This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer (raw, json) Hash identifier: 4iFnIYyyeYlDrsKtNk+XY9QlVAFGB11ZTRymDG+VmeI= Subject key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33E759AE195CBE21ACA2A90613D0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201012 IP: 176.109.112.0/20 IP: 176.114.112.0/20 IP: 185.89.12.0/22 IP: 2a05:cf80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3e:75:9a:e1:95:cb:e2:1a:ca:2a:90:61:3d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:d8:5f:ce:b8:7b:37:56:95:4f:74:d0:bf: 13:59:22:6b:e8:01:46:e6:81:e7:28:f5:3d:04:15: 1a:93:bd:dd:05:16:1c:35:bc:5d:25:48:55:55:01: 2f:db:41:e7:fb:c6:43:8e:dd:17:fb:a1:b3:37:50: 7f:a5:b6:42:d6:7d:ae:48:27:03:d0:f7:49:ec:a7: bf:75:39:68:e0:44:79:d0:63:8e:82:84:b1:86:52: 4c:cf:ec:24:3b:b9:35:87:86:ef:66:12:48:13:38: 70:62:d6:b8:50:3f:56:4c:89:ab:d0:1e:c1:64:0c: d6:62:e0:1e:d0:9e:35:84:e3:5d:44:03:d9:1c:e2: 3b:fa:8e:7e:1c:d6:c9:88:1b:16:73:85:30:72:a6: ce:54:20:cb:7a:0d:a2:65:d2:25:9e:3b:e9:43:4e: 8f:2e:4a:82:a7:68:c4:e1:3e:18:04:7e:cc:a7:be: 1e:9b:69:7e:58:19:40:15:2a:06:f2:0e:6b:d2:2e: 9f:ff:5e:67:62:61:78:3d:3b:77:98:e9:fa:bc:a0: 60:27:8a:48:bf:35:3d:53:f3:eb:d2:e1:d5:61:3f: 7d:6a:25:f8:11:9a:e4:87:4c:b3:47:71:0e:00:2f: fb:11:09:06:e5:7b:97:0d:a1:05:90:76:5f:81:47: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.109.112.0/20 176.114.112.0/20 185.89.12.0/22 IPv6: 2a05:cf80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201012 Signature Algorithm: sha256WithRSAEncryption 64:f4:e3:bc:38:98:21:f9:4c:78:86:e7:48:7e:46:10:fa:7e: b3:79:8b:72:f4:e5:22:c5:17:8b:85:7d:52:6f:ec:85:b0:76: 7f:74:af:e8:7e:82:df:af:3c:82:f9:52:43:1f:8d:c3:e7:c1: 7b:0b:08:de:01:b9:e5:37:16:8c:00:21:68:40:18:d7:34:89: b0:b7:99:f2:ed:7f:f3:63:08:1d:86:d1:fa:b1:1d:29:08:d3: 23:31:c9:69:68:b0:b7:3e:51:e6:8a:82:bf:55:71:3d:6f:88: 51:73:f5:93:2e:8f:71:60:37:5a:5b:bc:76:98:ea:e1:2f:3b: f9:b4:33:77:cc:22:af:b6:42:e0:e6:8b:6b:dd:c4:2e:fa:25: 36:37:51:4f:c7:28:91:2c:30:3e:a8:b8:90:87:61:97:3e:52: 27:46:a4:c2:d0:b0:cf:c9:6d:3a:a1:37:17:20:48:45:a5:84: ea:e1:c9:e2:6f:30:ef:4e:f5:ea:e2:00:2c:6a:eb:17:1d:f4: 8c:fa:eb:29:12:f8:17:d6:a1:45:4b:a0:a1:49:f1:44:a1:56: bf:3d:98:da:84:55:4f:c9:ac:3b:f0:df:c8:b6:e3:f3:3e:a6: 80:f6:ad:c8:d5:8d:2f:4d:05:2e:6b:3f:f9:91:c5:51:c3:7b: 9b:8a:96:8d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4oz51muGVy+IayiqQYT0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmIyYmNiNDJhNmQ3ZmQ2M2Q0ZjBhYzU5M2U5ZjgwNzM2MmYzMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qPYX864ezdWlU900L8TWSJr6AFG 5oHnKPU9BBUak73dBRYcNbxdJUhVVQEv20Hn+8ZDjt0X+6GzN1B/pbZC1n2uSCcD 0PdJ7Ke/dTlo4ER50GOOgoSxhlJMz+wkO7k1h4bvZhJIEzhwYta4UD9WTImr0B7B ZAzWYuAe0J41hONdRAPZHOI7+o5+HNbJiBsWc4UwcqbOVCDLeg2iZdIlnjvpQ06P LkqCp2jE4T4YBH7Mp74em2l+WBlAFSoG8g5r0i6f/15nYmF4PTt3mOn6vKBgJ4pI vzU9U/Pr0uHVYT99aiX4EZrkh0yzR3EOAC/7EQkG5XuXDaEFkHZfgUfZaQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNayvLQqbX/WPU8KxZPp+Ac2LzIbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzNlOGQ3 NS04MGVjLTQ0YjgtYjJhNC1lZmQyODkyYjZlYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvM2U4ZDc1 LTgwZWMtNDRiOC1iMmE0LWVmZDI4OTJiNmViZi8xLzFySzh0Q3B0ZjlZOVR3ckZr LW40QnpZdk1ocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEsG1wAwQEsHJwAwQCuVkMMA0EAgACMAcDBQMq Bc+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRNDANBgkqhkiG9w0BAQsFAAOC AQEAZPTjvDiYIflMeIbnSH5GEPp+s3mLcvTlIsUXi4V9Um/shbB2f3Sv6H6C3688 gvlSQx+Nw+fBewsI3gG55TcWjAAhaEAY1zSJsLeZ8u1/82MIHYbR+rEdKQjTIzHJ aWiwtz5R5oqCv1VxPW+IUXP1ky6PcWA3Wlu8dpjq4S87+bQzd8wir7ZC4OaLa93E LvolNjdRT8cokSwwPqi4kIdhlz5SJ0akwtCwz8ltOqE3FyBIRaWE6uHJ4m8w7071 6uIALGrrFx30jPrrKRL4F9ahRUugoUnxRKFWvz2Y2oRVT8msO/DfyLbj8z6mgPat yNWNL00FLms/+ZHFUcN7m4qWjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:46 2026 by rpki-client