This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.cer (raw, json) Hash identifier: 5IajIhCT9Wha4ohfoTbH//hd6OC1dSVNE22v2PrF3lI= Subject key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DD3DC83BB1ED49D263E1440D49D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213383 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dd:3d:c8:3b:b1:ed:49:d2:63:e1:44:0d:49:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6cefca0c6cd9476d33015603872d261bf2b3536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:4f:13:32:e1:37:20:3d:6c:e2:de:e6:f5: d5:5b:86:1b:59:97:bf:0d:cb:98:73:2a:5c:53:3a: c4:a1:04:b6:8b:b5:34:85:db:75:ef:12:36:1c:27: 56:01:54:74:15:84:d6:6f:ca:72:78:1d:90:b6:8f: 4b:20:87:b4:ad:91:86:9e:97:ca:b0:f8:38:0a:7e: 33:88:41:8e:d2:78:53:b1:c8:30:d8:ef:cc:d3:9c: f5:7a:e6:4b:76:69:14:e7:ba:28:fa:62:32:78:07: 64:c3:8e:ac:1e:aa:7a:26:21:de:4f:cc:10:bc:4e: e7:23:df:41:a8:47:68:0a:34:7e:1a:4a:d1:62:d1: a5:dd:6b:cb:42:2f:37:43:5a:90:73:65:7d:76:67: da:05:34:50:28:84:2c:16:f6:81:4f:68:e3:b9:0d: 75:f5:5f:5a:79:e8:62:75:9e:18:d2:9f:97:5a:59: ff:68:1e:16:32:8b:2e:09:6f:5f:66:2e:66:75:57: 61:bc:c2:46:de:2b:ef:14:bb:38:47:b7:6e:a3:fa: b2:fc:c2:6d:1b:c5:31:e7:40:34:b8:35:b5:d8:dc: 2a:0f:51:66:dd:f5:16:ca:2a:96:e7:b9:ca:71:43: b1:6b:6b:8a:c6:f5:df:6a:55:83:ef:12:bd:47:99: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213383 Signature Algorithm: sha256WithRSAEncryption 4b:1e:3b:79:be:94:ea:31:0c:89:e6:dd:df:6f:f7:b7:42:47: c5:e6:d6:94:c1:37:ed:5e:9d:1d:3a:ad:d8:48:3e:ba:aa:e4: ed:80:bd:a8:47:60:25:b1:7a:e6:de:a5:5f:be:b9:e8:6e:5a: 72:20:ae:63:c1:c0:7d:ff:3a:4d:ce:11:6d:98:fc:3c:97:32: a8:f3:41:ca:08:12:35:b6:7d:10:2f:cf:e2:e4:75:c3:de:6e: 55:f9:c8:84:4b:81:2c:fa:e7:21:0b:d2:52:2a:a5:33:cc:a9: 3d:ec:a3:7c:1f:6d:ad:9f:e2:ea:1d:06:07:af:57:21:0c:14: 7e:19:ce:83:46:27:4a:a6:af:64:a2:3b:03:df:e5:d6:2b:d4: 83:bb:1c:7d:5b:4f:af:7a:da:e9:f4:07:74:8c:dc:fd:ca:ad: 44:9e:10:63:76:e1:9b:e2:48:86:91:d9:52:5d:f6:9c:cd:88: 61:ca:36:ac:3d:b3:9b:74:28:73:c7:66:8f:36:35:d2:3c:3e: e3:87:13:1b:da:96:fc:35:84:9f:ab:70:48:6c:22:cb:f0:d7: f1:c9:69:bd:7d:d8:ec:01:c0:16:bf:21:cc:83:2a:48:4b:cf: 43:44:cc:e7:55:43:ca:8a:db:0c:a6:ad:89:1b:31:09:b0:fa: 5a:a8:42:89 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WN09yDux7UnSY+FEDUnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmNlZmNhMGM2Y2Q5NDc2ZDMzMDE1NjAzODcyZDI2MWJmMmIzNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OJPEzLhNyA9bOLe5vXVW4YbWZe/ DcuYcypcUzrEoQS2i7U0hdt17xI2HCdWAVR0FYTWb8pyeB2Qto9LIIe0rZGGnpfK sPg4Cn4ziEGO0nhTscgw2O/M05z1euZLdmkU57oo+mIyeAdkw46sHqp6JiHeT8wQ vE7nI99BqEdoCjR+GkrRYtGl3WvLQi83Q1qQc2V9dmfaBTRQKIQsFvaBT2jjuQ11 9V9aeehidZ4Y0p+XWln/aB4WMosuCW9fZi5mdVdhvMJG3ivvFLs4R7duo/qy/MJt G8Ux50A0uDW12NwqD1Fm3fUWyiqW57nKcUOxa2uKxvXfalWD7xK9R5mgPwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNbO/KDGzZR20zAVYDhy0mG/KzU2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzE5NDJi Yi1iMzE0LTRlMTEtOThiMi02NjA4YjYxYTlhYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMTk0MmJi LWIzMTQtNGUxMS05OGIyLTY2MDhiNjFhOWFhYS8xLzFzNzhvTWJObEhiVE1CVmdP SExTWWI4ck5UWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBhzANBgkqhkiG9w0BAQsFAAOCAQEASx47eb6U6jEM iebd32/3t0JHxebWlME37V6dHTqt2Eg+uqrk7YC9qEdgJbF65t6lX7656G5aciCu Y8HAff86Tc4RbZj8PJcyqPNByggSNbZ9EC/P4uR1w95uVfnIhEuBLPrnIQvSUiql M8ypPeyjfB9trZ/i6h0GB69XIQwUfhnOg0YnSqavZKI7A9/l1ivUg7scfVtPr3ra 6fQHdIzc/cqtRJ4QY3bhm+JIhpHZUl32nM2IYco2rD2zm3Qoc8dmjzY10jw+44cT G9qW/DWEn6twSGwiy/DX8clpvX3Y7AHAFr8hzIMqSEvPQ0TM51VDyorbDKatiRsx CbD6WqhCiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:16 2026 by rpki-client