This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer File: 1lcpIU0Paz-lGho4A32rjeSOBVg.cer (raw, json) Hash identifier: /RUImRrUmOKXeM6L5yrZkXxZ7oOXxnqzH+ulifLsGhE= Subject key identifier: D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4B78F133BD5F3748687D745E94EBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204333 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b7:8f:13:3b:d5:f3:74:86:87:d7:45:e9:4e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d65729214d0f6b3fa51a1a38037dab8de48e0558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:83:91:f7:78:5e:8b:da:d7:b7:3b:b4:a7: 3c:2a:01:ce:aa:5b:b5:2c:85:38:88:1f:50:14:2c: 7a:bf:22:cb:28:d2:83:43:75:23:ec:d2:be:aa:8f: 90:38:13:bf:12:48:44:db:ea:56:53:ab:9b:50:f9: cf:40:9d:28:59:00:86:08:f8:c2:e5:6f:87:f6:a0: f1:34:28:f6:8f:1e:71:25:77:1b:54:28:01:58:b3: 4f:1c:1a:f0:de:0d:81:77:9d:23:20:8f:b0:8a:6b: 9b:1b:90:84:0f:6f:4d:87:19:70:11:d6:b1:5c:56: 06:06:38:ef:64:21:d5:c0:c0:18:7d:03:92:16:de: 8f:57:4c:1d:90:b5:77:7b:69:06:48:f7:bc:47:7c: 7e:5e:22:5e:f6:6d:a9:26:cb:7b:a3:27:cb:7b:fa: 0a:04:f4:7c:e6:0b:da:e3:69:3c:8e:5c:9e:82:d5: ff:ac:6c:98:d8:4e:c9:7a:d9:a3:db:7a:2f:d8:9f: 7c:1d:9e:5d:eb:b6:1e:53:f7:ca:e3:f6:80:ad:7a: fe:88:eb:e2:f4:69:77:cf:12:88:cf:0b:4f:56:0a: 73:cb:36:45:68:f1:56:f1:f7:0f:05:16:cd:17:1a: 92:03:a9:d9:bf:73:0c:4c:33:a2:b2:07:79:19:2c: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204333 Signature Algorithm: sha256WithRSAEncryption aa:e4:44:96:66:2b:49:6d:7b:7c:8a:f9:cc:9b:14:16:14:a0: a6:17:58:95:80:ab:b8:91:ac:90:33:3c:c7:1f:b0:a3:f0:53: f4:6f:52:34:05:f4:7f:82:ba:ec:cf:22:c9:c4:cb:8e:6d:7d: b0:2b:04:9f:2e:61:0d:f6:04:08:78:9f:58:e9:3c:4e:b8:0a: c6:a7:1b:d9:99:90:83:54:17:73:53:d2:97:6f:de:3f:20:6a: b6:a1:37:08:20:d8:31:3e:ad:e6:13:f9:6e:e7:e9:98:a4:0b: a4:9e:9d:55:dd:e1:be:ee:8b:fe:89:75:5c:74:c7:ee:86:34: a8:4b:6e:4f:84:2d:59:ac:50:0c:db:d2:5e:86:af:8d:fc:e6: 93:c1:71:e7:ae:cf:71:4e:fc:2e:d9:5f:70:60:20:db:42:c1: 19:f0:c3:cd:8f:a6:f5:df:77:aa:8a:84:4b:4f:92:8b:e6:ef: 1d:49:b6:d8:e1:94:c1:c4:e0:86:13:2a:6f:40:f9:fc:17:2e: c2:85:2d:3c:2b:53:c3:1b:21:73:cf:79:e3:f3:9d:3b:30:27: e8:c1:63:8b:ee:27:2f:1e:58:fc:4d:eb:51:63:f8:36:12:ad: 5d:ae:3e:62:60:fa:27:ce:a4:ce:7f:f0:56:40:4c:73:8b:80: bb:e1:b3:d1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7pLePEzvV83SGh9dF6U69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjU3MjkyMTRkMGY2YjNmYTUxYTFhMzgwMzdkYWI4ZGU0OGUwNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujKDkfd4Xova17c7tKc8KgHOqlu1 LIU4iB9QFCx6vyLLKNKDQ3Uj7NK+qo+QOBO/EkhE2+pWU6ubUPnPQJ0oWQCGCPjC 5W+H9qDxNCj2jx5xJXcbVCgBWLNPHBrw3g2Bd50jII+wimubG5CED29NhxlwEdax XFYGBjjvZCHVwMAYfQOSFt6PV0wdkLV3e2kGSPe8R3x+XiJe9m2pJst7oyfLe/oK BPR85gva42k8jlyegtX/rGyY2E7Jetmj23ov2J98HZ5d67YeU/fK4/aArXr+iOvi 9Gl3zxKIzwtPVgpzyzZFaPFW8fcPBRbNFxqSA6nZv3MMTDOisgd5GSyozwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNZXKSFND2s/pRoaOAN9q43kjgVYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzA4NWJk My1jMzRmLTQ4Y2YtOWE3My1lYzQzZmQ2YzIyN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMDg1YmQz LWMzNGYtNDhjZi05YTczLWVjNDNmZDZjMjI3YS8xLzFsY3BJVTBQYXotbEdobzRB MzJyamVTT0JWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeLTANBgkqhkiG9w0BAQsFAAOCAQEAquRElmYrSW17 fIr5zJsUFhSgphdYlYCruJGskDM8xx+wo/BT9G9SNAX0f4K67M8iycTLjm19sCsE ny5hDfYECHifWOk8TrgKxqcb2ZmQg1QXc1PSl2/ePyBqtqE3CCDYMT6t5hP5bufp mKQLpJ6dVd3hvu6L/ol1XHTH7oY0qEtuT4QtWaxQDNvSXoavjfzmk8Fx567PcU78 LtlfcGAg20LBGfDDzY+m9d93qoqES0+Si+bvHUm22OGUwcTghhMqb0D5/BcuwoUt PCtTwxshc8954/OdOzAn6MFji+4nLx5Y/E3rUWP4NhKtXa4+YmD6J86kzn/wVkBM c4uAu+Gz0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:26 2026 by rpki-client