This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer File: 1u7ifzwsXJ7FeArNorbrBAptJaE.cer (raw, json) Hash identifier: IWaqpLNSqBv2D3gMgciXlqfYMOGlCLjR6mpzITKdfOk= Subject key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC35E2DE49D1783AAD6D617FEB4DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204257 AS: 214635 IP: 141.226.184.0/21 IP: 185.109.148.0/22 IP: 212.32.54.0/24 IP: 2a06:5080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c3:5e:2d:e4:9d:17:83:aa:d6:d6:17:fe:b4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:fc:92:b4:4c:60:02:9c:de:d6:e4:ce:3e: ea:16:71:4c:21:89:1d:77:f7:32:35:74:8a:e5:b5: db:7b:01:7c:0a:0d:0c:57:d6:0b:84:5c:ef:ac:59: a6:de:92:cb:08:66:c5:f5:d2:b8:8e:89:6e:83:d9: 0c:b1:58:43:25:84:b6:38:1c:4f:65:0d:ee:9b:fd: 07:36:bb:72:4c:e9:c9:d5:bc:7b:06:08:dc:f5:76: 51:c1:d9:55:d6:75:91:6a:e7:a7:b9:55:08:f0:39: 5e:0a:b6:5d:8f:97:34:cb:38:26:90:5a:f4:f7:5e: cb:95:8f:aa:e1:d6:24:ed:f2:e6:90:94:e4:c6:24: b1:d7:ff:da:90:5a:7d:35:9b:e3:95:99:c1:8c:d8: 03:74:0f:80:ff:d2:5e:92:f6:fe:a6:7b:fe:4b:c3: f1:d4:82:63:57:c3:30:49:9f:42:fe:48:41:81:75: 95:df:28:86:b8:8b:e7:42:5c:fa:b0:ad:3e:16:bc: 7a:74:f4:aa:58:1f:9e:8d:d3:4d:d3:de:3d:d5:c0: 70:85:b4:98:0c:04:8c:d5:c1:63:92:94:36:68:19: 62:10:d0:f8:e1:8f:94:ff:20:45:3f:a6:7c:ee:3e: ba:f0:60:e5:ea:af:38:07:40:89:be:c5:cb:d2:38: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.184.0/21 185.109.148.0/22 212.32.54.0/24 IPv6: 2a06:5080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204257 214635 Signature Algorithm: sha256WithRSAEncryption 2b:07:0d:6a:2a:9b:52:ee:1d:e1:f1:43:31:f4:da:fa:0f:a8: 5b:14:ca:3b:e1:4c:0f:ba:f5:ff:81:3e:e0:20:b0:e1:18:5e: 1b:c9:e6:10:d3:0f:27:78:5d:e9:72:66:34:55:0d:29:8d:1f: 15:c9:34:21:57:82:f8:a2:71:c8:25:92:e6:f2:e4:b1:68:03: 75:8a:c3:73:b6:9f:e0:bf:5f:58:87:44:e5:af:90:1f:15:ec: d1:87:f4:e3:f9:b4:0d:fb:d3:30:3e:ba:24:6e:08:ca:a0:e2: 1b:31:68:bd:f5:3d:64:ac:0f:3b:96:32:99:5a:7f:c7:14:72: 8e:f4:52:e5:58:8f:5f:52:80:74:f8:e4:1b:57:82:35:ff:44: c8:f9:bd:ac:79:4a:52:0d:80:fd:98:69:56:6b:ea:40:0f:0b: e7:db:ae:21:a4:a6:07:44:10:5c:0d:90:d5:5e:e5:36:8c:72: eb:4b:e0:d3:0f:42:44:90:b1:54:92:61:d6:a2:99:87:d1:5d: b8:47:c5:5a:bc:64:10:5c:20:23:b2:ca:b8:ea:0d:ba:6b:ee: 0a:4c:d1:60:2c:ab:a5:49:96:6d:28:45:08:54:12:bd:ae:e7: ef:59:4d:35:9d:d2:f5:71:6e:bc:fd:61:c2:6d:69:d8:17:43: 07:53:74:49 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt57MNeLeSdF4Oq1tYX/rTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmVlZTI3ZjNjMmM1YzllYzU3ODBhY2RhMmI2ZWIwNDBhNmQyNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiar8krRMYAKc3tbkzj7qFnFMIYkd d/cyNXSK5bXbewF8Cg0MV9YLhFzvrFmm3pLLCGbF9dK4jolug9kMsVhDJYS2OBxP ZQ3um/0HNrtyTOnJ1bx7Bgjc9XZRwdlV1nWRauenuVUI8DleCrZdj5c0yzgmkFr0 917LlY+q4dYk7fLmkJTkxiSx1//akFp9NZvjlZnBjNgDdA+A/9Jekvb+pnv+S8Px 1IJjV8MwSZ9C/khBgXWV3yiGuIvnQlz6sK0+Frx6dPSqWB+ejdNN09491cBwhbSY DASM1cFjkpQ2aBliEND44Y+U/yBFP6Z87j668GDl6q84B0CJvsXL0jioCQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFNbu4n88LFyexXgKzaK26wQKbSWhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2I4MjI4 NS05NjlmLTRjMmYtYTA0Yy03ZDNjMzM1MTQ5MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYjgyMjg1 LTk2OWYtNGMyZi1hMDRjLTdkM2MzMzUxNDkyYy8xLzF1N2lmendzWEo3RmVBck5v cmJyQkFwdEphRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDjeK4AwQCuW2UAwQA1CA2MA0EAgACMAcDBQMq BlCAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMd4QIDA0ZrMA0GCSqGSIb3DQEB CwUAA4IBAQArBw1qKptS7h3h8UMx9Nr6D6hbFMo74UwPuvX/gT7gILDhGF4byeYQ 0w8neF3pcmY0VQ0pjR8VyTQhV4L4onHIJZLm8uSxaAN1isNztp/gv19Yh0Tlr5Af FezRh/Tj+bQN+9MwProkbgjKoOIbMWi99T1krA87ljKZWn/HFHKO9FLlWI9fUoB0 +OQbV4I1/0TI+b2seUpSDYD9mGlWa+pADwvn264hpKYHRBBcDZDVXuU2jHLrS+DT D0JEkLFUkmHWopmH0V24R8VavGQQXCAjssq46g26a+4KTNFgLKulSZZtKEUIVBK9 rufvWU01ndL1cW68/WHCbWnYF0MHU3RJ -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:50 2026 by rpki-client