This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer (raw, json) Hash identifier: YSPLCkVc9G1fkG8p1O/tRy364RQ8QRa9cRZlTZvLhdE= Subject key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15EE292DC5ECF7976936B0BCF4B667 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.205.125.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ee:29:2d:c5:ec:f7:97:69:36:b0:bc:f4:b6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:df:99:07:8b:be:ec:75:f3:22:2e:6d:1b: 8a:e4:67:57:73:c1:66:7e:1b:c0:bc:34:4e:a7:cd: 7d:30:23:53:74:cf:21:c1:bf:5e:05:26:5e:df:32: c1:ff:21:05:97:8b:00:60:59:30:04:3f:70:e0:5f: 17:80:70:81:cc:3b:20:a8:f6:e3:f3:d3:1b:80:07: 83:09:b4:fc:42:d4:5f:e7:ba:0c:15:16:25:5e:c4: 43:c9:5f:ee:4f:4b:ba:32:a4:a9:c9:6e:96:2c:10: a4:98:e0:f6:1e:ef:46:a6:61:81:57:87:4c:50:ab: cf:98:92:43:38:b2:dc:94:20:ab:38:0b:f7:74:14: 2e:29:1c:c2:56:36:54:e9:a9:b0:ca:09:73:b5:cd: 91:55:8c:5c:a7:dd:6a:7a:c1:77:74:6a:85:f9:1d: b3:fd:99:c7:b2:59:41:db:48:20:7f:0f:d2:44:08: bd:2f:23:9e:52:7e:3d:07:c2:7d:af:f8:9a:fe:6f: 5c:9d:cd:2a:7e:48:ee:cd:b0:c3:bd:9f:e3:44:11: 38:a6:89:41:d7:f1:6d:22:bc:d6:e9:24:12:e6:42: 22:3c:6a:50:5a:40:44:e3:36:b3:af:87:ba:7a:74: 27:40:88:75:07:68:4f:96:06:61:94:31:fc:5c:59: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.125.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1e:d5:b1:fa:b4:28:d6:1a:f2:59:ba:cb:aa:7f:b9:74:7f: 46:0b:f1:3f:07:04:ba:3a:39:5e:0b:9c:f3:75:ed:e6:c1:40: c9:91:39:a1:2a:51:00:18:bc:44:03:39:34:c5:ea:c9:5d:f0: 5d:ce:b1:cf:28:89:e5:09:5b:83:62:6a:c7:57:6d:9f:1b:11: c5:d2:d8:21:81:18:69:2b:b4:74:19:f5:fd:13:3c:04:5f:af: 1b:a1:9b:f8:ff:b6:1e:a6:6e:5c:66:0e:3d:b2:20:79:c3:88: 97:ab:66:53:22:73:5e:a3:34:dc:69:4f:95:60:94:c4:be:2e: 49:d1:21:94:45:22:dd:d0:8e:ca:56:0a:2e:73:82:33:fa:34: 76:32:05:34:f6:fd:8f:ab:a1:0c:4f:d4:29:c3:17:c4:fe:cf: c3:1f:9d:6a:86:15:43:d4:3b:ff:2b:e7:de:ae:4b:a0:5c:78: 71:32:62:13:55:5d:25:1f:41:39:c2:22:09:34:1c:68:93:c1: fd:1e:61:d9:b0:1e:d5:2f:83:a4:1f:a3:89:4f:31:65:a1:a3: 49:8b:10:e3:d2:fa:2c:61:9a:ae:5c:24:d8:64:7b:7a:d1:67: 6a:74:ba:ed:84:9a:e2:df:cf:43:19:43:67:35:10:47:30:55: 71:bb:af:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/Fe4pLcXs95dpNrC89LZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjU4YmMwODY0MTJmNGQyYzU0ZmEwNzAyZDkyY2UyNTQ5NmNlNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL3fmQeLvux18yIubRuK5GdXc8Fm fhvAvDROp819MCNTdM8hwb9eBSZe3zLB/yEFl4sAYFkwBD9w4F8XgHCBzDsgqPbj 89MbgAeDCbT8QtRf57oMFRYlXsRDyV/uT0u6MqSpyW6WLBCkmOD2Hu9GpmGBV4dM UKvPmJJDOLLclCCrOAv3dBQuKRzCVjZU6amwyglztc2RVYxcp91qesF3dGqF+R2z /ZnHsllB20ggfw/SRAi9LyOeUn49B8J9r/ia/m9cnc0qfkjuzbDDvZ/jRBE4polB 1/FtIrzW6SQS5kIiPGpQWkBE4zazr4e6enQnQIh1B2hPlgZhlDH8XFnt6wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH9YvAhkEvTSxU+gcC2SziVJbOR5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzUzMDkz My01OTE1LTRmZjItYjFmOS01MDEwZDA1Zjk5YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvNTMwOTMz LTU5MTUtNGZmMi1iMWY5LTUwMTBkMDVmOTlhOC8xL2YxaThDR1FTOU5MRlQ2QndM WkxPSlVsczVIay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW819MA0GCSqGSIb3DQEBCwUAA4IBAQAAHtWx +rQo1hryWbrLqn+5dH9GC/E/BwS6OjleC5zzde3mwUDJkTmhKlEAGLxEAzk0xerJ XfBdzrHPKInlCVuDYmrHV22fGxHF0tghgRhpK7R0GfX9EzwEX68boZv4/7Yepm5c Zg49siB5w4iXq2ZTInNeozTcaU+VYJTEvi5J0SGURSLd0I7KVgouc4Iz+jR2MgU0 9v2Pq6EMT9QpwxfE/s/DH51qhhVD1Dv/K+ferkugXHhxMmITVV0lH0E5wiIJNBxo k8H9HmHZsB7VL4OkH6OJTzFloaNJixDj0vosYZquXCTYZHt60WdqdLrthJri389D GUNnNRBHMFVxu6+E -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:32 2026 by rpki-client