This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer File: al1BD0JdNedNRW9_h7ro7ZKzyCk.cer (raw, json) Hash identifier: Fp6atbZEETYJzE1xN6Ngp5Hy4H9+WLbM0uLPawh7L0c= Subject key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B5E3218326495B3AF8FFC9CD2801 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 144.41.0.0/16 IP: 192.52.159.0 -- 192.52.160.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b5:e3:21:83:26:49:5b:3a:f8:ff:c9:cd:28:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:2f:f1:b6:4c:28:32:f2:8a:1b:23:f3:ab: 4b:bc:04:ca:2d:62:3a:bd:e4:bf:45:f0:82:19:8a: 79:75:32:0a:96:a7:ac:24:cc:bc:c7:b8:37:a1:6d: 5b:21:7a:0a:5e:b5:a9:b9:f7:59:74:88:6f:7e:72: 5a:63:3c:a4:eb:bf:39:39:36:16:3e:73:85:83:b0: b5:ac:0e:84:8c:bc:73:83:05:a5:58:46:27:1e:0d: 75:b1:fb:5c:73:41:4c:67:9f:22:c0:64:fb:f6:72: 61:6c:db:20:42:8c:c5:17:39:71:45:1f:fb:32:64: d0:94:0b:ed:d2:1b:41:9f:51:79:59:9a:73:a1:d1: 85:36:57:59:8e:b2:38:35:23:da:c1:d1:9b:ab:15: ea:21:52:3e:49:69:1d:d7:94:f4:a7:0f:72:52:0f: 9c:54:01:19:00:c0:c0:51:72:1b:86:3b:68:db:1f: 13:bc:d7:fe:a6:5a:36:ba:96:72:c9:e7:56:ba:40: 08:82:39:12:31:aa:d4:03:c4:ba:92:c7:0d:61:77: 9e:7f:1d:64:e5:e1:3d:5c:78:31:24:c3:83:e7:86: 0d:b6:a3:02:4a:61:2f:74:e4:62:b6:a2:77:4d:17: eb:12:d1:89:d0:86:a5:c4:a5:3b:42:e5:d9:e3:0c: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.41.0.0/16 192.52.159.0-192.52.160.255 Signature Algorithm: sha256WithRSAEncryption 29:59:c9:b9:5b:3f:68:4a:a1:ea:a6:df:53:e0:32:44:a4:44: de:77:c3:c2:8d:c6:4e:b3:54:3c:74:43:01:c7:30:d9:f5:7b: 90:96:a1:72:01:5f:9d:6e:36:62:cc:bd:53:00:45:4e:47:d4: 6d:7d:94:90:68:b9:ec:a6:a8:9e:17:07:ef:67:aa:b3:3d:9a: 6d:00:e2:c8:e0:88:c3:83:17:3a:22:5f:88:12:69:04:4d:49: bc:e4:65:ed:de:75:83:91:57:36:4d:98:aa:cc:c5:88:43:14: 6a:9f:8c:f9:e6:a6:c3:b6:bd:03:b2:72:4b:81:2c:93:60:ad: 1e:aa:38:23:54:ab:19:78:e3:cc:66:12:d4:d7:39:df:d6:66: d4:a9:80:bf:f2:87:2c:19:c8:d1:a6:43:c8:61:49:ef:f0:28: b8:49:c9:e1:45:f9:7b:2f:78:10:e5:8e:3e:e3:6b:5b:a2:30: 78:d1:19:05:a9:84:7e:cb:98:9b:72:9c:3b:1e:8e:31:5f:cc: 31:ce:84:63:0d:a5:9e:b2:ec:c1:4a:07:70:cf:2e:60:e2:fb: 6b:dd:72:9f:25:b3:d0:f7:c8:3b:c7:e1:81:b3:f7:43:ca:49: 7c:fb:e4:6e:5b:b3:18:4e:c1:0c:de:38:08:bc:02:c1:13:fb: 1f:fd:e7:e0 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt+prXjIYMmSVs6+P/JzSgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTVkNDEwZjQyNWQzNWU3NGQ0NTZmN2Y4N2JhZThlZDkyYjNjODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NIv8bZMKDLyihsj86tLvATKLWI6 veS/RfCCGYp5dTIKlqesJMy8x7g3oW1bIXoKXrWpufdZdIhvfnJaYzyk6785OTYW PnOFg7C1rA6EjLxzgwWlWEYnHg11sftcc0FMZ58iwGT79nJhbNsgQozFFzlxRR/7 MmTQlAvt0htBn1F5WZpzodGFNldZjrI4NSPawdGbqxXqIVI+SWkd15T0pw9yUg+c VAEZAMDAUXIbhjto2x8TvNf+plo2upZyyedWukAIgjkSMarUA8S6kscNYXeefx1k 5eE9XHgxJMOD54YNtqMCSmEvdORitqJ3TRfrEtGJ0IalxKU7QuXZ4wwRywIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2Q1ZjE0 Zi0yNzA1LTQyZWMtOTAwZi02OTM0Y2FmYjZiY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZDVmMTRm LTI3MDUtNDJlYy05MDBmLTY5MzRjYWZiNmJjZC8xL2FsMUJEMEpkTmVkTlJXOV9o N3JvN1pLenlDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUF BwEHAQH/BB0wGzAZBAIAATATAwMAkCkwDAMEAMA0nwMEAMA0oDANBgkqhkiG9w0B AQsFAAOCAQEAKVnJuVs/aEqh6qbfU+AyRKRE3nfDwo3GTrNUPHRDAccw2fV7kJah cgFfnW42Ysy9UwBFTkfUbX2UkGi57KaonhcH72eqsz2abQDiyOCIw4MXOiJfiBJp BE1JvORl7d51g5FXNk2YqszFiEMUap+M+eamw7a9A7JyS4Esk2CtHqo4I1SrGXjj zGYS1Nc539Zm1KmAv/KHLBnI0aZDyGFJ7/AouEnJ4UX5ey94EOWOPuNrW6IweNEZ BamEfsuYm3KcOx6OMV/MMc6EYw2lnrLswUoHcM8uYOL7a91ynyWz0PfIO8fhgbP3 Q8pJfPvkbluzGE7BDN44CLwCwRP7H/3n4A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:49 2026 by rpki-client