This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.cer (raw, json) Hash identifier: zcZaQnZ1x/OjjkT8mH6jaxN71U1XZjyU//cl8RnMvb4= Subject key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DD9A4C28E1D6542130E04891EE7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2047 IP: 193.43.152.0 -- 193.43.157.255 IP: 193.58.155.0/24 IP: 193.228.103.0/24 IP: 194.26.26.0/24 IP: 194.147.45.0/24 IP: 2a04:c440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dd:9a:4c:28:e1:d6:54:21:30:e0:48:91:ee:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:b5:88:f9:78:09:a2:9f:48:e4:ad:8b:56: 32:fc:5d:35:52:51:66:cb:2f:e6:c5:92:95:15:ac: 73:b4:e3:52:92:01:ea:b9:20:aa:05:1a:72:3b:a1: 41:5d:b1:c0:38:fd:75:02:cb:d1:4c:e0:81:ef:fb: a2:d3:da:af:92:a8:74:5a:a4:e1:f2:e0:48:61:ca: ca:fb:19:59:7f:d0:e9:1e:6e:e0:9d:73:0c:27:21: 3b:a1:55:45:7e:48:fe:f6:ac:e9:12:c4:84:14:6b: e6:db:f2:0d:b2:fe:18:2d:1a:fd:81:23:25:61:fe: 74:e7:73:4a:56:8f:42:95:92:5c:77:9c:44:27:26: 2f:2c:21:33:77:52:8c:84:ed:cd:ba:58:f9:36:ba: 9e:71:2c:3e:5f:37:f4:9b:ec:2d:86:4b:10:d4:6b: 58:f3:a8:22:4e:38:8a:7b:f4:af:d8:b3:f0:3b:77: c8:e3:11:1a:e7:4f:0c:28:27:8b:85:a0:40:87:2e: 5c:d4:d4:19:65:da:d3:c7:1e:f3:a2:b1:44:4a:51: 42:b8:2b:27:82:88:51:88:a9:ff:88:b6:be:86:71: 8e:8a:87:1f:6d:fb:c0:4c:6f:90:d3:6d:30:46:f9: cf:24:3b:67:22:9d:30:d8:e1:ca:90:fe:1f:dc:9c: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.152.0-193.43.157.255 193.58.155.0/24 193.228.103.0/24 194.26.26.0/24 194.147.45.0/24 IPv6: 2a04:c440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2047 Signature Algorithm: sha256WithRSAEncryption 87:86:dd:32:c0:5e:69:54:7d:9a:a0:50:e3:67:16:c5:57:b0: 22:08:72:f9:d9:13:b6:bd:8e:18:95:d8:ad:78:79:5d:80:37: 8d:ef:79:c6:68:e9:8b:7f:b6:84:08:26:30:df:e1:76:fa:88: a7:f8:46:2e:3e:7e:ec:30:c8:0a:5d:5e:58:c4:cb:a1:d3:29: 67:92:20:4b:ad:20:da:79:0d:4a:47:b7:df:1d:aa:12:ab:62: de:f0:c1:b4:65:ec:e8:d6:8a:22:2b:cf:a4:d7:cf:09:13:9f: de:0c:a5:8d:fe:04:b7:8e:60:67:0b:bb:60:17:dd:10:d4:68: ae:b1:cf:ca:8e:dc:dd:4e:00:3e:7a:3b:4c:b2:85:8b:4c:37: c3:9a:a3:dd:52:89:19:6a:1f:a4:32:75:8e:ae:7e:61:c8:87: 21:7b:c0:27:a5:f1:cd:b3:cf:27:95:86:da:4f:4d:6b:74:01: 9c:e9:14:6e:cf:ab:70:b9:05:45:bc:a7:29:10:81:4b:9c:98: 94:ef:76:88:85:85:ee:e6:56:8f:93:92:80:78:c9:57:6f:0e: e0:57:6c:e2:e4:d5:0d:29:f0:37:60:b3:d5:bd:46:93:1e:a9: a4:5f:0b:a3:e4:56:2f:c3:62:2e:bc:22:57:a3:21:a1:80:d4: f0:d9:24:9f -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt5EN2aTCjh1lQhMOBIke57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQ1OTdiOTczYWRhMTA1MmY2NWIzZWExZGUxZTQ4MmUyM2YzZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fi1iPl4CaKfSOSti1Yy/F01UlFm yy/mxZKVFaxztONSkgHquSCqBRpyO6FBXbHAOP11AsvRTOCB7/ui09qvkqh0WqTh 8uBIYcrK+xlZf9DpHm7gnXMMJyE7oVVFfkj+9qzpEsSEFGvm2/INsv4YLRr9gSMl Yf5053NKVo9ClZJcd5xEJyYvLCEzd1KMhO3Nulj5NrqecSw+Xzf0m+wthksQ1GtY 86giTjiKe/Sv2LPwO3fI4xEa508MKCeLhaBAhy5c1NQZZdrTxx7zorFESlFCuCsn gohRiKn/iLa+hnGOiocfbfvATG+Q020wRvnPJDtnIp0w2OHKkP4f3JxbEQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFNXVl7lzraEFL2Wz6h3h5ILiPz0qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzEzNDdm My02YzU4LTQ2Y2UtOTk1Mi1mMjU4ZjdkNTBkNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMTM0N2Yz LTZjNTgtNDZjZS05OTUyLWYyNThmN2Q1MGQ3NS8xLzFkV1h1WE90b1FVdlpiUHFI ZUhrZ3VJX1BTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmMAwDBAPBK5gDBAHBK5wDBADBOpsDBADB5GcDBADC GhoDBADCky0wDQQCAAIwBwMFAyoExEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC B/8wDQYJKoZIhvcNAQELBQADggEBAIeG3TLAXmlUfZqgUONnFsVXsCIIcvnZE7a9 jhiV2K14eV2AN43vecZo6Yt/toQIJjDf4Xb6iKf4Ri4+fuwwyApdXljEy6HTKWeS IEutINp5DUpHt98dqhKrYt7wwbRl7OjWiiIrz6TXzwkTn94MpY3+BLeOYGcLu2AX 3RDUaK6xz8qO3N1OAD56O0yyhYtMN8Oao91SiRlqH6QydY6ufmHIhyF7wCel8c2z zyeVhtpPTWt0AZzpFG7Pq3C5BUW8pykQgUucmJTvdoiFhe7mVo+TkoB4yVdvDuBX bOLk1Q0p8Ddgs9W9RpMeqaRfC6PkVi/DYi68IlejIaGA1PDZJJ8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:27 2026 by rpki-client