This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer (raw, json) Hash identifier: l8bpzEOfqoeA7U7aYAnoP93vvKXHLjDTQwUtynHg390= Subject key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB042059F138CE14A055E39D6A6CB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35700 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:04:20:59:f1:38:ce:14:a0:55:e3:9d:6a:6c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:75:00:3d:49:aa:80:8e:0f:b7:b0:a4:d1: 1e:98:2a:3e:ab:0e:9f:b0:8d:f6:6c:d9:5a:97:d5: c6:9b:d3:fe:bb:68:ee:bb:29:bc:35:1f:3b:9d:42: 28:b0:1c:6c:d9:85:71:a1:fa:17:d1:12:51:80:f3: 59:29:81:a5:53:c2:d2:ae:70:e8:f5:c5:32:8f:82: d4:23:b2:1e:bc:c0:e7:84:a1:ee:ef:68:01:c5:5e: ee:d8:7d:b8:95:ac:a8:2b:e3:34:14:7a:6d:7f:33: cd:74:8a:13:f7:5d:d6:40:8c:19:aa:66:81:57:bf: 9c:a7:21:f7:0f:82:b5:17:bf:87:74:fa:46:d6:9b: d4:e0:43:15:f6:78:e7:16:4e:24:2f:5c:10:28:39: 3c:d4:5e:74:a6:27:e8:5f:99:e3:e5:83:2f:03:cc: 20:cf:88:8c:e2:99:51:88:31:7e:bd:9d:04:a4:be: 51:42:78:7c:d8:50:90:4a:b5:b4:8c:d9:89:82:58: c8:9c:a6:ec:2f:8b:5e:c5:50:ce:71:fd:82:ad:44: b6:58:9c:31:91:03:e6:aa:73:68:8a:e9:46:da:8a: ba:1a:74:ae:87:91:74:de:5a:b1:1e:32:df:50:0c: e7:a6:eb:39:8c:d8:ac:5e:2a:3f:3c:c2:89:4c:53: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 35700 Signature Algorithm: sha256WithRSAEncryption 06:73:07:74:fd:0f:44:6b:62:82:83:ce:0d:da:f7:28:e2:28: 09:e2:c2:e1:25:f9:3c:79:13:a2:cf:a6:f9:e0:2a:a0:3d:1b: 81:80:13:4b:aa:26:7f:27:c1:22:10:0a:9c:8e:54:18:6b:b6: e9:37:48:03:4a:d6:b2:ac:1e:62:08:c1:40:bb:bc:e3:8e:84: 28:26:d3:e0:4e:11:ce:7c:ab:7a:42:60:9d:d4:1a:3b:47:f7: ec:eb:e1:75:32:66:b9:f4:53:25:8e:46:56:1f:f4:ab:6c:40: c9:10:26:15:bd:81:79:0c:db:1e:0b:dd:3d:ed:52:39:ff:0f: 6d:a0:fa:6c:74:cc:2a:f7:57:f4:91:20:9b:a5:27:18:10:00: 57:2c:65:3b:64:b2:81:63:2a:4d:3e:ac:5f:40:e5:c8:8d:16: b0:1c:18:e6:10:4a:4b:36:76:3d:d4:21:e8:4e:c1:c7:fc:a4: 46:a0:21:ad:61:20:93:bb:06:00:d5:21:a5:33:76:de:bc:37: 76:ba:be:70:82:a4:d4:dc:4a:ab:ab:71:ba:27:4a:a9:a5:e3: ad:bd:c2:09:63:5c:58:71:8d:36:36:76:34:dd:e5:7a:e2:c0: fb:4a:97:23:03:1a:6f:a5:29:d9:ad:87:a5:e7:c5:02:a0:4c: f6:2b:f3:f6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9ywQgWfE4zhSgVeOdamyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTRkN2ZmNDU2ZjVmZGM3ZGU2MWZhNDIwZWUwODZhNzdhMWU2MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJ1AD1JqoCOD7ewpNEemCo+qw6f sI32bNlal9XGm9P+u2juuym8NR87nUIosBxs2YVxofoX0RJRgPNZKYGlU8LSrnDo 9cUyj4LUI7IevMDnhKHu72gBxV7u2H24layoK+M0FHptfzPNdIoT913WQIwZqmaB V7+cpyH3D4K1F7+HdPpG1pvU4EMV9njnFk4kL1wQKDk81F50pifoX5nj5YMvA8wg z4iM4plRiDF+vZ0EpL5RQnh82FCQSrW0jNmJgljInKbsL4texVDOcf2CrUS2WJwx kQPmqnNoiulG2oq6GnSuh5F03lqxHjLfUAznpus5jNisXio/PMKJTFPmTQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzJhY2Ux ZS03MGRiLTRhMGEtOTNjNC0wN2IxOGU1MTg1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMmFjZTFl LTcwZGItNGEwYS05M2M0LTA3YjE4ZTUxODU2MS8xL3JrMV85RmIxX2NmZVlmcENE dUNHcDNvZVllVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCLdDANBgkqhkiG9w0BAQsFAAOCAQEABnMHdP0PRGti goPODdr3KOIoCeLC4SX5PHkTos+m+eAqoD0bgYATS6omfyfBIhAKnI5UGGu26TdI A0rWsqweYgjBQLu8446EKCbT4E4RznyrekJgndQaO0f37OvhdTJmufRTJY5GVh/0 q2xAyRAmFb2BeQzbHgvdPe1SOf8PbaD6bHTMKvdX9JEgm6UnGBAAVyxlO2SygWMq TT6sX0DlyI0WsBwY5hBKSzZ2PdQh6E7Bx/ykRqAhrWEgk7sGANUhpTN23rw3drq+ cIKk1NxKq6txuidKqaXjrb3CCWNcWHGNNjZ2NN3leuLA+0qXIwMab6Up2a2HpefF AqBM9ivz9g== -----END CERTIFICATE-----Generated at Thu Jan 29 11:30:17 2026 by rpki-client