This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer (raw, json) Hash identifier: 0pJlcPkX20rmNgGMxLQ9F+470ddDJGKCnlLPsomNouk= Subject key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775940AEFC99AB514327C880748D6B6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.50.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:40:ae:fc:99:ab:51:43:27:c8:80:74:8d:6b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c2:a2:a4:d6:cb:33:9d:3a:5d:15:f8:c9:c4: 36:28:61:d3:6d:78:7a:0d:35:7b:23:b4:7d:80:f6: 8f:59:ea:df:e9:7e:33:a5:02:cf:f2:9d:aa:5e:ec: b2:bd:0b:42:14:a6:36:3d:bf:bc:d5:de:f0:05:aa: b8:4f:29:23:41:19:96:f0:58:f4:0f:a1:af:24:6e: 62:70:6e:3d:8a:4a:e9:38:a9:d3:f7:91:61:ce:76: 02:a5:c5:7c:80:69:bb:0a:62:b3:32:75:54:f6:35: cc:17:74:c4:12:45:a3:12:9b:40:ec:1b:55:0f:a2: a0:4c:ef:d6:cd:a5:d3:3d:6e:45:ee:9c:50:11:ac: eb:a2:9f:7d:f3:fb:fa:01:19:4f:93:53:03:d9:65: 73:cd:0c:2b:60:14:03:a7:73:50:cb:85:be:fe:90: cf:aa:b7:12:28:46:a5:01:bf:55:b3:d6:d4:45:67: 36:4c:dc:1b:9f:de:94:15:ad:08:42:a0:30:db:3f: f3:81:f9:a0:57:ab:ff:18:76:db:0e:d5:43:dc:54: 0e:17:bb:3b:ff:a5:dc:a2:7a:c3:3b:6d:60:7f:6c: e2:ab:3d:c5:e7:aa:99:a2:74:51:97:09:62:53:95: 39:7b:91:1b:f6:33:d4:a5:7a:df:be:36:a7:9a:c7: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.173.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:77:ec:74:a5:e6:b4:30:71:3b:3f:f2:f0:6c:93:06:96:99: 5d:63:e9:63:94:d5:13:0b:d8:97:22:c7:4e:56:4f:5d:0a:12: e8:cd:43:ad:7e:65:9d:8f:3a:e3:2c:b2:fe:6a:fa:1e:35:f7: a9:e5:7f:70:7d:56:61:cb:a9:7f:58:5d:dc:60:0a:43:8c:76: c8:13:f7:70:25:e1:69:74:59:bf:d7:ab:4a:55:4a:d1:5c:ff: f5:22:1c:03:bd:24:b8:a3:4b:f2:ee:dd:fa:90:24:f3:74:38: a7:22:f2:57:64:93:69:e1:d2:db:e0:57:9a:34:62:3d:98:dd: 11:3f:52:e8:8c:46:0d:fb:12:0c:72:bc:6f:b4:79:f8:9b:4e: 8b:03:ed:a2:3d:de:bb:02:c7:e4:be:08:79:a0:47:23:81:72: 85:3e:ba:5a:05:fe:13:48:31:aa:e2:02:b7:e6:fa:e2:73:b5: b0:f2:2e:f7:18:05:11:90:c9:de:b6:6e:4d:74:1d:b3:86:c6: 1f:dd:d2:84:4a:6d:21:d3:6c:f7:86:09:f3:87:2c:73:fc:c5: 32:e4:09:5a:d1:fc:17:e0:84:ca:33:32:b7:5a:e3:27:75:eb: 55:2a:79:e7:e0:aa:56:bd:83:a3:55:43:b1:cf:13:aa:d3:f8: 50:e9:59:d7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt3WUCu/JmrUUMnyIB0jWtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQ0ZTFlYWZhYWQzY2IwOTFmMjBlZTViZjFjMDQ4MjQ4N2MzMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8KipNbLM506XRX4ycQ2KGHTbXh6 DTV7I7R9gPaPWerf6X4zpQLP8p2qXuyyvQtCFKY2Pb+81d7wBaq4TykjQRmW8Fj0 D6GvJG5icG49ikrpOKnT95FhznYCpcV8gGm7CmKzMnVU9jXMF3TEEkWjEptA7BtV D6KgTO/WzaXTPW5F7pxQEazrop998/v6ARlPk1MD2WVzzQwrYBQDp3NQy4W+/pDP qrcSKEalAb9Vs9bURWc2TNwbn96UFa0IQqAw2z/zgfmgV6v/GHbbDtVD3FQOF7s7 /6XconrDO21gf2ziqz3F56qZonRRlwliU5U5e5Eb9jPUpXrfvjanmseRcwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPhE4er6rTywkfIO5b8cBIJIfDBuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2YzY2Ey My04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYyOWUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIz LTg2ZWMtNDBkMC1hNTIwLTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzds dnh3RWdraDhNRzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIyrTANBgkqhkiG9w0BAQsFAAOCAQEAK3fs dKXmtDBxOz/y8GyTBpaZXWPpY5TVEwvYlyLHTlZPXQoS6M1DrX5lnY864yyy/mr6 HjX3qeV/cH1WYcupf1hd3GAKQ4x2yBP3cCXhaXRZv9erSlVK0Vz/9SIcA70kuKNL 8u7d+pAk83Q4pyLyV2STaeHS2+BXmjRiPZjdET9S6IxGDfsSDHK8b7R5+JtOiwPt oj3euwLH5L4IeaBHI4FyhT66WgX+E0gxquICt+b64nO1sPIu9xgFEZDJ3rZuTXQd s4bGH93ShEptIdNs94YJ84csc/zFMuQJWtH8F+CEyjMyt1rjJ3XrVSp55+CqVr2D o1VDsc8TqtP4UOlZ1w== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:46 2026 by rpki-client