This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer (raw, json) Hash identifier: HavBWLgm4Obkz5d6R7xJN61OGBSLsyt4S/p3etOvPMc= Subject key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB66C959696177E6A8B5AEFB87FF2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56876 IP: 94.250.192.0/19 IP: 176.57.128.0/18 IP: 185.137.120.0/22 IP: 193.192.58.0/23 IP: 2a00:e440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:c9:59:69:61:77:e6:a8:b5:ae:fb:87:ff:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:4d:4a:9f:4b:32:72:88:9f:87:37:06:99: 9e:ee:af:55:82:c9:e4:9f:62:17:69:b9:4b:53:11: 5f:63:01:9d:e1:ea:bf:f6:7d:3e:ca:2a:c3:16:43: d5:65:be:04:0c:27:21:88:51:d5:9c:5e:de:8d:0e: 50:a1:aa:b6:79:e2:2c:6e:99:6a:7d:92:89:bb:bc: e9:e4:dc:12:e6:95:a1:e4:69:b1:d2:08:e2:d5:47: 87:47:75:a2:d6:bf:92:aa:87:ad:0f:4b:6c:a7:8b: 47:54:12:c4:cf:da:59:c3:a2:2c:65:1f:03:46:ae: 8c:b7:0e:9e:83:aa:fc:5f:34:a1:65:79:56:1d:56: 14:95:90:0b:7a:3f:99:83:84:fc:3c:5f:4e:00:57: 9e:06:7d:e7:2c:d8:3a:c2:82:34:f7:b1:e9:88:dc: ab:96:ff:74:41:ff:98:17:a5:1f:5b:87:c4:d1:4f: 69:b5:5f:1c:69:9f:b3:b9:95:d6:ed:5e:ef:f8:75: b8:eb:c1:57:f4:54:41:c3:29:b5:0b:9f:39:f9:7d: b2:bf:f6:a1:78:b0:84:fe:a4:23:a0:70:f2:25:3d: 34:52:8d:02:47:1b:15:40:85:e0:6a:54:ff:da:d8: 2d:7c:72:ab:8a:66:5d:66:07:cb:93:0a:56:40:8c: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.192.0/19 176.57.128.0/18 185.137.120.0/22 193.192.58.0/23 IPv6: 2a00:e440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56876 Signature Algorithm: sha256WithRSAEncryption 59:d8:eb:fe:c9:43:a1:9b:c4:25:23:3c:de:ec:67:6b:7f:1c: d7:98:d0:96:9b:4d:1b:af:42:14:60:c9:25:98:56:00:58:6e: d3:05:d7:46:59:2c:a4:9f:80:96:b9:92:34:3f:a6:93:da:21: 75:35:48:0a:f6:fb:f0:54:34:c4:05:41:84:66:9d:81:16:f9: f2:7e:5d:79:4c:bb:06:89:04:b5:f5:04:58:79:5c:df:ac:ab: 70:88:cb:97:52:a1:79:f4:95:8a:f9:03:fc:76:91:5f:1f:de: ed:37:51:85:41:ed:6d:55:8f:be:7c:44:cd:36:37:00:8d:3e: 8b:83:d4:c1:9b:dc:02:5e:58:52:80:4f:2b:5f:d5:35:e8:f9: 5a:60:c9:2b:78:32:84:63:eb:6a:3b:48:e0:1a:40:cf:c4:7c: be:e1:ca:cb:91:5c:ce:40:5b:da:f6:25:0e:6f:20:30:0b:37: 0f:17:ae:81:db:14:1e:df:8e:6a:47:2c:05:18:e1:e9:d1:ab: 64:dc:27:ff:8f:0b:f1:49:05:68:9a:b2:e2:e1:ce:8d:c5:eb: f2:88:d2:97:55:a0:b7:3a:05:b6:e8:cc:18:3a:d7:70:0c:66: 24:d0:b6:85:ef:55:20:f6:06:3a:e0:85:98:e1:47:4d:46:e5: 19:b4:55:84 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt9y2bJWWlhd+aota77h/8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODg1N2VjZjQ0MWU1ZWExZDcxODFmZWM3ZTk3ZTZkYmMxMjIwZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8pNSp9LMnKIn4c3Bpme7q9Vgsnk n2IXablLUxFfYwGd4eq/9n0+yirDFkPVZb4EDCchiFHVnF7ejQ5Qoaq2eeIsbplq fZKJu7zp5NwS5pWh5Gmx0gji1UeHR3Wi1r+SqoetD0tsp4tHVBLEz9pZw6IsZR8D Rq6Mtw6eg6r8XzShZXlWHVYUlZALej+Zg4T8PF9OAFeeBn3nLNg6woI097HpiNyr lv90Qf+YF6UfW4fE0U9ptV8caZ+zuZXW7V7v+HW468FX9FRBwym1C585+X2yv/ah eLCE/qQjoHDyJT00Uo0CRxsVQIXgalT/2tgtfHKrimZdZgfLkwpWQIxYSwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFPiFfs9EHl6h1xgf7H6X5tvBIg/CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2M4NDk3 Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0MDYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2 LWQ1ZWEtNGU3Zi04ZWQzLWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9z ZnBmbTI4RWlEOEkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEBV76wAMEBrA5gAMEArmJeAMEAcHAOjANBAIA AjAHAwUAKgDkQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3iwwDQYJKoZIhvcN AQELBQADggEBAFnY6/7JQ6GbxCUjPN7sZ2t/HNeY0JabTRuvQhRgySWYVgBYbtMF 10ZZLKSfgJa5kjQ/ppPaIXU1SAr2+/BUNMQFQYRmnYEW+fJ+XXlMuwaJBLX1BFh5 XN+sq3CIy5dSoXn0lYr5A/x2kV8f3u03UYVB7W1Vj758RM02NwCNPouD1MGb3AJe WFKATytf1TXo+VpgySt4MoRj62o7SOAaQM/EfL7hysuRXM5AW9r2JQ5vIDALNw8X roHbFB7fjmpHLAUY4enRq2TcJ/+PC/FJBWiasuLhzo3F6/KI0pdVoLc6BbbozBg6 13AMZiTQtoXvVSD2BjrghZjhR01G5Rm0VYQ= -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:15 2026 by rpki-client