This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer (raw, json) Hash identifier: txcC+wBX3QEKQEUKRSS1xwflFHFDDwqHTM2SSY6nQxE= Subject key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3907FA14746A4D236C8F254796687D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58111 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:fa:14:74:6a:4d:23:6c:8f:25:47:96:68:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:5d:8b:fe:09:10:d1:63:20:a6:12:1e:ea: 34:8b:22:2e:df:88:71:ad:ca:7e:bd:32:47:83:db: 6c:d9:1f:b3:fb:3d:55:8b:62:61:75:c0:81:86:0c: 1e:66:4c:3a:5a:78:28:20:fc:2c:39:27:e2:40:35: 53:a2:97:0c:92:89:62:b2:5f:07:c5:99:73:31:ef: 44:6a:23:28:77:1f:e9:8c:c7:7a:48:cb:b8:0d:31: dc:04:ae:39:70:ca:2f:a2:c5:4f:6f:98:8b:68:77: da:be:cb:be:ed:a3:e8:b8:7e:43:1e:95:15:68:13: 3d:50:52:9d:54:b3:37:c7:7a:91:e0:fa:1b:8c:de: 16:a1:8d:76:b5:a1:16:b8:9f:18:38:29:a9:92:7f: ef:0b:64:93:d7:7a:2a:c6:0a:2b:bd:eb:7e:5d:70: 04:c1:8d:36:ad:02:ea:74:1b:9b:3a:07:83:d5:46: 0b:3f:da:88:8e:cd:92:b3:c6:02:c8:63:80:c2:5c: 53:b0:16:2c:5e:b5:88:aa:57:0a:96:cc:9d:ad:fa: 03:e8:8f:bf:67:9e:32:25:91:e4:bd:5d:9e:3a:a0: 2e:98:d4:17:1d:81:b0:07:57:91:c8:77:fd:a7:4e: eb:7d:df:b2:d0:fa:b5:7b:cb:e8:95:c9:bd:76:d7: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 58111 Signature Algorithm: sha256WithRSAEncryption 5e:05:3f:b9:50:1b:8c:fb:26:70:33:2b:83:55:90:3d:28:5e: 2f:48:74:3c:38:e5:27:ea:b9:44:4b:c9:c7:6c:12:ef:70:d1: 30:a8:6b:a8:3d:8b:3b:09:90:13:44:aa:ed:50:1c:fc:3a:f2: 21:1a:2e:4f:07:c5:bf:44:49:7f:05:d3:11:52:e9:23:c3:14: 48:67:17:55:b5:e1:a0:59:51:e2:ca:ac:da:10:f2:a2:09:3f: 36:20:6f:0c:79:05:c1:ae:4f:cb:86:26:52:87:5b:9a:cc:5c: ea:a3:3f:0f:9b:e9:c6:c6:b6:5b:fd:2f:14:c6:fb:f8:5f:32: cc:2a:db:ca:52:83:1a:bd:3f:46:10:b4:eb:5f:a4:b0:13:58: 87:a4:f8:64:1e:2e:79:e4:7a:4c:46:33:ec:d9:ae:4c:6a:04: 0d:5a:61:ca:43:3b:7a:00:65:c1:13:2c:eb:4f:4f:36:f3:e1: 20:d3:77:93:20:c4:fc:f2:9e:3c:e0:ff:0a:d2:90:d6:33:72: 24:fb:ed:2b:eb:8c:3e:0a:f6:6c:96:d4:53:84:ec:4e:a8:30: 44:94:d1:a2:6c:12:15:d9:fe:83:8f:f9:c2:f8:2b:e7:81:49: d4:53:69:dc:8a:f9:6a:0c:f5:64:d1:b2:19:13:0a:00:fe:55: db:a0:f5:ae -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OQf6FHRqTSNsjyVHlmh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWY2MjNkYTRjZDJlZWRkYzJjODdjNTE1YzYyNTE4YzQzMWQzZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp5di/4JENFjIKYSHuo0iyIu34hx rcp+vTJHg9ts2R+z+z1Vi2JhdcCBhgweZkw6WngoIPwsOSfiQDVTopcMkolisl8H xZlzMe9EaiModx/pjMd6SMu4DTHcBK45cMovosVPb5iLaHfavsu+7aPouH5DHpUV aBM9UFKdVLM3x3qR4PobjN4WoY12taEWuJ8YOCmpkn/vC2ST13oqxgorvet+XXAE wY02rQLqdBubOgeD1UYLP9qIjs2Ss8YCyGOAwlxTsBYsXrWIqlcKlsydrfoD6I+/ Z54yJZHkvV2eOqAumNQXHYGwB1eRyHf9p07rfd+y0Pq1e8volcm9dteGpwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNX2I9pM0u7dwsh8UVxiUYxDHT+1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzMxM2Mx MS1kZjg3LTRkNzctODczOS0wNGYxZGNlYzMyMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMzEzYzEx LWRmODctNGQ3Ny04NzM5LTA0ZjFkY2VjMzIwZS8xLzFmWWoya3pTN3QzQ3lIeFJY R0pSakVNZFA3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDi/zANBgkqhkiG9w0BAQsFAAOCAQEAXgU/uVAbjPsm cDMrg1WQPSheL0h0PDjlJ+q5REvJx2wS73DRMKhrqD2LOwmQE0Sq7VAc/DryIRou TwfFv0RJfwXTEVLpI8MUSGcXVbXhoFlR4sqs2hDyogk/NiBvDHkFwa5Py4YmUodb msxc6qM/D5vpxsa2W/0vFMb7+F8yzCrbylKDGr0/RhC061+ksBNYh6T4ZB4ueeR6 TEYz7NmuTGoEDVphykM7egBlwRMs609PNvPhINN3kyDE/PKePOD/CtKQ1jNyJPvt K+uMPgr2bJbUU4TsTqgwRJTRomwSFdn+g4/5wvgr54FJ1FNp3Ir5agz1ZNGyGRMK AP5V26D1rg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:31 2026 by rpki-client