This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer (raw, json) Hash identifier: qVZ9JFvpbVOfigwIW3Uy7ZcbErhlEjA6R8rsaw66tOw= Subject key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3863345B590B0C17D04BB3EEB35349 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204738 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:63:34:5b:59:0b:0c:17:d0:4b:b3:ee:b3:53:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e1:67:47:3c:e4:80:a2:39:d0:9f:f6:b2:80: b7:84:cb:f8:80:a2:8c:26:65:fb:40:2d:58:15:07: e0:7e:ce:4f:59:01:db:87:ce:59:47:94:bc:b7:d6: ee:cb:8c:12:0d:33:26:11:05:f3:f1:94:c7:45:f1: 25:96:52:84:1d:85:d9:42:e0:48:b5:7f:0d:fc:7c: 2a:bd:28:64:a1:08:12:f9:56:ab:08:69:47:28:95: 1a:81:a4:ab:50:c5:4b:cf:08:bd:0b:27:cb:89:a3: 69:a3:7e:a3:c8:c3:ec:c2:1f:32:cf:06:ac:ae:39: d9:06:8c:a4:ee:c8:ec:42:de:50:bd:e1:be:5a:d8: ba:26:d8:95:23:11:f0:3e:0c:51:2e:b9:92:9e:09: 78:f6:71:ec:14:ee:25:04:5b:c7:78:3a:db:aa:89: cd:92:a1:dd:01:c3:73:2d:07:22:54:ed:7c:c3:d8: 04:b6:8f:98:9e:01:b8:3e:1d:26:c7:df:e9:57:b3: 6b:42:65:ae:ea:44:87:3f:c2:1c:27:28:6e:24:5e: 21:df:e3:7e:a0:3a:7e:ba:f5:bc:4f:c5:72:81:8c: 9c:40:d4:ed:a8:c4:00:14:75:46:58:de:de:18:71: 37:1f:00:c9:b9:0f:31:e4:bc:ec:48:c3:19:57:21: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204738 Signature Algorithm: sha256WithRSAEncryption 54:2b:15:49:c3:9d:b3:ab:f4:19:a2:63:07:92:93:fd:d7:a3: fd:78:86:7b:ef:9b:fe:8f:d4:9e:2e:41:02:fc:bb:87:1e:68: b1:d1:fa:45:b4:38:a7:2c:a4:09:b8:05:0b:09:be:08:14:2f: 99:73:ef:08:dd:fe:48:b3:f7:8a:33:75:05:7d:b8:59:a8:94: 7b:0a:d1:28:84:90:0e:14:6a:d0:1e:ff:6d:97:f8:b3:20:d2: e2:5c:78:07:1e:00:a6:ec:b6:95:e9:04:73:35:95:99:78:98: fb:77:96:19:97:ce:7f:c2:a8:43:a4:4c:75:66:06:98:a3:3b: 2a:98:96:2d:1a:9e:9e:b9:b6:cf:2e:52:c0:96:92:52:15:e4: f7:92:fb:b0:9a:c2:2d:4e:28:4f:17:17:8e:27:e2:a0:e4:31: 4d:19:14:62:82:1d:b4:64:f3:74:b3:b8:71:b7:b8:32:34:3d: 64:7c:e9:ec:ba:93:92:3e:77:78:7b:ef:8a:21:79:d5:4b:3c: cb:0b:7e:3b:ef:e9:b9:13:d2:5b:3f:1d:32:c4:2f:9e:70:b5: 54:09:eb:98:eb:58:06:9c:87:16:25:9e:ba:2e:f2:98:bf:48: 72:27:ca:1c:2c:b4:b4:7f:66:b7:9f:c9:68:82:02:c5:79:a6: d3:f4:6b:58 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OGM0W1kLDBfQS7Pus1NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzU2NTVkYzY3NzlkMDk1ZmNiMDhiNjFhYmViODZiMGNkOTlhNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+FnRzzkgKI50J/2soC3hMv4gKKM JmX7QC1YFQfgfs5PWQHbh85ZR5S8t9buy4wSDTMmEQXz8ZTHRfElllKEHYXZQuBI tX8N/HwqvShkoQgS+VarCGlHKJUagaSrUMVLzwi9CyfLiaNpo36jyMPswh8yzwas rjnZBoyk7sjsQt5QveG+Wti6JtiVIxHwPgxRLrmSngl49nHsFO4lBFvHeDrbqonN kqHdAcNzLQciVO18w9gEto+YngG4Ph0mx9/pV7NrQmWu6kSHP8IcJyhuJF4h3+N+ oDp+uvW8T8VygYycQNTtqMQAFHVGWN7eGHE3HwDJuQ8x5LzsSMMZVyHArwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHNWVdxnedCV/LCLYavrhrDNmaeMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2NjOGE1 My0wMmQ5LTRhMWYtOTA3ZS0zYjg2YTNkMDBmZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvY2M4YTUz LTAyZDktNGExZi05MDdlLTNiODZhM2QwMGZlOS8xL2MxWlYzR2Q1MEpYOHNJdGhx LXVHc00yWnA0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfwjANBgkqhkiG9w0BAQsFAAOCAQEAVCsVScOds6v0 GaJjB5KT/dej/XiGe++b/o/Uni5BAvy7hx5osdH6RbQ4pyykCbgFCwm+CBQvmXPv CN3+SLP3ijN1BX24WaiUewrRKISQDhRq0B7/bZf4syDS4lx4Bx4Apuy2lekEczWV mXiY+3eWGZfOf8KoQ6RMdWYGmKM7KpiWLRqenrm2zy5SwJaSUhXk95L7sJrCLU4o TxcXjifioOQxTRkUYoIdtGTzdLO4cbe4MjQ9ZHzp7LqTkj53eHvviiF51Us8ywt+ O+/puRPSWz8dMsQvnnC1VAnrmOtYBpyHFiWeui7ymL9IcifKHCy0tH9mt5/JaIIC xXmm0/RrWA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:53 2026 by rpki-client