This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer (raw, json) Hash identifier: uW4wZI8DNZ70XNI/yZeYeERyS5aTm5eAAA5FRI4Xw4Q= Subject key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C1675DEB5C9AE3E9A8F544C6BE3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56566 IP: 31.31.224.0/19 IP: 91.224.64.0/23 IP: 91.224.100.0/23 IP: 2a00:de00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c1:67:5d:eb:5c:9a:e3:e9:a8:f5:44:c6:be:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:28:5c:f6:4d:74:f7:13:e5:71:a7:06:59: 16:e1:67:69:8e:0f:c9:4f:41:91:93:5b:78:17:47: 05:35:5d:5d:78:08:b9:36:ca:15:b0:6f:bb:97:74: bb:9e:3b:06:d4:aa:af:0c:3b:0f:8b:14:31:9b:e8: 41:04:9d:3d:32:92:8c:13:d4:33:73:97:b3:c9:af: 0d:8c:cb:38:ef:99:e5:3d:1d:49:2e:12:4c:19:79: d3:ff:c9:3a:64:bb:23:12:8e:c5:4b:f6:c7:fc:e1: 2a:19:ff:fb:40:fe:75:29:ff:0d:41:27:eb:67:25: bf:e2:d4:ef:43:e9:62:eb:68:58:23:3d:f5:a5:0b: 50:ab:59:e2:82:75:84:c1:01:92:34:f2:a8:83:61: ce:c2:5a:26:21:77:dd:98:7e:8b:88:8b:ea:48:0b: ce:35:e3:5c:1e:bd:53:07:db:3f:c3:7e:c0:0e:79: f0:7d:da:11:58:db:46:bc:a3:bd:b1:19:fb:88:56: a7:e3:97:50:b5:da:eb:78:64:8a:d7:48:e3:15:4a: c6:51:b2:8d:92:d4:fa:82:90:c3:ff:f3:3a:10:d3: 83:b9:c9:bb:c9:28:85:45:79:e7:a6:48:c8:04:80: 70:52:52:09:16:ad:6e:7d:e2:95:da:6f:d7:53:f1: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.224.0/19 91.224.64.0/23 91.224.100.0/23 IPv6: 2a00:de00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56566 Signature Algorithm: sha256WithRSAEncryption 0d:85:8c:b8:83:aa:1a:d1:0f:99:29:42:35:ea:95:8f:06:1f: 26:00:25:75:6a:c8:ae:e8:c0:f0:55:97:8e:fb:00:55:33:9a: 3c:c5:17:b7:ac:3f:80:0b:1e:a7:73:02:1f:3f:9f:25:47:e0: 47:df:cd:d2:2b:5d:82:5b:0c:41:e3:1c:d0:db:79:16:7d:80: 26:f6:8b:a5:b9:6d:c3:d2:8b:0b:41:db:6e:b2:20:1e:fa:6f: a7:02:24:b1:8f:ab:fa:09:d8:7c:19:39:2e:71:7d:e4:31:13: 32:ee:9a:71:7c:81:13:b8:ec:c8:ef:e0:b4:3a:a3:68:b3:cf: b7:55:00:fc:93:93:9c:68:26:86:0e:08:49:af:a5:78:76:a8: 9d:90:1e:99:76:88:13:84:27:b3:3e:b6:3f:a1:60:f2:21:eb: 31:30:b1:70:fe:14:1e:fa:2d:48:7b:20:ca:f1:1f:49:09:ce: af:2f:69:6d:15:52:00:ab:68:14:e8:e3:b5:37:29:84:26:26: 08:90:c1:86:b0:db:42:16:35:80:92:fa:b9:3a:9c:07:77:a5: fe:ee:84:55:67:bb:56:24:26:1d:3b:54:8f:cc:b0:65:1e:90: b3:e0:b0:63:41:17:b1:4e:5c:3a:28:c4:25:e5:b7:c1:0b:c9: 07:ab:98:da -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt3WMFnXetcmuPpqPVExr46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE0ZTgxNTNjZDNmOTFjMzMzOTdmOWI3ZGY5MWJmMTczYzRkMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYoXPZNdPcT5XGnBlkW4Wdpjg/J T0GRk1t4F0cFNV1deAi5NsoVsG+7l3S7njsG1KqvDDsPixQxm+hBBJ09MpKME9Qz c5ezya8NjMs475nlPR1JLhJMGXnT/8k6ZLsjEo7FS/bH/OEqGf/7QP51Kf8NQSfr ZyW/4tTvQ+li62hYIz31pQtQq1nignWEwQGSNPKog2HOwlomIXfdmH6LiIvqSAvO NeNcHr1TB9s/w37ADnnwfdoRWNtGvKO9sRn7iFan45dQtdrreGSK10jjFUrGUbKN ktT6gpDD//M6ENODucm7ySiFRXnnpkjIBIBwUlIJFq1ufeKV2m/XU/FPuQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFPoU6BU80/kcMzl/m335G/FzxNFrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzI0MDc4 MC04MTEwLTQ1ZDctYmQ3My1mZGZkMmQ3MmI1NDEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgw LTgxMTAtNDVkNy1iZDczLWZkZmQyZDcyYjU0MS8xLzEtaFRvRlR6VC1Sd3pPWC1i ZmZrYjhYUEUwV3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEBR8f4AMEAVvgQAMEAVvgZDANBAIAAjAHAwUA KgDeADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3PYwDQYJKoZIhvcNAQELBQAD ggEBAA2FjLiDqhrRD5kpQjXqlY8GHyYAJXVqyK7owPBVl477AFUzmjzFF7esP4AL HqdzAh8/nyVH4EffzdIrXYJbDEHjHNDbeRZ9gCb2i6W5bcPSiwtB226yIB76b6cC JLGPq/oJ2HwZOS5xfeQxEzLumnF8gRO47Mjv4LQ6o2izz7dVAPyTk5xoJoYOCEmv pXh2qJ2QHpl2iBOEJ7M+tj+hYPIh6zEwsXD+FB76LUh7IMrxH0kJzq8vaW0VUgCr aBTo47U3KYQmJgiQwYaw20IWNYCS+rk6nAd3pf7uhFVnu1YkJh07VI/MsGUekLPg sGNBF7FOXDooxCXlt8ELyQermNo= -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:11 2026 by rpki-client