This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer File: c1AO60fC8TVxh2oZZjU3-LY2qA8.cer (raw, json) Hash identifier: 7AchOxSejmfE23m6GhY1Dh1JFZQNa0h3W2bWVrbqgNE= Subject key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC2D8946F0E8DCE5E62B495BC8FC47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.238.120.0/21 IP: 2a02:48e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2d:89:46:f0:e8:dc:e5:e6:2b:49:5b:c8:fc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73500eeb47c2f13571876a19663537f8b636a80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:45:23:29:19:57:15:ba:64:32:94:30:bb:86: 9a:68:3d:08:4e:9e:07:f0:44:2d:27:bb:33:22:27: 0f:8b:c6:6b:e2:35:ee:16:2f:90:d2:11:80:ec:30: ee:65:35:8c:bb:80:78:c9:a9:a8:f3:db:b7:8c:03: 5b:c4:53:f0:a3:c9:41:e9:cf:71:39:30:44:f0:51: 7d:10:7b:17:f7:9e:6d:59:97:5f:27:ef:7b:af:74: f0:66:d4:02:02:e0:ae:ee:c4:d0:4b:ec:76:ce:2d: 4a:cd:2e:36:37:df:20:f2:96:ff:80:73:b0:85:3a: 88:e5:ec:e8:79:6d:f4:c4:36:75:81:1f:79:fe:93: be:14:08:16:c0:eb:82:37:c8:01:13:53:31:79:a5: 5a:9d:6d:33:14:73:df:5b:6d:4a:7a:2c:a6:6a:e2: 7d:01:c2:0a:75:a9:98:51:b3:9a:72:5e:b5:16:1f: da:75:7f:a7:f0:5d:be:02:93:7c:b1:24:99:f1:52: bb:18:54:1a:91:bf:66:b0:30:6c:2b:bf:93:dd:e6: 4c:e5:99:9b:11:12:24:83:f1:32:ae:49:90:3b:b0: 64:1b:eb:2a:8c:1e:bf:66:e6:86:c5:2f:f6:e7:1b: 5e:98:92:42:7e:08:8d:17:41:cc:a5:6a:65:ec:04: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.120.0/21 IPv6: 2a02:48e0::/32 Signature Algorithm: sha256WithRSAEncryption 42:c1:b7:0b:47:ea:9c:30:e5:ff:09:b6:f1:3e:e7:91:4e:1d: 34:24:71:0a:cd:49:57:c3:22:83:93:b9:01:d1:c4:88:b7:66: fc:a0:b4:2a:96:3e:68:0f:59:49:6f:95:c2:05:f7:85:ae:dd: 68:57:ed:00:c1:30:d6:f6:a8:16:1d:c3:64:89:49:6f:e8:cd: 21:ee:2d:5a:c1:c5:db:ef:a1:62:92:fd:a9:ce:30:c8:d6:57: 63:68:c5:4a:cc:09:d0:23:7c:48:3a:b0:97:59:3a:f6:48:c4: 5a:38:cd:6a:7c:06:02:66:54:a8:88:78:24:47:7f:3a:af:b8: cf:6d:cc:6d:6e:55:e3:b7:fa:04:d4:fe:10:ab:61:cb:65:f7: b8:7d:3e:6d:7e:57:4f:67:fb:0c:89:2c:61:b8:b2:fb:f4:27: 9a:47:f5:89:f4:e6:32:15:6f:ef:6b:29:d9:ec:d6:6b:85:f8: 79:34:ff:68:87:47:41:a3:26:95:18:94:cd:83:df:d2:b5:46: ab:43:5a:66:b1:b4:6b:05:ab:cf:ba:92:8f:fc:9c:3c:75:f6: 95:ae:2b:39:d5:ae:11:93:2b:db:bb:79:cd:f7:b9:e7:f4:38: 45:bb:80:15:b3:4a:cf:e3:37:47:86:71:6a:16:0d:18:63:78: 2a:8e:e6:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57C2JRvDo3OXmK0lbyPxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzUwMGVlYjQ3YzJmMTM1NzE4NzZhMTk2NjM1MzdmOGI2MzZhODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EUjKRlXFbpkMpQwu4aaaD0ITp4H 8EQtJ7szIicPi8Zr4jXuFi+Q0hGA7DDuZTWMu4B4yamo89u3jANbxFPwo8lB6c9x OTBE8FF9EHsX955tWZdfJ+97r3TwZtQCAuCu7sTQS+x2zi1KzS42N98g8pb/gHOw hTqI5ezoeW30xDZ1gR95/pO+FAgWwOuCN8gBE1MxeaVanW0zFHPfW21KeiymauJ9 AcIKdamYUbOacl61Fh/adX+n8F2+ApN8sSSZ8VK7GFQakb9msDBsK7+T3eZM5Zmb ERIkg/EyrkmQO7BkG+sqjB6/ZuaGxS/25xtemJJCfgiNF0HMpWpl7ASbPwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHNQDutHwvE1cYdqGWY1N/i2NqgPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2MwOGFi Yi00NTg2LTQyNTQtOWUyMC1jMDc4MWNhODA5MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvYzA4YWJi LTQ1ODYtNDI1NC05ZTIwLWMwNzgxY2E4MDkxYy8xL2MxQU82MGZDOFRWeGgyb1pa alUzLUxZMnFBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDV+54MA0EAgACMAcDBQAqAkjgMA0GCSqGSIb3 DQEBCwUAA4IBAQBCwbcLR+qcMOX/CbbxPueRTh00JHEKzUlXwyKDk7kB0cSIt2b8 oLQqlj5oD1lJb5XCBfeFrt1oV+0AwTDW9qgWHcNkiUlv6M0h7i1awcXb76Fikv2p zjDI1ldjaMVKzAnQI3xIOrCXWTr2SMRaOM1qfAYCZlSoiHgkR386r7jPbcxtblXj t/oE1P4Qq2HLZfe4fT5tfldPZ/sMiSxhuLL79CeaR/WJ9OYyFW/vaynZ7NZrhfh5 NP9oh0dBoyaVGJTNg9/StUarQ1pmsbRrBavPupKP/Jw8dfaVris51a4Rkyvbu3nN 97nn9DhFu4AVs0rP4zdHhnFqFg0YY3gqjuZX -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:56 2026 by rpki-client