This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer File: 1GbRcMgQujTELpIOhNQmKEWXf4U.cer (raw, json) Hash identifier: Dgld79kBU5nZabqRICyub18pvJ0MJuRZsV5U5lu3bBc= Subject key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B2A78A70B6DBD5AE1E16AE77567D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.105.172.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b2:a7:8a:70:b6:db:d5:ae:1e:16:ae:77:56:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d466d170c810ba34c42e920e84d4262845977f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:86:f3:bd:1a:4f:f9:0a:8d:7e:6d:ba:6e: 3d:b3:9e:fd:72:49:06:c0:6b:c0:cd:0e:52:4e:66: 32:93:3e:d9:f5:81:24:92:9b:35:64:f4:99:ed:e8: 90:49:fa:f6:ba:2a:40:3b:6e:f0:90:77:5f:f7:d3: 54:2a:9b:5b:d2:55:4f:9f:e4:16:cf:3b:fd:87:6a: 9d:a4:09:79:d8:ce:b6:0c:87:21:e0:aa:b0:89:31: 6a:8c:a1:26:96:d6:0b:91:48:93:ed:92:79:a2:10: 8a:c4:35:ee:73:52:e6:2b:98:c0:9e:30:ae:ed:5e: 66:50:41:64:bc:9e:68:39:a2:50:42:4d:b7:8c:e2: 96:9c:c3:c8:3e:a8:4d:3b:d0:3d:80:05:97:84:09: 8d:c9:1b:81:95:b2:5b:80:b3:e1:69:57:0d:f0:c7: 38:8c:f9:2f:b0:93:a4:8a:70:8a:b8:ab:07:15:d7: a8:41:0b:cc:19:7e:72:fd:22:5d:10:41:44:40:cf: ac:d3:5c:82:57:a1:98:8d:c6:1b:8a:5b:86:46:41: 93:d3:34:87:e5:93:ec:f0:a5:3a:96:b5:77:53:ca: 06:ea:be:6f:80:b4:42:40:7d:01:98:17:ba:29:bd: af:10:89:f2:ec:02:6d:93:40:39:a3:8c:e6:6b:97: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.172.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:02:13:43:76:3c:9b:be:e9:c7:f9:eb:39:91:71:6b:9a:c6: 5d:7b:71:e6:74:88:23:2d:d4:67:2c:42:45:50:96:a1:97:6e: 19:11:a9:a6:0f:49:b2:da:b6:64:14:05:77:c8:af:04:69:54: 69:61:bd:06:70:09:d8:03:7b:3e:a8:2a:bb:92:05:04:b2:dc: 11:0d:eb:b4:5e:f8:21:d4:92:1d:f0:c8:b4:18:82:be:0e:87: fc:15:5d:23:e4:ba:09:16:b7:de:cf:9a:59:26:f0:b3:90:77: fc:95:b7:8f:73:6a:2a:31:31:c1:9a:46:01:f7:60:4c:36:d3: a4:79:4e:1b:db:2d:2e:d9:ec:83:3a:e2:5f:cf:b4:c1:1b:b2: af:35:85:d9:40:a4:2e:12:30:17:fd:d0:e3:47:5a:7d:20:c8: a8:77:af:48:92:3c:91:d8:d9:93:b9:5f:96:fc:3d:2d:67:64: 00:5c:ca:7d:cc:ab:76:89:24:03:7a:6d:13:9b:ef:40:95:e0: 17:e0:f2:1e:22:9d:a2:4c:34:d7:3d:65:3a:b1:da:51:33:2c: 4e:ef:3d:37:b7:9b:8e:48:77:9d:3f:0c:21:75:55:f7:62:09: eb:06:a3:db:36:3f:10:35:15:f3:8a:f6:17:17:ea:06:87:ff: fc:53:03:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gLKninC229WuHhaud1Z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDY2ZDE3MGM4MTBiYTM0YzQyZTkyMGU4NGQ0MjYyODQ1OTc3Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpWG870aT/kKjX5tum49s579ckkG wGvAzQ5STmYykz7Z9YEkkps1ZPSZ7eiQSfr2uipAO27wkHdf99NUKptb0lVPn+QW zzv9h2qdpAl52M62DIch4KqwiTFqjKEmltYLkUiT7ZJ5ohCKxDXuc1LmK5jAnjCu 7V5mUEFkvJ5oOaJQQk23jOKWnMPIPqhNO9A9gAWXhAmNyRuBlbJbgLPhaVcN8Mc4 jPkvsJOkinCKuKsHFdeoQQvMGX5y/SJdEEFEQM+s01yCV6GYjcYbiluGRkGT0zSH 5ZPs8KU6lrV3U8oG6r5vgLRCQH0BmBe6Kb2vEIny7AJtk0A5o4zma5dfoQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNRm0XDIELo0xC6SDoTUJihFl3+FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzIzMDZm Ni02Y2MwLTQ5ODItYTUyMy0xNjg0MmJkYWQ5MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMjMwNmY2 LTZjYzAtNDk4Mi1hNTIzLTE2ODQyYmRhZDkyNS8xLzFHYlJjTWdRdWpURUxwSU9o TlFtS0VXWGY0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWmsMA0GCSqGSIb3DQEBCwUAA4IBAQBdAhND djybvunH+es5kXFrmsZde3HmdIgjLdRnLEJFUJahl24ZEammD0my2rZkFAV3yK8E aVRpYb0GcAnYA3s+qCq7kgUEstwRDeu0Xvgh1JId8Mi0GIK+Dof8FV0j5LoJFrfe z5pZJvCzkHf8lbePc2oqMTHBmkYB92BMNtOkeU4b2y0u2eyDOuJfz7TBG7KvNYXZ QKQuEjAX/dDjR1p9IMiod69IkjyR2NmTuV+W/D0tZ2QAXMp9zKt2iSQDem0Tm+9A leAX4PIeIp2iTDTXPWU6sdpRMyxO7z03t5uOSHedPwwhdVX3YgnrBqPbNj8QNRXz ivYXF+oGh//8UwMg -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:21 2026 by rpki-client