This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer File: h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer (raw, json) Hash identifier: DoDsO0YZ3G4x8VJpGnitJ7m/sj8yuP3fvTeVbIpaYpY= Subject key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC1F5FAF0F0F18A695850F993ABF4BFAE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:01:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57653 IP: 45.149.241.0/24 IP: 93.123.74.0/23 IP: 94.156.96.0/24 IP: 94.156.186.0/24 IP: 109.69.232.0/21 IP: 185.191.84.0/22 IP: 2a00:1ba8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:f5:fa:f0:f0:f1:8a:69:58:50:f9:93:ab:f4:bf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 14:01:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8751759bb92cba5520536945ed1b3fa5ad151b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9d:78:9e:93:4b:7e:a3:6c:ca:60:59:cc:81: 94:31:82:83:51:d6:14:93:ae:03:35:d9:09:23:f8: 18:eb:52:90:4a:df:00:11:e7:ab:2b:5d:79:dd:7d: 48:88:39:de:5c:7b:71:5c:5d:1b:47:ac:c6:df:04: 8b:29:d6:02:3b:62:2d:8d:78:4f:45:d4:e5:70:2e: b1:69:20:6d:ee:ea:53:24:08:68:50:5d:ef:c5:5b: ae:68:67:83:b5:ae:cb:91:66:cb:61:e0:eb:c6:47: d0:e4:65:00:87:a5:38:8b:b0:12:b4:97:b7:27:7c: 06:9b:ec:20:fa:fa:79:3b:b9:7f:71:04:d8:b4:33: 9f:1b:31:1e:9e:4e:31:d9:85:9a:7d:54:e5:a9:4e: 9d:15:3e:72:67:b4:f0:9e:43:da:94:87:29:08:4c: 36:a0:03:72:fb:42:55:3e:ec:e9:45:b3:22:b7:d7: ac:a1:49:be:a2:3f:14:b8:b3:2d:97:af:15:44:ee: 05:b7:9b:69:b4:36:cd:79:24:6e:1f:b2:31:71:af: 5f:1e:67:b2:33:f7:23:d2:0b:8d:9e:92:b6:fe:b6: 75:c4:3c:ea:a8:b4:8e:e1:95:86:57:32:99:62:5c: 19:1e:46:aa:fc:a0:10:2d:58:c0:00:9d:b7:ba:87: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.241.0/24 93.123.74.0/23 94.156.96.0/24 94.156.186.0/24 109.69.232.0/21 185.191.84.0/22 IPv6: 2a00:1ba8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57653 Signature Algorithm: sha256WithRSAEncryption 4d:70:80:14:09:4e:25:20:66:15:7d:85:83:dd:b6:6c:b2:da: 2c:ca:65:02:96:5c:59:4e:eb:fe:1c:17:4d:28:8c:15:5c:de: 0b:9e:2b:32:bc:7e:f3:fd:59:1d:c4:ab:0a:fc:5b:64:2c:99: c1:0b:02:8c:23:b6:e1:34:dc:5c:ce:17:2a:0f:8b:be:6b:29: 16:a8:7b:96:e6:aa:0c:8d:6a:c8:9a:8e:02:4f:9e:75:ca:54: 76:cf:63:d6:33:7f:80:9e:34:18:9f:4c:4e:64:8e:6e:5e:6f: dd:40:f4:db:d8:58:90:e1:b3:5e:75:05:12:1c:bc:d3:fb:04: fb:11:c4:a0:5f:ab:78:b9:7f:f8:bb:a2:b7:b4:69:01:f3:75: 76:70:a2:0e:20:45:76:79:ba:c4:6b:c9:d6:43:b3:eb:89:14: d5:cf:37:c0:7f:0d:44:5d:03:04:00:fb:be:11:02:89:2c:1a: 9e:d3:1f:23:e8:c6:2f:55:23:12:5f:48:de:c1:01:35:d5:b7: 98:f2:d9:94:23:eb:61:44:74:ff:2e:7c:e5:9f:60:c5:1f:a5: 4d:52:64:c7:34:af:3d:a4:4a:87:fb:97:bc:ec:f6:f8:40:05: db:2f:4d:64:51:95:d3:3f:b9:88:4a:ef:02:53:a5:53:2a:88: 6c:1a:ac:b2 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZvB9frw8PGKaVhQ+ZOr9L+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTQwMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzUxNzU5YmI5MmNiYTU1MjA1MzY5NDVlZDFiM2ZhNWFkMTUxYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z14npNLfqNsymBZzIGUMYKDUdYU k64DNdkJI/gY61KQSt8AEeerK1153X1IiDneXHtxXF0bR6zG3wSLKdYCO2ItjXhP RdTlcC6xaSBt7upTJAhoUF3vxVuuaGeDta7LkWbLYeDrxkfQ5GUAh6U4i7AStJe3 J3wGm+wg+vp5O7l/cQTYtDOfGzEenk4x2YWafVTlqU6dFT5yZ7TwnkPalIcpCEw2 oANy+0JVPuzpRbMit9esoUm+oj8UuLMtl68VRO4Ft5tptDbNeSRuH7Ixca9fHmey M/cj0guNnpK2/rZ1xDzqqLSO4ZWGVzKZYlwZHkaq/KAQLVjAAJ23uoe97QIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFIdRdZu5LLpVIFNpRe0bP6WtFRtlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzg2MjUy NS1mNjNmLTQ2NTMtYTNhNi1lODlmNTFjYTY4NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvODYyNTI1 LWY2M2YtNDY1My1hM2E2LWU4OWY1MWNhNjg0MC8xL2gxRjFtN2tzdWxVZ1UybEY3 UnNfcGEwVkcyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQALZXxAwQBXXtKAwQAXpxgAwQAXpy6AwQDbUXo AwQCub9UMA0EAgACMAcDBQAqABuoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDh NTANBgkqhkiG9w0BAQsFAAOCAQEATXCAFAlOJSBmFX2Fg922bLLaLMplApZcWU7r /hwXTSiMFVzeC54rMrx+8/1ZHcSrCvxbZCyZwQsCjCO24TTcXM4XKg+LvmspFqh7 luaqDI1qyJqOAk+edcpUds9j1jN/gJ40GJ9MTmSObl5v3UD029hYkOGzXnUFEhy8 0/sE+xHEoF+reLl/+Luit7RpAfN1dnCiDiBFdnm6xGvJ1kOz64kU1c83wH8NRF0D BAD7vhECiSwantMfI+jGL1UjEl9I3sEBNdW3mPLZlCPrYUR0/y585Z9gxR+lTVJk xzSvPaRKh/uXvOz2+EAF2y9NZFGV0z+5iErvAlOlUyqIbBqssg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:11 2026 by rpki-client