This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer File: t1ELZRv73wnISGqBNiAABb77SX0.cer (raw, json) Hash identifier: BNtXz4s/mi7aSj2W8WgcIEVGipdnhl26wpxrxM+invQ= Subject key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8E662BD9A91096EEAFCBEF5A1F494 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56997 IP: 2001:67c:a00::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e6:62:bd:9a:91:09:6e:ea:fc:be:f5:a1:f4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7510b651bfbdf09c8486a8136200005befb497d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:9e:72:a0:5f:7b:7c:10:37:7b:86:83:53: 8c:7a:1b:6f:51:86:89:c6:f8:a5:33:cd:7f:3b:a3: 72:95:47:17:96:4d:e0:51:96:bc:3b:8b:63:93:fd: 63:c9:6e:b1:42:25:9a:64:07:b0:ee:aa:b1:4b:5c: da:d1:18:c6:2d:48:59:0f:6b:15:59:23:a9:de:0b: ea:73:f3:ae:e6:72:25:d9:87:06:6d:db:ae:b3:29: 66:cb:49:9b:e8:88:61:91:d7:4c:55:8f:60:07:c9: 21:e1:35:57:94:b2:10:23:21:9c:7f:4e:fb:14:f9: b9:92:39:87:05:d6:fd:b0:f8:fa:95:60:9d:1c:57: cb:a3:07:37:9e:18:ee:a6:e3:da:dc:d9:72:14:e3: ed:40:2f:39:f8:ad:f9:c3:c1:2b:39:5d:ff:58:02: 20:b3:d5:17:a3:31:dc:64:d7:95:77:32:ef:5d:49: d3:28:10:62:50:99:02:28:55:d4:3a:54:1f:0e:9e: 54:e3:6a:75:58:88:d5:98:72:2c:2b:f6:e1:34:6f: a8:57:5d:d5:54:2a:cc:b0:a4:aa:d3:1d:6e:ea:f9: a2:66:ca:11:6e:7d:40:44:64:df:ef:e1:ac:e3:fb: 2e:e0:9c:34:ad:32:03:2c:4e:7b:db:26:6d:10:7a: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a00::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56997 Signature Algorithm: sha256WithRSAEncryption 6b:39:c9:c0:92:3e:e9:47:30:fc:96:0c:e3:60:fd:a9:7b:5e: 90:44:dd:e5:d9:36:a1:ce:a2:bb:e3:85:f8:9a:a3:af:c3:6b: 20:bb:c1:a1:e1:c8:1f:2d:1f:d5:23:51:72:dc:4a:bc:67:0d: 6f:78:0f:3c:40:b4:94:5e:d8:95:8d:6e:64:3f:27:5b:df:0c: 78:aa:25:1c:1b:57:a1:40:65:e7:3b:99:c0:e4:c5:39:f4:89: 8f:7e:67:e7:b2:5c:67:40:1d:7f:44:39:eb:40:64:a4:d7:e4: 37:82:6e:07:f9:c2:7e:31:ab:03:0c:de:f2:a6:dc:2e:f7:56: e2:fc:db:1c:44:6c:c6:b1:9a:56:89:fb:ed:5e:13:2d:a7:6e: 91:28:7b:98:6c:cb:85:69:77:0c:92:66:42:3d:81:8f:97:e3: 70:63:07:83:56:4f:e1:95:a2:d8:20:b5:6b:65:f2:e2:98:5f: ef:96:c9:44:ea:94:20:8b:ba:54:a4:d8:09:5e:d8:49:8c:57: 31:ef:00:b0:7f:d4:0b:18:cb:7b:ca:d0:29:37:28:83:4c:c0: 21:fc:ec:49:24:26:e5:29:42:39:48:30:e4:28:82:6d:c9:6c: 73:9c:94:37:5d:f5:0e:19:49:f3:47:17:ef:75:ce:2b:72:17: d2:34:f7:45 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yOZivZqRCW7q/L71ofSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzUxMGI2NTFiZmJkZjA5Yzg0ODZhODEzNjIwMDAwNWJlZmI0OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPeecqBfe3wQN3uGg1OMehtvUYaJ xvilM81/O6NylUcXlk3gUZa8O4tjk/1jyW6xQiWaZAew7qqxS1za0RjGLUhZD2sV WSOp3gvqc/Ou5nIl2YcGbduusylmy0mb6IhhkddMVY9gB8kh4TVXlLIQIyGcf077 FPm5kjmHBdb9sPj6lWCdHFfLowc3nhjupuPa3NlyFOPtQC85+K35w8ErOV3/WAIg s9UXozHcZNeVdzLvXUnTKBBiUJkCKFXUOlQfDp5U42p1WIjVmHIsK/bhNG+oV13V VCrMsKSq0x1u6vmiZsoRbn1ARGTf7+Gs4/su4Jw0rTIDLE572yZtEHqhDQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLdRC2Ub+98JyEhqgTYgAAW++0l9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2JmZjFj My0wMDg0LTQyYmItYmNmNy0yY2I4ODc3ZmQ5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvYmZmMWMz LTAwODQtNDJiYi1iY2Y3LTJjYjg4NzdmZDk3MC8xL3QxRUxaUnY3M3duSVNHcUJO aUFBQmI3N1NYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAoAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDepTANBgkqhkiG9w0BAQsFAAOCAQEAaznJwJI+6Ucw/JYM42D9qXtekETd 5dk2oc6iu+OF+Jqjr8NrILvBoeHIHy0f1SNRctxKvGcNb3gPPEC0lF7YlY1uZD8n W98MeKolHBtXoUBl5zuZwOTFOfSJj35n57JcZ0Adf0Q560BkpNfkN4JuB/nCfjGr Awze8qbcLvdW4vzbHERsxrGaVon77V4TLadukSh7mGzLhWl3DJJmQj2Bj5fjcGMH g1ZP4ZWi2CC1a2Xy4phf75bJROqUIIu6VKTYCV7YSYxXMe8AsH/UCxjLe8rQKTco g0zAIfzsSSQm5SlCOUgw5CiCbclsc5yUN131DhlJ80cX73XOK3IX0jT3RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:41 2026 by rpki-client