This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.cer (raw, json) Hash identifier: 1e6lc/tUXL/utglUpGMszcajMtiRy/NtlqVy98ATz3M= Subject key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783528C1F4FEE05EEEE4665C8D9164E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216091 IP: 2001:67c:d38::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:c1:f4:fe:e0:5e:ee:e4:66:5c:8d:91:64:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:cf:cd:f5:96:41:a2:07:cc:15:26:09:6b: 40:20:b6:f1:20:93:a4:27:7f:d7:2a:8a:f2:49:61: ee:31:6f:0a:6e:39:36:e6:51:7a:70:73:d9:ea:2f: bd:2c:84:fa:7d:e1:0c:1b:6a:05:04:43:ca:08:31: 93:ac:62:fa:62:80:89:5e:b6:76:11:11:85:96:9a: 76:3b:31:25:3a:18:6e:be:ec:b1:82:8e:32:c9:47: fc:c9:8c:e2:99:f0:2e:73:b8:78:ba:85:e7:90:36: bd:bb:53:4c:03:82:39:54:96:8d:0d:94:64:2f:bc: cb:d1:a9:cd:c9:03:0c:ba:0e:4e:c1:1a:06:d9:e2: ab:03:2d:d0:fe:07:77:1e:84:85:7f:6c:18:01:10: d0:cf:9d:1f:46:0e:ee:ae:8b:0c:a8:3a:13:c9:40: 9c:6d:4a:15:3c:09:70:1a:f3:b5:ad:81:bc:6f:22: 38:b5:bc:7c:48:63:d9:ba:11:ea:4d:8e:59:37:b6: 65:95:e7:9c:fc:da:bf:a1:af:ed:b7:4c:1d:c4:27: 53:9b:ab:4b:b0:23:cb:10:85:d1:ec:42:4b:9d:d0: 29:32:56:f5:7e:27:23:92:76:dc:52:8f:74:6f:b3: 86:e4:6c:14:3b:74:6b:8e:3c:f8:a9:f8:31:43:8b: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d38::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216091 Signature Algorithm: sha256WithRSAEncryption 36:78:9b:e6:a8:19:75:9f:0d:ae:ce:b1:a9:4c:4a:fa:6b:81: 91:16:ce:fa:c2:26:cb:6a:98:68:7f:73:60:20:c6:b0:35:a0: c5:f5:cf:3b:92:b8:66:88:56:d2:b6:c0:38:7b:fd:45:2b:53: 39:3c:aa:0b:4a:29:09:a8:07:7f:27:42:46:4c:f7:74:d5:3d: 9c:df:77:80:71:fa:97:80:8c:86:01:75:1d:64:23:59:bc:76: e1:76:61:5c:eb:28:a5:ef:2a:e1:dc:cf:af:d3:c0:f2:c6:77: bb:47:63:24:ed:91:3f:ff:66:f2:0b:86:44:b3:90:dc:26:3c: 26:67:2d:29:43:e1:51:ed:7c:a2:29:5f:8b:b3:a9:84:d5:f4: b7:3a:da:d4:37:43:1b:cf:94:d3:44:e5:4a:78:f9:82:c8:ce: f2:4f:92:6e:55:f2:6c:7b:a0:be:71:c1:9b:75:f6:30:f9:95: 3f:e1:e3:85:e6:f0:1a:23:39:04:63:c1:95:bc:d9:d9:c6:11: ab:4c:f6:db:8a:fd:83:f1:44:2d:01:86:fd:a7:ee:9d:33:9b: 45:73:27:4b:b1:68:dc:6a:bf:fd:32:48:f4:0e:f6:68:e8:0d: 43:94:bb:af:61:56:ce:ea:77:8d:80:48:b6:30:36:ab:00:54: 02:9b:47:5f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NSjB9P7gXu7kZlyNkWTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Y0ZjY0YjUxMGE0MWIwN2M5ZDUwMDA0YjM1MjU2OTRjYzQyMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn7PzfWWQaIHzBUmCWtAILbxIJOk J3/XKorySWHuMW8Kbjk25lF6cHPZ6i+9LIT6feEMG2oFBEPKCDGTrGL6YoCJXrZ2 ERGFlpp2OzElOhhuvuyxgo4yyUf8yYzimfAuc7h4uoXnkDa9u1NMA4I5VJaNDZRk L7zL0anNyQMMug5OwRoG2eKrAy3Q/gd3HoSFf2wYARDQz50fRg7urosMqDoTyUCc bUoVPAlwGvO1rYG8byI4tbx8SGPZuhHqTY5ZN7Zlleec/Nq/oa/tt0wdxCdTm6tL sCPLEIXR7EJLndApMlb1ficjknbcUo90b7OG5GwUO3Rrjjz4qfgxQ4tF8QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFNf09ktRCkGwfJ1QAEs1JWlMxCIzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzllM2Rj ZC1mMWEyLTRmYjktOGM3ZS1kNTQ1NjJmNTJlOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvOWUzZGNk LWYxYTItNGZiOS04YzdlLWQ1NDU2MmY1MmU5My8xLzFfVDJTMUVLUWJCOG5WQUFT elVsYVV6RUlqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA04MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNMGzANBgkqhkiG9w0BAQsFAAOCAQEANnib5qgZdZ8Nrs6xqUxK+muBkRbO +sImy2qYaH9zYCDGsDWgxfXPO5K4ZohW0rbAOHv9RStTOTyqC0opCagHfydCRkz3 dNU9nN93gHH6l4CMhgF1HWQjWbx24XZhXOsope8q4dzPr9PA8sZ3u0djJO2RP/9m 8guGRLOQ3CY8JmctKUPhUe18oilfi7OphNX0tzra1DdDG8+U00TlSnj5gsjO8k+S blXybHugvnHBm3X2MPmVP+HjhebwGiM5BGPBlbzZ2cYRq0z224r9g/FELQGG/afu nTObRXMnS7Fo3Gq//TJI9A72aOgNQ5S7r2FWzup3jYBItjA2qwBUAptHXw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:48 2026 by rpki-client