This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer (raw, json) Hash identifier: X+6K7CxPTSi15NXCJY7uZzg2mKFAOHcirqmIvx8b1fE= Subject key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B8D8E16DEBD5D5ADC2E81A927258 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61363 IP: 176.119.216.0/24 IP: 194.11.203.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b8:d8:e1:6d:eb:d5:d5:ad:c2:e8:1a:92:72:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:36:23:f7:af:60:65:5f:be:43:80:b2:1a: a8:69:39:1f:fb:12:c6:e2:09:fc:15:aa:98:b1:3c: f9:de:c4:a8:77:f1:cc:7a:0a:95:7a:22:29:b4:ef: 0a:f9:32:3c:78:91:5b:4d:da:a9:c7:8b:0b:58:8f: 4d:ab:d2:a7:87:51:dd:b1:89:77:aa:20:a4:39:ef: c3:ac:c4:89:6e:a2:ad:aa:c2:5b:6f:90:b2:c2:f0: 75:45:7a:3d:77:56:14:49:82:6b:68:56:e0:98:7f: b8:84:89:0e:24:81:56:f6:15:93:a4:bb:26:f8:63: 60:21:5d:61:35:db:6d:97:59:94:ca:72:0b:81:9f: 03:63:bf:8b:c1:a2:1e:23:6a:8a:e4:5d:b2:85:82: 4c:04:c7:60:14:16:e8:7e:75:5e:9a:83:29:ac:0b: 77:9b:cb:ad:bd:2e:76:5f:24:2b:38:91:67:df:c1: 21:85:c8:86:92:f1:1b:99:46:9f:f3:0b:36:e2:13: f3:76:70:bf:8f:68:9c:50:df:9b:44:eb:92:e7:50: 3d:4e:0d:97:ac:6e:be:ae:01:d6:04:bb:0e:18:f7: a0:30:17:4c:c1:e8:c4:6b:e5:aa:68:a8:15:11:cc: 48:ff:6c:ee:eb:2e:6f:23:e9:fd:04:a2:7e:1a:6c: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.216.0/24 194.11.203.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61363 Signature Algorithm: sha256WithRSAEncryption 05:f7:9e:b3:53:98:92:69:79:16:2d:6e:cc:37:60:6f:f1:8a: 63:0e:ad:59:d3:84:ba:61:e4:36:cb:c9:74:3d:c5:1e:f5:4f: 79:46:dd:2b:12:0d:b0:5c:55:a0:17:12:40:86:e2:fc:b6:52: f1:69:76:fa:3d:0d:31:e3:bd:13:0f:ef:be:ee:6a:59:1c:05: 28:77:5f:24:69:c3:ff:1c:1b:93:94:af:9c:31:93:83:34:3b: 43:ec:db:97:aa:18:cc:46:e1:47:a8:b3:7a:29:3e:5d:56:a4: b5:3f:6a:fa:f0:9c:37:86:96:5e:b6:77:fb:37:c6:c6:97:5e: 06:f3:cc:47:22:d0:0e:03:00:16:0b:6d:85:12:1b:c4:8a:d1: 22:ea:74:6d:1f:a2:4c:23:e8:03:68:dd:08:87:77:6c:e6:fd: 90:86:8c:4e:70:67:a4:e7:dd:4d:3e:d4:b9:ae:84:4a:ec:b2: a8:28:16:09:5f:dc:d2:e6:5b:1b:52:44:b4:92:f4:bd:a1:fc: 68:3e:57:ff:84:5c:54:62:a6:61:81:5d:eb:f3:31:25:64:8f: 52:7a:b0:bd:20:7d:19:50:bb:02:b0:61:00:ec:20:b4:84:bd: 1c:eb:58:ae:6a:4a:7a:fa:81:1d:06:c8:af:69:e7:28:5f:4c: a5:f4:37:66 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6yLjY4W3r1dWtwugaknJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWE4OTA5NGUxMmU1NGRkOTAxZTMyZDMzY2U1MTMxZTA0NmVlNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS02I/evYGVfvkOAshqoaTkf+xLG 4gn8FaqYsTz53sSod/HMegqVeiIptO8K+TI8eJFbTdqpx4sLWI9Nq9Knh1HdsYl3 qiCkOe/DrMSJbqKtqsJbb5CywvB1RXo9d1YUSYJraFbgmH+4hIkOJIFW9hWTpLsm +GNgIV1hNdttl1mUynILgZ8DY7+LwaIeI2qK5F2yhYJMBMdgFBbofnVemoMprAt3 m8utvS52XyQrOJFn38EhhciGkvEbmUaf8ws24hPzdnC/j2icUN+bROuS51A9Tg2X rG6+rgHWBLsOGPegMBdMwejEa+WqaKgVEcxI/2zu6y5vI+n9BKJ+GmwNGQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNWokJThLlTdkB4y0zzlEx4EbucMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzIyZDIw ZS0wYmQ2LTQ5ZmItYjljMy1lMjBkNzA3YzAwZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMjJkMjBl LTBiZDYtNDlmYi1iOWMzLWUyMGQ3MDdjMDBmYi8xLzFhaVFsT0V1Vk4yUUhqTFRQ T1VUSGdSdTV3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAsHfYAwQAwgvLMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDvszANBgkqhkiG9w0BAQsFAAOCAQEABfees1OYkml5Fi1uzDdgb/GK Yw6tWdOEumHkNsvJdD3FHvVPeUbdKxINsFxVoBcSQIbi/LZS8Wl2+j0NMeO9Ew/v vu5qWRwFKHdfJGnD/xwbk5SvnDGTgzQ7Q+zbl6oYzEbhR6izeik+XVaktT9q+vCc N4aWXrZ3+zfGxpdeBvPMRyLQDgMAFgtthRIbxIrRIup0bR+iTCPoA2jdCId3bOb9 kIaMTnBnpOfdTT7Uua6ESuyyqCgWCV/c0uZbG1JEtJL0vaH8aD5X/4RcVGKmYYFd 6/MxJWSPUnqwvSB9GVC7ArBhAOwgtIS9HOtYrmpKevqBHQbIr2nnKF9MpfQ3Zg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:17 2026 by rpki-client