This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer (raw, json) Hash identifier: 7fpTp4QvJT3J9RIiWtfEYjJZKUPSoz0/RdKvphHSP8Y= Subject key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECEDFF54C3B09278BC558ED07A1D68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212881 IP: 185.40.107.0/24 IP: 2a0c:ef00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ed:ff:54:c3:b0:92:78:bc:55:8e:d0:7a:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:cc:da:47:ac:ae:7e:ab:10:4b:7d:a1:13: 26:39:30:52:b8:2b:f7:36:f8:64:d2:16:52:06:40: 44:55:5e:02:4a:e3:e9:92:d1:2c:ad:ef:e4:d1:e3: dc:1f:eb:70:c0:3d:17:b1:7d:58:6f:14:f4:a8:57: 72:7d:b0:9a:00:07:18:ce:8c:98:1a:48:91:fa:5e: 2f:2e:b8:65:6c:4f:2d:c3:2a:b2:9f:8f:59:63:35: 75:5a:5d:67:ec:09:74:e6:2f:aa:77:c2:42:92:65: 07:7f:50:55:26:b3:bc:3e:28:ea:ce:34:ce:2c:77: 84:cd:ee:cb:d1:28:57:1c:7d:f2:e8:91:ea:d4:98: ec:8b:6c:dd:49:6b:af:1a:e7:ee:a6:3d:ca:d8:58: 28:09:90:b5:04:e8:e8:65:a5:13:f8:d0:cc:b2:8c: ff:7c:fb:03:4a:f6:b0:98:b3:c9:80:a7:3b:48:74: 29:42:29:95:c1:50:df:ea:8c:ce:c9:38:df:27:cc: cc:c6:93:00:51:49:b0:d7:6d:67:4a:fe:e3:55:c4: 0b:80:b5:7b:67:5d:fa:ed:ab:96:bf:37:dd:0c:50: ce:1b:ae:8e:a0:d4:b6:ff:d3:2b:08:bb:b0:f2:21: 86:6a:2b:ba:e6:13:fa:f4:b7:d2:31:0a:ed:ea:e2: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.107.0/24 IPv6: 2a0c:ef00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212881 Signature Algorithm: sha256WithRSAEncryption 5a:1c:3c:ae:23:b8:fe:a4:19:d8:cc:d9:45:a5:91:8c:21:25: 85:96:00:e8:5f:38:e4:8b:6f:f5:6a:09:04:a0:29:5e:c9:b2: f9:60:0c:7f:f5:9b:6f:b0:d8:b0:a0:80:e5:73:1a:f5:3e:ae: 4b:a9:1c:a4:50:17:33:2b:98:11:f8:09:71:34:c6:95:91:12: 8d:d2:3d:d1:9d:36:a7:2e:51:a5:a1:5d:b8:9c:ef:68:b9:84: 9b:1d:cf:e6:01:c3:26:ae:ff:1e:f2:b2:31:3f:3c:6e:58:f0: 2e:df:54:f1:4f:42:69:6f:08:4e:ee:06:f9:e8:aa:10:1e:7f: de:0a:22:60:33:a8:b0:f1:21:54:51:38:c8:17:97:eb:1a:67: 62:99:8e:c0:51:4d:5d:b2:3e:3d:86:81:ab:92:a3:0b:f2:95: d6:bb:ca:49:1e:c5:26:62:37:58:c6:a8:14:18:60:d4:06:4e: bf:c0:9c:65:d3:a7:99:1d:51:6d:a0:5c:50:61:47:28:9d:5b: 1f:be:5a:74:f3:56:68:7c:a6:28:4d:39:ca:31:17:d6:be:5a: 9b:0f:18:4a:b8:65:cd:09:fd:ba:99:96:df:a3:a8:b3:b9:ee: b8:f7:a9:4c:85:f9:1f:de:39:be:58:85:ca:8e:f2:3a:64:19: b0:98:0a:ec -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57O3/VMOwkni8VY7Qeh1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWY1ZTdkZGRjNDdjNzEwNDQ4NjViYzVjZGMyNTg3ZWZkYWIwYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjXM2kesrn6rEEt9oRMmOTBSuCv3 Nvhk0hZSBkBEVV4CSuPpktEsre/k0ePcH+twwD0XsX1YbxT0qFdyfbCaAAcYzoyY GkiR+l4vLrhlbE8twyqyn49ZYzV1Wl1n7Al05i+qd8JCkmUHf1BVJrO8PijqzjTO LHeEze7L0ShXHH3y6JHq1Jjsi2zdSWuvGufupj3K2FgoCZC1BOjoZaUT+NDMsoz/ fPsDSvawmLPJgKc7SHQpQimVwVDf6ozOyTjfJ8zMxpMAUUmw121nSv7jVcQLgLV7 Z1367auWvzfdDFDOG66OoNS2/9MrCLuw8iGGaiu65hP69LfSMQrt6uIlKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNX1593cR8cQRIZbxc3CWH79qwucMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzgyNmZh Zi0zN2I0LTQzOGYtOGY5MC0yOWZlN2NjNjZjOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvODI2ZmFm LTM3YjQtNDM4Zi04ZjkwLTI5ZmU3Y2M2NmM4ZC8xLzFmWG4zZHhIeHhCRWhsdkZ6 Y0pZZnYyckM1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuShrMA0EAgACMAcDBQAqDO8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/kTANBgkqhkiG9w0BAQsFAAOCAQEAWhw8riO4/qQZ 2MzZRaWRjCElhZYA6F845Itv9WoJBKApXsmy+WAMf/Wbb7DYsKCA5XMa9T6uS6kc pFAXMyuYEfgJcTTGlZESjdI90Z02py5RpaFduJzvaLmEmx3P5gHDJq7/HvKyMT88 bljwLt9U8U9CaW8ITu4G+eiqEB5/3goiYDOosPEhVFE4yBeX6xpnYpmOwFFNXbI+ PYaBq5KjC/KV1rvKSR7FJmI3WMaoFBhg1AZOv8CcZdOnmR1RbaBcUGFHKJ1bH75a dPNWaHymKE05yjEX1r5amw8YSrhlzQn9upmW36Oos7nuuPepTIX5H945vliFyo7y OmQZsJgK7A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:38 2026 by rpki-client