This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.cer (raw, json) Hash identifier: VkCPaAqroTSI+C8U9WUMRCAPOWyscbIr98Pd9Wo7SFU= Subject key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36280E5C999951CDF37E41347CDFCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47461 IP: 195.242.174.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:28:0e:5c:99:99:51:cd:f3:7e:41:34:7c:df:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ff7bac644d5956722e5e183a22fb1455e75546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:33:18:d8:b5:73:76:4c:ad:c0:81:82:99: 47:0f:e3:ff:46:8a:4c:9f:79:87:2a:9a:5f:7b:23: 19:a1:5b:56:56:22:d9:88:cb:2f:cc:59:df:6c:a6: b4:eb:b1:0b:8f:58:3a:ae:a4:8c:0b:43:11:be:1a: 6c:95:c1:f6:a9:79:cd:4f:34:d3:4a:5b:4c:b7:14: dc:59:fe:f2:80:20:1d:22:51:0f:9e:7a:ec:fd:42: 80:f2:ea:f9:56:a5:86:39:55:b3:c1:c3:87:bb:91: 59:83:7e:4f:71:df:0b:a8:61:c4:fd:6d:b8:fd:ca: cc:2c:ee:c7:28:2b:38:0d:6a:bc:49:4d:88:91:09: 90:11:6b:1b:95:1a:69:df:50:77:dc:ee:b9:aa:d5: b2:24:ce:09:82:5a:53:7c:40:72:e8:ff:b5:c8:ec: a9:3e:ff:2b:59:dc:33:b9:ab:97:6b:be:ad:3a:d3: 25:fc:37:98:72:e5:aa:13:79:65:a5:4b:62:4e:0b: bd:5c:9b:9b:ee:55:d1:cd:f2:8e:8d:0c:0e:98:05: 28:84:e3:99:a6:9a:f3:bc:1d:fa:bc:68:d7:66:92: ca:be:a2:d8:d9:29:68:c2:3f:42:1c:12:63:96:a9: 33:ac:ad:b4:14:37:d2:17:81:3e:bf:43:30:d0:d2: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.174.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47461 Signature Algorithm: sha256WithRSAEncryption a9:5f:71:a2:2d:cf:f6:38:c3:e3:9a:83:9d:40:8f:94:76:e8: e2:37:1b:a3:6c:2b:ac:94:5d:ac:66:fe:6d:af:83:cd:dc:99: 62:00:92:e9:60:d2:74:35:83:99:9f:10:2d:e4:15:08:11:b2: aa:16:80:c9:a2:01:90:10:6e:1f:14:cd:6b:97:16:2b:4e:11: be:eb:e5:f6:90:85:7d:85:8d:36:8f:ab:9a:9e:04:84:de:f5: b5:88:63:33:69:b3:0c:f3:e6:dc:be:14:8f:a4:48:a7:39:71: ac:6d:3f:66:56:fd:e5:da:8e:8f:b3:ac:08:b6:c9:ae:d9:c5: 07:6f:88:0a:be:5d:1f:27:c6:43:fc:1e:a6:19:fd:c2:52:8d: ef:56:49:83:f7:fd:a9:82:cf:b5:5e:43:93:01:aa:b9:03:aa: 2d:37:c5:1e:08:4f:d6:0c:a7:a8:60:b1:53:8f:a1:b8:08:73: bd:83:6d:6e:3e:ff:14:2b:c0:e9:32:2d:ae:6d:42:4a:a5:d4: 07:46:98:de:15:68:ab:18:67:42:ab:8a:cc:43:d7:e3:e2:9f: 58:b1:58:15:20:15:f4:c7:ee:b7:d0:3d:7b:9d:2a:cc:80:72: 4f:c3:6a:8f:c6:b1:1e:f4:88:fc:89:ad:99:b2:cc:40:e9:3a: e9:19:c6:01 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NigOXJmZUc3zfkE0fN/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGZmN2JhYzY0NGQ1OTU2NzIyZTVlMTgzYTIyZmIxNDU1ZTc1NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH0zGNi1c3ZMrcCBgplHD+P/RopM n3mHKppfeyMZoVtWViLZiMsvzFnfbKa067ELj1g6rqSMC0MRvhpslcH2qXnNTzTT SltMtxTcWf7ygCAdIlEPnnrs/UKA8ur5VqWGOVWzwcOHu5FZg35Pcd8LqGHE/W24 /crMLO7HKCs4DWq8SU2IkQmQEWsblRpp31B33O65qtWyJM4JglpTfEBy6P+1yOyp Pv8rWdwzuauXa76tOtMl/DeYcuWqE3llpUtiTgu9XJub7lXRzfKOjQwOmAUohOOZ pprzvB36vGjXZpLKvqLY2Slowj9CHBJjlqkzrK20FDfSF4E+v0Mw0NK7jwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNT/e6xkTVlWci5eGDoi+xRV51VGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzE2NzJk MC01YjZkLTQxMTUtYWZiMy04ODBhODFiOTljYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMTY3MmQw LTViNmQtNDExNS1hZmIzLTg4MGE4MWI5OWNjNS8xLzFQOTdyR1JOV1ZaeUxsNFlP aUw3RkZYblZVWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/KuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC5ZTANBgkqhkiG9w0BAQsFAAOCAQEAqV9xoi3P9jjD45qDnUCPlHbo4jcbo2wr rJRdrGb+ba+DzdyZYgCS6WDSdDWDmZ8QLeQVCBGyqhaAyaIBkBBuHxTNa5cWK04R vuvl9pCFfYWNNo+rmp4EhN71tYhjM2mzDPPm3L4Uj6RIpzlxrG0/Zlb95dqOj7Os CLbJrtnFB2+ICr5dHyfGQ/wephn9wlKN71ZJg/f9qYLPtV5DkwGquQOqLTfFHghP 1gynqGCxU4+huAhzvYNtbj7/FCvA6TItrm1CSqXUB0aY3hVoqxhnQquKzEPX4+Kf WLFYFSAV9Mfut9A9e50qzIByT8Nqj8axHvSI/ImtmbLMQOk66RnGAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:24 2026 by rpki-client