This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer File: 1II6TKTXaJe13f55iOJx_2gTGPI.cer (raw, json) Hash identifier: RnazcccvI1BjxL7bMjMrJ808VyBjRCROW/ZqoU3dT/s= Subject key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834BA011B8D294285DE3D622659E244 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12651 IP: 83.172.192.0/18 IP: 212.74.128.0/18 IP: 2a10:cf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ba:01:1b:8d:29:42:85:de:3d:62:26:59:e2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:a6:d6:18:46:88:e0:c6:55:72:89:2f:11: c4:e4:83:fd:d9:6d:5b:0d:5a:ce:f7:d9:75:82:88: 10:60:50:89:88:bc:48:74:21:59:42:65:6d:85:27: 6d:e2:4a:7e:3c:c3:5b:b8:13:b3:bc:11:26:5b:10: 3e:99:84:c5:b9:ae:f1:8d:8b:d6:ad:cb:bf:84:92: b6:74:49:05:e6:22:6a:7c:e3:8e:c1:cd:1f:6f:e6: 20:41:4f:00:00:1a:5c:c4:ec:c9:2e:a1:44:63:87: c4:2a:53:d0:a2:5a:46:17:97:72:6e:d3:fd:ec:82: 1b:d3:70:c4:02:84:8a:e4:a5:81:e5:39:e2:9e:16: 54:14:7b:5e:cd:87:bc:0f:11:26:00:3d:53:bb:cc: 9b:80:cb:99:45:46:7f:9d:fb:ef:9e:21:29:61:23: f0:41:6e:ff:df:3e:15:40:45:4b:8b:8f:f8:49:5f: 51:a7:7e:b6:76:88:a9:a2:e7:7b:7e:2a:57:18:52: f0:ff:3e:34:f6:5a:41:45:47:7b:bd:89:66:3f:ff: 8d:59:32:e8:20:ef:a2:94:0e:ce:fc:d1:56:cd:b4: 5f:2f:0f:af:bc:0e:c2:81:06:8b:81:3d:8b:51:4b: ca:83:91:cd:cd:de:f9:dd:be:73:d2:a5:e4:f0:92: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.172.192.0/18 212.74.128.0/18 IPv6: 2a10:cf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12651 Signature Algorithm: sha256WithRSAEncryption 2d:da:53:16:94:a1:3d:a9:f1:d2:bc:f2:34:73:ef:3a:ab:a7: 15:2a:c1:30:8b:f9:3c:03:79:64:6d:ee:6a:80:e6:9e:d5:50: de:e7:fb:47:69:75:cb:5b:e0:e6:07:41:b1:50:1d:46:ba:73: 7e:3a:95:26:c1:18:df:8f:75:79:e2:93:cb:ad:83:10:6a:12: a2:26:73:6e:0c:11:4f:e1:d1:43:ac:18:59:a3:08:62:aa:0e: 59:29:9a:1e:9f:d2:9d:6e:51:cf:5f:b5:cc:0b:c7:e7:5c:81: c9:c7:7f:26:d5:19:e6:8f:5a:8a:6d:ba:cb:b8:02:6c:f3:21: 6a:1a:80:75:5c:70:ee:82:6c:47:0a:aa:ea:d8:57:ca:87:47: 31:32:ab:51:f1:b5:d3:0f:df:60:71:a2:46:2c:31:ee:87:ea: f3:b8:c4:70:d4:51:b5:6c:aa:df:aa:9d:5c:fd:1e:ca:d9:19: 50:78:5d:4e:d2:7a:86:db:1f:70:10:fd:30:89:e8:13:60:1c: 7d:58:8f:55:e9:11:03:57:8e:dd:f0:49:a6:a7:0a:c3:9d:96: 72:6e:1b:08:83:0c:4c:dd:85:10:14:fb:5c:b5:27:e3:e5:ce: 46:bd:28:9c:4e:72:5a:4d:b7:36:93:f1:7f:87:35:36:81:56: 4a:42:52:5a -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NLoBG40pQoXePWImWeJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDgyM2E0Y2E0ZDc2ODk3YjVkZGZlNzk4OGUyNzFmZjY4MTMxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyim1hhGiODGVXKJLxHE5IP92W1b DVrO99l1gogQYFCJiLxIdCFZQmVthSdt4kp+PMNbuBOzvBEmWxA+mYTFua7xjYvW rcu/hJK2dEkF5iJqfOOOwc0fb+YgQU8AABpcxOzJLqFEY4fEKlPQolpGF5dybtP9 7IIb03DEAoSK5KWB5TninhZUFHtezYe8DxEmAD1Tu8ybgMuZRUZ/nfvvniEpYSPw QW7/3z4VQEVLi4/4SV9Rp362doipoud7fipXGFLw/z409lpBRUd7vYlmP/+NWTLo IO+ilA7O/NFWzbRfLw+vvA7CgQaLgT2LUUvKg5HNzd753b5z0qXk8JJp1QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNSCOkyk12iXtd3+eYjicf9oExjyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzVlNDNj My1jYWRmLTQzNzQtOTlhYS00ZTJmODljYWUxZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvNWU0M2Mz LWNhZGYtNDM3NC05OWFhLTRlMmY4OWNhZTFkYS8xLzFJSTZUS1RYYUplMTNmNTVp T0p4XzJnVEdQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGU6zAAwQG1EqAMA0EAgACMAcDBQMqEM8AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjFrMA0GCSqGSIb3DQEBCwUAA4IBAQAt2lMW lKE9qfHSvPI0c+86q6cVKsEwi/k8A3lkbe5qgOae1VDe5/tHaXXLW+DmB0GxUB1G unN+OpUmwRjfj3V54pPLrYMQahKiJnNuDBFP4dFDrBhZowhiqg5ZKZoen9KdblHP X7XMC8fnXIHJx38m1Rnmj1qKbbrLuAJs8yFqGoB1XHDugmxHCqrq2FfKh0cxMqtR 8bXTD99gcaJGLDHuh+rzuMRw1FG1bKrfqp1c/R7K2RlQeF1O0nqG2x9wEP0wiegT YBx9WI9V6REDV47d8EmmpwrDnZZybhsIgwxM3YUQFPtctSfj5c5GvSicTnJaTbc2 k/F/hzU2gVZKQlJa -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:33 2026 by rpki-client