:9d:f9:7f:12:97:f3:01:56:05:0d:e0: 2b:fe:ea:3f:52:bf:80:28:16:11:a8:19:5d:da:b3: 46:ca:4e:e2:0e:89:7a:44:9d:4b:fc:a9:06:9e:ec: 5b:31:fa:19:5d:fd:4f:fd:f5:dd:7c:a0:0f:e9:df: 40:1e:34:93:a7:86:ce:48:b6:da:b6:68:8f:1e:34: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.120.234.0/24 Signature Algorithm: sha256WithRSAEncryption aa:87:92:1b:19:cf:85:ff:9d:53:e0:ef:8b:7d:ab:00:76:16: 46:2b:b1:25:32:2f:fa:50:b6:3f:7e:e5:0f:f0:25:40:22:14: 7d:e4:ae:29:fa:e9:51:7b:67:c2:08:03:92:87:6f:af:2e:48: e0:f3:ce:a5:f7:14:72:5e:1d:6a:9a:fa:8c:2f:62:94:29:9b: 79:f4:e4:99:82:de:fa:cf:60:c5:bc:6e:6e:c7:00:86:88:b3: 79:54:ff:23:5b:de:73:af:24:61:c8:20:26:ef:0c:50:42:77: 6a:c1:c7:e5:de:f7:aa:7f:dc:59:4d:b2:cd:7f:f9:7e:f1:22: 2d:2f:e7:cc:3e:4b:4d:68:6b:5f:6e:41:68:f1:da:66:95:39: 2c:da:02:4d:6c:24:4f:c8:64:d5:be:6e:ab:ff:96:82:24:53: af:d6:65:69:cd:94:67:2f:31:96:52:11:0f:65:b6:0c:53:00: aa:78:72:5d:e3:b9:ea:b5:ab:ed:48:d1:e8:e7:cb:82:5c:df: 70:c0:e2:3d:11:e7:75:7b:62:9c:27:4e:43:43:1e:df:24:5d: 98:66:6d:58:55:24:3e:d8:07:85:b3:fd:3c:05:06:b6:2b:32: cd:82:19:8b:9b:54:ae:d5:04:36:96:f0:52:d7:e8:95:c0:95: a6:da:e8:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pC72hALfIbnw97BvgqC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDVhOGQ5MWZlNDRmMWE5NjM5YWVkNTYxYzFiY2FmY2JmMTBiMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTRGFE4qn+a2y8bdJ7JsVL2410c5 HOFUXDYWDuKKbmlG+TOtudeHb3rEwwjsCu1iZGBYRBL5V/FYTKPBFFRJyjmcVE7Q Nt5cxGcCi2H9d59qUEWyUpHgreSLVHmeuN7lINjNAJT6EwYtBgL7DcD54bQDGAzL vGYdOO0kJKMzdCLn4ujZY3ibDpRcdOdF8ZSq7YnESNlNLSw/q+VhDYr/WdgRY0Ih R4bl9vJjDUPQK1+zOzs9ufeunfl/EpfzAVYFDeAr/uo/Ur+AKBYRqBld2rNGyk7i Dol6RJ1L/KkGnuxbMfoZXf1P/fXdfKAP6d9AHjSTp4bOSLbatmiPHjRxGwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNRajZH+RPGpY5rtVhwbyvy/ELJdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2ZhYzQw Ni0xZDliLTQ2MWQtODU1Yi01ODg2NWQxZTE0ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZmFjNDA2 LTFkOWItNDYxZC04NTViLTU4ODY1ZDFlMTRlMC8xLzFGcU5rZjVFOGFsam11MVdI QnZLX0w4UXNsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwnjqMA0GCSqGSIb3DQEBCwUAA4IBAQCqh5Ib Gc+F/51T4O+LfasAdhZGK7ElMi/6ULY/fuUP8CVAIhR95K4p+ulRe2fCCAOSh2+v Lkjg886l9xRyXh1qmvqML2KUKZt59OSZgt76z2DFvG5uxwCGiLN5VP8jW95zryRh yCAm7wxQQndqwcfl3veqf9xZTbLNf/l+8SItL+fMPktNaGtfbkFo8dpmlTks2gJN bCRPyGTVvm6r/5aCJFOv1mVpzZRnLzGWUhEPZbYMUwCqeHJd47nqtavtSNHo58uC XN9wwOI9Eed1e2KcJ05DQx7fJF2YZm1YVSQ+2AeFs/08BQa2KzLNghmLm1Su1QQ2 lvBS1+iVwJWm2uim -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:24 2026 by rpki-client