This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer File: 1-N164S0qN_IarG-Btq9n1mF8oo4.cer (raw, json) Hash identifier: nZXiFe4yYAZPXIRpyClq9K6kkqGSZGLD3aTULvRtuCI= Subject key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E7D0B30480F97075E81E2B050E2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15693 AS: 59889 IP: 46.183.248.0/21 IP: 87.236.96.0/21 IP: 91.199.58.0/24 IP: 185.29.60.0/22 IP: 185.145.60.0/22 IP: 185.186.148.0/22 IP: 195.93.238.0/23 IP: 195.191.120.0/23 IP: 2a01:8800::/29 IP: 2a02:cc8::/30 IP: 2a0b:7d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e7:d0:b3:04:80:f9:70:75:e8:1e:2b:05:0e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:96:8a:de:fd:4e:7b:3d:f3:48:5e:72:3b:2b: cc:a1:53:17:c7:b5:c5:47:71:9a:f2:33:03:cc:4f: 2f:9e:77:91:ae:85:76:01:aa:6e:ed:24:f6:6d:f2: f4:86:76:81:93:df:d8:13:85:31:20:a9:e5:1b:9b: 0d:12:3e:48:a1:b9:84:27:45:87:64:16:ff:df:da: d1:91:7f:f3:25:cc:88:fe:0d:b7:3c:82:25:86:7b: ce:c9:c0:62:c7:8e:2b:5f:28:8a:78:76:32:36:1f: 4b:ed:ab:f7:17:c8:aa:ed:0c:53:12:31:71:9b:6f: 27:0e:d0:0d:ae:3e:41:5a:1c:a0:89:2b:68:8b:81: 0c:7a:ff:ac:12:34:58:6f:90:ae:08:d0:92:ce:9a: 26:c0:9d:93:19:f1:a9:78:45:d1:77:9f:e5:3d:12: 8a:3e:9f:ec:72:90:40:b3:27:f8:df:87:53:f5:d5: e1:4b:e5:df:2a:ec:16:f7:e8:58:f1:0f:e3:af:13: 36:ac:f9:07:d7:8a:70:27:d7:e4:47:0e:02:9d:1d: 9c:bb:a6:20:a4:ba:58:d6:8a:14:5b:56:b8:5e:81: 7f:4f:16:40:d8:85:8f:0b:4c:eb:be:a4:12:af:28: ad:ee:45:c3:86:1e:ad:d7:bd:69:a3:37:42:5d:5a: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.248.0/21 87.236.96.0/21 91.199.58.0/24 185.29.60.0/22 185.145.60.0/22 185.186.148.0/22 195.93.238.0/23 195.191.120.0/23 IPv6: 2a01:8800::/29 2a02:cc8::/30 2a0b:7d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15693 59889 Signature Algorithm: sha256WithRSAEncryption 5b:02:9c:06:b0:1d:89:36:a1:e4:06:0a:d8:2d:60:b3:0f:d8: fc:de:b5:7e:28:08:1a:a2:bd:24:8e:81:77:1d:42:21:a2:b0: 09:31:12:84:e7:1e:cd:46:e9:9b:53:ae:2b:cc:ad:59:49:89: bd:b0:1d:85:3b:ed:97:19:19:0e:9e:6b:eb:c3:4f:f0:46:ff: 0f:de:60:56:ae:1d:38:96:df:2c:6f:02:12:31:40:b1:66:8a: 01:71:1f:52:54:a0:e8:8d:1f:dc:73:66:da:c3:f8:80:09:5b: ac:f9:89:b6:6d:0c:28:60:72:b9:32:c2:99:f0:21:15:ea:0a: fb:0d:05:d0:a1:17:0f:2a:09:14:bc:a4:b2:fb:02:28:ab:e4: 21:23:33:51:bf:ed:dd:30:94:66:27:0b:e5:0a:9a:c3:76:f0: 1b:ff:04:59:b7:37:31:60:ff:97:d3:40:ce:27:3e:8e:96:1f: 17:81:2c:f3:38:61:e5:81:2d:3f:1d:b8:59:ef:37:f3:4d:fb: 41:dc:8e:3a:36:02:d0:4d:0c:27:01:da:09:3d:25:ef:80:27: e7:48:44:72:a1:23:91:8c:fe:d9:ed:06:89:89:04:44:6b:92: ac:84:43:93:b1:bb:55:0a:26:e9:b9:8c:ce:e0:e5:6f:a3:ad: 89:fd:1d:63 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISAZt+OOfQswSA+XB16B4rBQ4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGRkN2FlMTJkMmEzN2YyMWFhYzZmODFiNmFmNjdkNjYxN2NhMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JaK3v1Oez3zSF5yOyvMoVMXx7XF R3Ga8jMDzE8vnneRroV2Aapu7ST2bfL0hnaBk9/YE4UxIKnlG5sNEj5IobmEJ0WH ZBb/39rRkX/zJcyI/g23PIIlhnvOycBix44rXyiKeHYyNh9L7av3F8iq7QxTEjFx m28nDtANrj5BWhygiStoi4EMev+sEjRYb5CuCNCSzpomwJ2TGfGpeEXRd5/lPRKK Pp/scpBAsyf434dT9dXhS+XfKuwW9+hY8Q/jrxM2rPkH14pwJ9fkRw4CnR2cu6Yg pLpY1ooUW1a4XoF/TxZA2IWPC0zrvqQSryit7kXDhh6t171pozdCXVraQQIDAQAB o4IC7DCCAugwHQYDVR0OBBYEFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzJjMGQ4 MC0zOTM3LTQ0NTUtYjljZi0yYjRhMzUzOGM1ZTMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgw LTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVlMy8xLzEtTjE2NFMwcU5fSWFyRy1C dHE5bjFtRjhvbzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBggrBgEF BQcBBwEB/wRXMFUwNgQCAAEwMAMEAy63+AMEA1fsYAMEAFvHOgMEArkdPAMEArmR PAMEArm6lAMEAcNd7gMEAcO/eDAbBAIAAjAVAwUDKgGIAAMFAioCDMgDBQMqC32A MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAj1NAgMA6fEwDQYJKoZIhvcNAQELBQAD ggEBAFsCnAawHYk2oeQGCtgtYLMP2PzetX4oCBqivSSOgXcdQiGisAkxEoTnHs1G 6ZtTrivMrVlJib2wHYU77ZcZGQ6ea+vDT/BG/w/eYFauHTiW3yxvAhIxQLFmigFx H1JUoOiNH9xzZtrD+IAJW6z5ibZtDChgcrkywpnwIRXqCvsNBdChFw8qCRS8pLL7 Aiir5CEjM1G/7d0wlGYnC+UKmsN28Bv/BFm3NzFg/5fTQM4nPo6WHxeBLPM4YeWB LT8duFnvN/NN+0Hcjjo2AtBNDCcB2gk9Je+AJ+dIRHKhI5GM/tntBomJBERrkqyE Q5Oxu1UKJum5jM7g5W+jrYn9HWM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:30 2026 by rpki-client