This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer (raw, json) Hash identifier: N5lNO9FlGt/8aFd8jH5NgM4BBEsBsNfbTGtk3d55mWo= Subject key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBC6E8B62114B287F1FD9919485034 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200719 IP: 82.102.0.0/22 IP: 82.102.5.0 -- 82.102.6.255 IP: 94.46.8.0/22 IP: 94.46.40.0 -- 94.46.63.255 IP: 94.46.112.0/20 IP: 94.46.140.0/24 IP: 94.46.143.0/24 IP: 94.46.248.0 -- 94.46.250.255 IP: 94.46.252.0/22 IP: 185.39.136.0/22 IP: 185.41.88.0/22 IP: 185.51.0.0/22 IP: 185.51.32.0/22 IP: 185.51.144.0/22 IP: 185.58.140.0/22 IP: 185.76.64.0/22 IP: 185.196.36.0/22 IP: 185.198.8.0/22 IP: 188.114.224.0/19 IP: 2a03:4f20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c6:e8:b6:21:14:b2:87:f1:fd:99:19:48:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6107622fd26072e2b9936caf275704350226ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:5a:b3:1f:32:4c:36:f7:0e:a0:c9:92:18: 11:56:69:a3:34:89:46:1d:b0:db:48:35:ef:f5:b8: 6b:28:50:5a:7a:a6:ed:37:5e:52:50:91:15:a2:14: 1d:49:06:19:b4:fb:60:2b:38:20:26:1e:ec:ba:4e: 76:14:79:bb:e0:73:34:5f:41:f6:c7:3e:a9:e1:d5: 85:94:37:2d:33:13:d0:6a:91:a9:5d:86:29:ed:31: ce:50:f4:c6:29:2b:3c:0a:a2:de:f6:8c:45:38:59: 41:2f:78:6b:05:5d:95:52:6d:17:9a:09:aa:3b:34: 78:17:1b:cc:e5:ab:52:25:85:9c:6f:cf:17:d0:9e: 35:65:10:8b:87:62:e8:07:18:08:29:7e:fa:e4:1b: 83:e4:2d:45:31:2b:db:6a:f8:c0:3c:de:32:8a:e2: ad:e7:76:f7:ca:b2:04:8a:90:21:02:43:4a:82:14: c8:e3:46:e3:06:54:30:31:0c:e2:72:ec:72:fb:dc: fc:d6:0c:e2:02:0b:85:b6:52:28:c4:2b:e9:8e:e1: af:28:52:82:d9:3a:f7:0c:77:a6:2b:97:4b:11:e9: 57:db:62:c9:fc:9b:aa:31:c9:3a:c2:a0:4c:ac:45: 43:d9:e4:ce:03:74:1d:4e:57:0b:a7:16:62:7a:00: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.102.0.0/22 82.102.5.0-82.102.6.255 94.46.8.0/22 94.46.40.0-94.46.63.255 94.46.112.0/20 94.46.140.0/24 94.46.143.0/24 94.46.248.0-94.46.250.255 94.46.252.0/22 185.39.136.0/22 185.41.88.0/22 185.51.0.0/22 185.51.32.0/22 185.51.144.0/22 185.58.140.0/22 185.76.64.0/22 185.196.36.0/22 185.198.8.0/22 188.114.224.0/19 IPv6: 2a03:4f20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200719 Signature Algorithm: sha256WithRSAEncryption 37:24:1f:b2:26:6e:36:05:3d:1a:4f:4d:7c:c5:b8:2c:6f:d7: 16:34:b8:88:16:12:e7:7c:6d:7a:e6:5b:38:a0:b1:4a:e5:a2: 4d:3e:a3:3d:c7:ca:07:da:91:a4:b8:83:cb:24:96:1d:02:26: 60:f4:b9:5a:21:0f:9d:ec:96:4a:ad:0c:29:ff:44:70:2c:be: e1:72:1b:2e:75:f7:6d:af:5b:43:de:d8:4d:5c:55:4f:76:f0: 19:0d:67:a8:ae:a2:47:c3:6b:a0:f8:c8:52:fb:a4:03:74:8d: d7:73:c2:e5:5e:7c:7e:f3:e9:15:d2:e8:cc:26:04:4a:09:45: 03:22:e1:4d:d2:f7:0a:c5:f8:3d:74:f2:c2:86:5a:33:eb:0a: 88:91:91:63:bd:93:e3:c4:e5:42:10:11:8e:1c:f0:58:fc:e5: 48:9b:2d:49:48:88:9c:e4:a1:69:f1:31:ab:b0:b9:d9:72:1f: 19:aa:37:cc:25:14:ff:94:68:49:e1:25:06:f5:2f:27:5e:c2: 4e:61:40:b1:33:b3:70:1d:8d:79:6f:aa:48:19:3a:97:f1:f9: ea:f6:38:3d:b6:99:41:17:d7:db:15:9d:7b:fb:f4:13:26:43: 7e:23:01:b8:df:82:d4:2c:75:51:b3:d5:4f:13:0a:5f:4e:b2: 2e:74:31:3b -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgISAZt568botiEUsofx/ZkZSFA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjEwNzYyMmZkMjYwNzJlMmI5OTM2Y2FmMjc1NzA0MzUwMjI2Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLNasx8yTDb3DqDJkhgRVmmjNIlG HbDbSDXv9bhrKFBaeqbtN15SUJEVohQdSQYZtPtgKzggJh7suk52FHm74HM0X0H2 xz6p4dWFlDctMxPQapGpXYYp7THOUPTGKSs8CqLe9oxFOFlBL3hrBV2VUm0Xmgmq OzR4FxvM5atSJYWcb88X0J41ZRCLh2LoBxgIKX765BuD5C1FMSvbavjAPN4yiuKt 53b3yrIEipAhAkNKghTI40bjBlQwMQzicuxy+9z81gziAguFtlIoxCvpjuGvKFKC 2Tr3DHemK5dLEelX22LJ/JuqMck6wqBMrEVD2eTOA3QdTlcLpxZiegDfbQIDAQAB o4IDODCCAzQwHQYDVR0OBBYEFNYQdiL9JgcuK5k2yvJ1cENQImygMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2FiODA0 Ni1hOTNmLTQzMzUtYmQyYi0yZDhiNjg4OWZkOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYWI4MDQ2 LWE5M2YtNDMzNS1iZDJiLTJkOGI2ODg5ZmQ5Yy8xLzFoQjJJdjBtQnk0cm1UYks4 blZ3UTFBaWJLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG2BggrBgEF BQcBBwEB/wSBpjCBozCBkQQCAAEwgYoDBAJSZgAwDAMEAFJmBQMEAFJmBgMEAl4u CDAMAwQDXi4oAwQGXi4AAwQEXi5wAwQAXi6MAwQAXi6PMAwDBANeLvgDBABeLvoD BAJeLvwDBAK5J4gDBAK5KVgDBAK5MwADBAK5MyADBAK5M5ADBAK5OowDBAK5TEAD BAK5xCQDBAK5xggDBAW8cuAwDQQCAAIwBwMFAyoDTyAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAxAPMA0GCSqGSIb3DQEBCwUAA4IBAQA3JB+yJm42BT0aT018xbgs b9cWNLiIFhLnfG165ls4oLFK5aJNPqM9x8oH2pGkuIPLJJYdAiZg9LlaIQ+d7JZK rQwp/0RwLL7hchsudfdtr1tD3thNXFVPdvAZDWeorqJHw2ug+MhS+6QDdI3Xc8Ll Xnx+8+kV0ujMJgRKCUUDIuFN0vcKxfg9dPLChloz6wqIkZFjvZPjxOVCEBGOHPBY /OVImy1JSIic5KFp8TGrsLnZch8ZqjfMJRT/lGhJ4SUG9S8nXsJOYUCxM7NwHY15 b6pIGTqX8fnq9jg9tplBF9fbFZ17+/QTJkN+IwG434LULHVRs9VPEwpfTrIudDE7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:35 2026 by rpki-client