This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer (raw, json) Hash identifier: EAj7M0Z43idUT0oG39+MniTYgc+8EPmHN7qdzIEhkwo= Subject key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113AF3C39CFA5404FE89184379DA77 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 766 AS: 25354 IP: 130.206.0.0/16 IP: 158.99.0.0/16 IP: 185.205.148.0/22 IP: 192.148.201.0 -- 192.148.215.255 IP: 192.187.16.0 -- 192.187.25.255 IP: 193.144.0.0/14 IP: 194.0.33.0 -- 194.0.35.255 IP: 194.69.254.0/24 IP: 212.128.0.0/16 IP: 2001:678:40::/48 IP: 2001:678:44::/48 IP: 2001:678:48::/48 IP: 2001:67c:21cc::/48 IP: 2001:720::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3a:f3:c3:9c:fa:54:04:fe:89:18:43:79:da:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:36:3b:e7:74:6e:d1:0d:36:ba:2f:59:ef: 89:16:79:7b:15:54:66:29:5a:17:b7:03:7f:7d:a5: ac:13:7a:57:6e:ef:5b:a6:87:63:48:8b:ba:54:75: b9:b7:1a:21:31:97:b8:e4:7d:c7:fb:89:11:60:f1: 88:a6:89:b6:2b:7f:ee:13:fa:82:36:54:1f:3a:0f: 82:e8:e7:76:05:4e:14:23:3e:99:e4:68:58:af:fc: ae:48:53:a1:9c:03:b3:b4:02:29:a6:18:63:58:90: 49:71:5c:f1:0b:8b:91:47:96:82:bb:9c:e6:8c:41: 31:be:02:ec:8f:91:7b:da:e8:50:14:85:25:3e:1d: 18:26:b3:6d:88:4c:38:cf:44:ca:0c:79:ad:cf:92: d0:0d:b8:05:75:0c:72:5a:43:d2:b7:86:d2:96:f9: e3:db:f3:54:4c:60:90:cd:93:6e:cd:c6:4e:bf:00: 18:35:88:ca:38:8e:f9:57:8b:1b:bb:b6:2d:f9:5f: d5:79:3c:e7:3a:82:57:94:59:46:99:d0:03:25:42: ea:a0:e7:a7:53:5d:8b:13:a8:c4:b5:4d:c0:c9:1f: c4:fb:5e:26:62:9b:7e:e9:6c:18:f6:bf:bd:35:14: d1:e8:26:90:4a:7c:95:8d:0f:fc:b9:19:d6:b9:10: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.206.0.0/16 158.99.0.0/16 185.205.148.0/22 192.148.201.0-192.148.215.255 192.187.16.0-192.187.25.255 193.144.0.0/14 194.0.33.0-194.0.35.255 194.69.254.0/24 212.128.0.0/16 IPv6: 2001:678:40::/48 2001:678:44::/48 2001:678:48::/48 2001:67c:21cc::/48 2001:720::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 766 25354 Signature Algorithm: sha256WithRSAEncryption 46:c1:00:96:3b:16:8c:30:44:fc:64:1a:18:73:e0:11:6a:c6: 47:cd:18:9d:fa:4a:86:6d:77:7c:40:0f:ec:42:ed:2c:42:3f: aa:02:c5:ab:9e:17:01:32:8b:19:dd:75:8c:c1:a6:7a:d7:99: 6d:50:36:e7:29:79:6f:5b:2c:25:b5:cc:c0:9f:75:a3:67:02: 06:f7:ad:b5:f4:ca:8e:9a:85:c7:bf:dd:a5:77:d6:b3:61:21: a2:88:e4:d3:bd:86:05:20:7f:70:90:91:a0:e8:c3:36:91:58: 18:05:85:1b:92:f5:2f:9a:6b:1d:a7:c8:97:d0:e7:5b:1e:a8: 66:25:2b:60:d6:23:ab:ec:ea:4c:8d:4a:0d:84:78:5f:99:c8: 85:cb:ec:50:05:3a:35:1c:6e:98:4d:39:b9:3d:b1:b8:ad:34: 53:c7:b6:cc:bf:5c:32:93:f3:a8:92:c9:0a:21:e6:4c:39:14: b8:6a:d2:a8:6e:15:4d:aa:9f:8d:2f:21:f8:c3:d7:62:44:42: 8b:13:ca:3c:88:e3:fb:f1:64:5d:81:a1:be:05:c1:3d:dc:5a: b5:f9:bb:63:8d:8c:3f:23:31:c1:0d:f7:48:af:6f:95:96:e4: b5:d1:26:b5:f8:f6:a8:2f:79:21:39:6f:13:3b:9b:0f:93:39: 88:71:b4:3f -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgISAZt5ETrzw5z6VAT+iRhDedp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjUwMDc3ZDJkZDhhNjdhMWFlOGI2YWJkNmJiYjM0ODkwMjhhNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXc2O+d0btENNrovWe+JFnl7FVRm KVoXtwN/faWsE3pXbu9bpodjSIu6VHW5txohMZe45H3H+4kRYPGIpom2K3/uE/qC NlQfOg+C6Od2BU4UIz6Z5GhYr/yuSFOhnAOztAIpphhjWJBJcVzxC4uRR5aCu5zm jEExvgLsj5F72uhQFIUlPh0YJrNtiEw4z0TKDHmtz5LQDbgFdQxyWkPSt4bSlvnj 2/NUTGCQzZNuzcZOvwAYNYjKOI75V4sbu7Yt+V/VeTznOoJXlFlGmdADJULqoOen U12LE6jEtU3AyR/E+14mYpt+6WwY9r+9NRTR6CaQSnyVjQ/8uRnWuRADXQIDAQAB o4IDHTCCAxkwHQYDVR0OBBYEFH9QB30t2KZ6Gui2q9a7s0iQKKW7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2MxYzFj ZS1lYTU5LTRkY2YtYmNjYy0zZTdjYWRkODhjNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYzFjMWNl LWVhNTktNGRjZi1iY2NjLTNlN2NhZGQ4OGM3MC8xL2YxQUhmUzNZcG5vYTZMYXIx cnV6U0pBb3Bicy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGYBggrBgEF BQcBBwEB/wSBiDCBhTBQBAIAATBKAwMAgs4DAwCeYwMEArnNlDAMAwQAwJTJAwQD wJTQMAwDBATAuxADBAHAuxgDAwLBkDAMAwQAwgAhAwQCwgAgAwQAwkX+AwMA1IAw MQQCAAIwKwMHACABBngAQAMHACABBngARAMHACABBngASAMHACABBnwhzAMFAyAB ByAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICAv4CAmMKMA0GCSqGSIb3DQEBCwUA A4IBAQBGwQCWOxaMMET8ZBoYc+ARasZHzRid+kqGbXd8QA/sQu0sQj+qAsWrnhcB MosZ3XWMwaZ615ltUDbnKXlvWywltczAn3WjZwIG96219MqOmoXHv92ld9azYSGi iOTTvYYFIH9wkJGg6MM2kVgYBYUbkvUvmmsdp8iX0OdbHqhmJStg1iOr7OpMjUoN hHhfmciFy+xQBTo1HG6YTTm5PbG4rTRTx7bMv1wyk/OokskKIeZMORS4atKobhVN qp+NLyH4w9diREKLE8o8iOP78WRdgaG+BcE93Fq1+btjjYw/IzHBDfdIr2+VluS1 0Sa1+PaoL3khOW8TO5sPkzmIcbQ/ -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:43 2026 by rpki-client