This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer File: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer (raw, json) Hash identifier: 4NNZu+RcJRObkLzFL+1+JlRhlLhzzy7cRxUG+0qh68M= Subject key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13D32180676E0B4072097769429B2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.169.4.0 -- 89.169.11.255 IP: 93.183.68.0/22 IP: 195.178.17.0/24 IP: 195.200.223.0/24 IP: 2a07:f340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d3:21:80:67:6e:0b:40:72:09:77:69:42:9b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:5a:e4:00:7b:89:c8:4d:ee:4c:40:d6:55: 78:74:f2:62:bb:c2:8d:0c:45:2b:44:a0:c6:f3:c6: df:a5:0b:ad:22:b3:38:4f:6d:46:de:51:ce:df:5b: 7e:5c:d9:43:80:1b:c1:ee:2f:60:63:b4:3d:f3:58: eb:1c:10:71:a1:23:55:fd:f6:5d:fb:83:7e:9a:09: 9f:a2:60:3f:e5:3e:7c:aa:04:c8:1c:a1:e3:dd:a4: 22:bd:a0:28:44:e3:7e:74:ff:7b:90:de:60:48:ec: 8e:f4:93:5a:a9:f8:ba:4d:35:fb:5e:74:ad:44:33: 74:59:3a:74:02:31:a0:74:6e:39:67:5d:76:91:10: f9:95:ef:22:29:33:dc:ca:4f:11:84:93:e6:5b:24: 50:c1:bf:a4:8f:d5:5c:04:39:23:bb:e4:bf:9b:15: 7d:0a:04:ca:94:20:0f:91:5f:96:ea:96:fc:d5:86: fb:76:79:df:d6:2b:92:78:21:bf:1e:0d:3e:2e:b2: 1d:80:06:d1:1d:04:38:8a:c1:fe:8d:60:65:a5:cd: cf:24:08:ea:a0:f5:4a:0f:c0:7e:bf:23:a4:62:64: 90:b9:e0:6b:33:aa:c3:b3:8c:5f:96:3e:0a:58:8a: 34:2e:dc:59:f3:b0:d3:94:f4:bc:b3:7e:e9:75:ab: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.169.4.0-89.169.11.255 93.183.68.0/22 195.178.17.0/24 195.200.223.0/24 IPv6: 2a07:f340::/29 Signature Algorithm: sha256WithRSAEncryption 72:a7:fd:d9:16:f9:90:ef:41:20:58:14:20:90:2f:96:b4:3d: f1:8c:99:b3:6a:4b:40:a8:0b:97:cd:e9:7e:4c:94:39:6c:00: 35:97:af:5a:6e:5f:db:2e:c4:1c:bb:eb:cd:7d:0c:4f:bc:34: 93:f6:9b:5f:38:72:d6:20:9f:d1:79:5d:93:70:c9:4c:4b:65: 31:5d:d9:0c:76:4b:f5:f8:15:8b:3d:e5:69:93:bc:0c:67:20: 49:e2:53:19:9c:24:d7:25:8e:2e:53:6c:c8:b1:56:4f:82:5d: 9c:0c:c6:a0:04:c5:56:37:f0:92:28:2f:2f:f8:0a:44:fa:23: a0:f5:b4:81:4b:58:ac:1a:a5:4e:6d:67:a6:9f:73:5e:9b:19: a0:3c:db:29:e8:09:af:f5:41:69:0e:c4:d0:28:dc:9b:a2:61: fb:d0:df:29:11:b3:d8:78:4e:41:51:ab:b2:aa:74:3f:18:c1: c0:a1:48:03:4a:a1:d3:38:81:d9:14:e1:d7:16:6a:4a:dd:db: 1b:c8:29:e4:38:90:9f:11:56:a6:8f:d4:30:a7:1f:66:c0:9d: 2f:36:db:59:9b:72:56:a6:81:e8:2d:d9:15:9e:cd:ec:08:cf: d4:5a:c2:7e:9b:cc:ce:14:72:9f:c5:52:f2:02:a5:36:b9:fb: dc:32:39:37 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt/E9MhgGduC0ByCXdpQpsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWUwMGFiZTE4NGE2MjViNzZmOGQxZmJjZWVmODE3YWFmNzE0MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdNa5AB7ichN7kxA1lV4dPJiu8KN DEUrRKDG88bfpQutIrM4T21G3lHO31t+XNlDgBvB7i9gY7Q981jrHBBxoSNV/fZd +4N+mgmfomA/5T58qgTIHKHj3aQivaAoRON+dP97kN5gSOyO9JNaqfi6TTX7XnSt RDN0WTp0AjGgdG45Z112kRD5le8iKTPcyk8RhJPmWyRQwb+kj9VcBDkju+S/mxV9 CgTKlCAPkV+W6pb81Yb7dnnf1iuSeCG/Hg0+LrIdgAbRHQQ4isH+jWBlpc3PJAjq oPVKD8B+vyOkYmSQueBrM6rDs4xflj4KWIo0LtxZ87DTlPS8s37pdase1wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFPngCr4YSmJbdvjR+87vgXqvcUFbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzhhMzIy Zi1kYzI4LTQyMmYtYjU3MC01OGI2NGQ1NTdjMGMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJm LWRjMjgtNDIyZi1iNTcwLTU4YjY0ZDU1N2MwYy8xLzEtZUFLdmhoS1lsdDItTkg3 enUtQmVxOXhRVnMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBIBggrBgEF BQcBBwEB/wQ5MDcwJgQCAAEwIDAMAwQCWakEAwQCWakIAwQCXbdEAwQAw7IRAwQA w8jfMA0EAgACMAcDBQMqB/NAMA0GCSqGSIb3DQEBCwUAA4IBAQByp/3ZFvmQ70Eg WBQgkC+WtD3xjJmzaktAqAuXzel+TJQ5bAA1l69abl/bLsQcu+vNfQxPvDST9ptf OHLWIJ/ReV2TcMlMS2UxXdkMdkv1+BWLPeVpk7wMZyBJ4lMZnCTXJY4uU2zIsVZP gl2cDMagBMVWN/CSKC8v+ApE+iOg9bSBS1isGqVObWemn3NemxmgPNsp6Amv9UFp DsTQKNybomH70N8pEbPYeE5BUauyqnQ/GMHAoUgDSqHTOIHZFOHXFmpK3dsbyCnk OJCfEVamj9Qwpx9mwJ0vNttZm3JWpoHoLdkVns3sCM/UWsJ+m8zOFHKfxVLyAqU2 ufvcMjk3 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:39 2026 by rpki-client