This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer (raw, json) Hash identifier: uD9mHoRLUzM2TLvmhRXw011qlAuEKumLceJAGifGMiE= Subject key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA67AE41865C2035F73F2FF34F241A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34906 IP: 193.189.94.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7a:e4:18:65:c2:03:5f:73:f2:ff:34:f2:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6c:a5:7a:bf:76:90:a9:97:a3:71:ff:86:14: df:20:9b:80:87:c9:24:dc:51:2a:bb:d6:90:af:a8: 9a:ca:ed:20:35:84:70:5f:1c:d9:24:1a:56:35:bc: 74:e0:7f:94:c4:e3:92:4e:11:29:50:93:c2:5f:f6: 50:4a:7c:d8:58:7c:8c:c5:54:98:f3:23:53:54:a2: 06:92:c9:3e:ac:ae:21:76:a2:43:c4:a5:dd:ee:80: e8:b8:34:2e:42:dc:1f:7d:eb:2a:79:97:72:74:0d: 1e:3d:9f:b1:4f:72:fd:6f:b8:39:5d:9e:1c:72:a2: 1d:4f:52:26:18:f9:56:bc:f9:c6:c3:b7:be:4a:db: fb:22:9d:91:54:8b:f3:7e:c7:1d:a7:a2:e9:15:ae: 2b:55:09:90:55:5f:f9:07:a4:be:56:79:42:61:06: c3:24:74:40:16:ad:71:28:e7:15:b2:6e:59:bd:aa: fe:d4:79:d8:68:aa:be:ff:00:b7:cf:8d:57:0d:db: 66:90:ac:42:be:7e:64:4f:f2:35:a7:77:12:24:14: 19:2f:5a:25:b8:61:bf:51:f7:c7:e1:0d:53:46:4e: 2e:af:f3:1f:50:23:a8:5a:c9:f8:84:17:d3:85:be: a3:6d:56:a1:7a:c2:73:24:be:6c:75:78:a6:f9:a8: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.94.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34906 Signature Algorithm: sha256WithRSAEncryption 36:d4:b4:9f:73:80:4f:de:19:16:9d:7d:b8:59:12:36:dd:16: 56:7f:79:38:e3:bc:60:3e:2d:35:39:48:bd:01:cc:aa:13:c5: e5:95:bc:a1:e2:3e:c6:00:28:94:bb:8f:f4:e6:3f:ea:b0:9c: 95:fb:15:f3:0c:09:f4:83:ac:53:37:f0:ed:25:2a:09:c7:26: a7:e6:3a:fb:0b:64:83:b1:a4:12:e2:2b:04:d9:b6:ce:32:a7: 1a:3b:f9:27:db:e6:b0:2f:81:0c:32:c3:36:28:29:9f:b4:7f: 8f:7a:e3:a9:82:92:e6:37:aa:89:cf:e7:9a:38:24:1d:1f:ad: 90:4e:3e:34:57:6c:d4:1c:58:fb:04:4f:71:29:01:58:7e:11: 54:a7:75:2b:40:ea:20:9f:d1:57:0f:16:4e:d6:db:45:c0:d5: 95:d8:29:fe:41:0a:21:bc:b7:75:90:ec:f9:1e:a0:1d:dc:12: 1e:f0:68:f8:45:54:f7:1b:19:11:5a:5c:28:02:ca:3e:e4:fd: d9:d6:59:3c:8f:82:71:e6:fe:b6:a4:9a:84:c7:5b:71:42:be: 3f:de:c6:f9:2b:92:80:1f:76:48:20:7e:09:2f:13:4b:0c:b8: db:f9:43:72:d5:5c:af:dd:6f:4d:44:1b:1d:f2:7c:b2:4b:5c: cb:e3:41:4b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pnrkGGXCA19z8v808kGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Y2ZjQ4MjdjNThjYjI4Zjk5NmE5YWFlYjM0OGYxZmQyNmEwY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmyler92kKmXo3H/hhTfIJuAh8kk 3FEqu9aQr6iayu0gNYRwXxzZJBpWNbx04H+UxOOSThEpUJPCX/ZQSnzYWHyMxVSY 8yNTVKIGksk+rK4hdqJDxKXd7oDouDQuQtwffesqeZdydA0ePZ+xT3L9b7g5XZ4c cqIdT1ImGPlWvPnGw7e+Stv7Ip2RVIvzfscdp6LpFa4rVQmQVV/5B6S+VnlCYQbD JHRAFq1xKOcVsm5Zvar+1HnYaKq+/wC3z41XDdtmkKxCvn5kT/I1p3cSJBQZL1ol uGG/UffH4Q1TRk4ur/MfUCOoWsn4hBfThb6jbVahesJzJL5sdXim+ahmwQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNf29IJ8WMso+Zapqus0jx/SagylMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2Y5M2Ri OC0wZTdkLTRlYTYtODkxZC03MGM2N2YxMjZiZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZjkzZGI4 LTBlN2QtNGVhNi04OTFkLTcwYzY3ZjEyNmJmMi8xLzFfYjBnbnhZeXlqNWxxbXE2 elNQSDlKcURLVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwb1eMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCIWjANBgkqhkiG9w0BAQsFAAOCAQEANtS0n3OAT94ZFp19uFkSNt0WVn95OOO8 YD4tNTlIvQHMqhPF5ZW8oeI+xgAolLuP9OY/6rCclfsV8wwJ9IOsUzfw7SUqCccm p+Y6+wtkg7GkEuIrBNm2zjKnGjv5J9vmsC+BDDLDNigpn7R/j3rjqYKS5jeqic/n mjgkHR+tkE4+NFds1BxY+wRPcSkBWH4RVKd1K0DqIJ/RVw8WTtbbRcDVldgp/kEK Iby3dZDs+R6gHdwSHvBo+EVU9xsZEVpcKALKPuT92dZZPI+Cceb+tqSahMdbcUK+ P97G+SuSgB92SCB+CS8TSwy42/lDctVcr91vTUQbHfJ8sktcy+NBSw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:20 2026 by rpki-client