This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.cer (raw, json) Hash identifier: ew/NsB6qHDj+UfoPi6CLyebY71rtd98rHVo7YzqrtWo= Subject key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A330B0260EF6D2CBFFB90DECB2595B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.197.164.0/22 IP: 2a0a:7bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:b0:26:0e:f6:d2:cb:ff:b9:0d:ec:b2:59:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:2b:98:fe:db:f7:b5:d4:d0:a3:0d:40:94: d5:dd:24:0a:97:d8:3e:9f:28:93:80:26:c7:bc:f8: 9d:a7:19:54:a8:50:d7:a0:1e:dd:a7:1e:28:c8:0f: 4a:3c:e6:ed:fa:3c:3f:ab:f7:f6:2d:80:c5:e3:63: a4:11:cc:57:76:08:63:1f:ca:ff:fe:8c:d6:40:d6: 26:53:61:4c:45:b6:0b:74:25:19:58:37:59:c1:db: ca:96:7e:a5:17:d6:0a:cb:4c:81:93:f6:01:1b:34: 22:3a:32:19:a0:25:10:f4:a8:62:69:17:a8:53:23: 5a:bf:7b:73:ea:36:9d:67:45:a1:c1:97:d1:b5:65: a4:94:31:91:97:cc:ef:21:91:86:f7:df:ec:7b:37: 94:6d:04:d8:83:0e:dc:d9:4a:58:8a:de:d2:65:6d: 0b:2f:1c:f1:e5:36:5f:67:cc:0a:d7:45:4a:65:78: 21:9d:98:87:e4:20:92:af:a4:af:48:8e:04:89:11: 32:e5:3c:b1:2f:c7:02:a8:51:26:3a:61:0d:dc:81: a0:aa:ba:ee:ef:23:f2:4d:b5:0f:dc:34:be:12:97: 30:9a:e9:ba:69:1f:b7:71:fa:46:00:f2:fb:d0:d5: f4:78:15:a3:a2:21:1d:7f:8d:4a:12:6f:32:dd:60: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.164.0/22 IPv6: 2a0a:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption a4:58:ea:bc:b0:0a:ea:07:28:0d:74:a8:5c:9a:87:c0:3a:1e: b7:04:1b:9e:31:25:b6:d2:08:79:40:10:b6:41:9d:8d:9e:e1: 04:dc:26:20:b8:d1:f3:2c:b8:f3:eb:b4:1d:a5:6a:f8:fd:40: 06:08:f2:ca:ca:69:b2:75:cb:9d:7f:db:48:cb:6c:dd:e5:0f: 87:5a:04:8f:52:8b:54:99:25:fd:08:35:07:45:e3:da:a7:a9: 1c:86:9f:66:5d:33:a0:e3:f1:f7:96:6b:bf:d7:39:e3:4f:97: 56:e6:28:74:f9:81:a9:61:91:21:8c:49:71:b7:1f:c0:c6:5b: 47:38:0b:32:1e:5c:93:1d:cd:6c:dd:47:29:82:53:22:da:32: f2:fc:db:dd:6d:ba:c4:35:ea:8e:7f:a0:0b:aa:0e:39:2d:1b: 9c:06:8d:11:b5:ac:27:aa:b3:d0:52:6f:00:b1:5a:d6:0b:7b: a2:2e:b8:36:9c:81:39:0b:ea:b7:ac:8a:c8:00:41:37:25:c2: cb:11:52:be:f6:bc:73:9b:19:d1:a0:88:8d:bf:a0:2f:97:a8: ea:00:20:f2:ad:2b:6a:34:a5:ca:ac:07:91:c7:c1:50:04:15: fa:f3:b9:0c:26:a4:10:c5:ab:a7:d8:0e:e7:c7:07:a3:7f:8c: a5:c5:59:d4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4ozCwJg720sv/uQ3ssllbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmMxYzI0NjViNGY5NzNmYjRiMGNiNjYyOGE5OGIzYjU4ODk2ZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VkrmP7b97XU0KMNQJTV3SQKl9g+ nyiTgCbHvPidpxlUqFDXoB7dpx4oyA9KPObt+jw/q/f2LYDF42OkEcxXdghjH8r/ /ozWQNYmU2FMRbYLdCUZWDdZwdvKln6lF9YKy0yBk/YBGzQiOjIZoCUQ9KhiaReo UyNav3tz6jadZ0WhwZfRtWWklDGRl8zvIZGG99/sezeUbQTYgw7c2UpYit7SZW0L Lxzx5TZfZ8wK10VKZXghnZiH5CCSr6SvSI4EiREy5TyxL8cCqFEmOmEN3IGgqrru 7yPyTbUP3DS+Epcwmum6aR+3cfpGAPL70NX0eBWjoiEdf41KEm8y3WBanQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNbBwkZbT5c/tLDLZiipiztYiW1IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2Q3MjU3 NC0yNzJhLTQwOWQtOWQzYy1lNDlhOWUwNmM3MDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZDcyNTc0 LTI3MmEtNDA5ZC05ZDNjLWU0OWE5ZTA2YzcwMC8xLzFzSENSbHRQbHotMHNNdG1L S21MTzFpSmJVZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucWkMA0EAgACMAcDBQMqCnvAMA0GCSqGSIb3 DQEBCwUAA4IBAQCkWOq8sArqBygNdKhcmofAOh63BBueMSW20gh5QBC2QZ2NnuEE 3CYguNHzLLjz67QdpWr4/UAGCPLKymmydcudf9tIy2zd5Q+HWgSPUotUmSX9CDUH RePap6kchp9mXTOg4/H3lmu/1znjT5dW5ih0+YGpYZEhjElxtx/AxltHOAsyHlyT Hc1s3UcpglMi2jLy/NvdbbrENeqOf6ALqg45LRucBo0RtawnqrPQUm8AsVrWC3ui Lrg2nIE5C+q3rIrIAEE3JcLLEVK+9rxzmxnRoIiNv6Avl6jqACDyrStqNKXKrAeR x8FQBBX687kMJqQQxaun2A7nxwejf4ylxVnU -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:31 2026 by rpki-client