This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer (raw, json) Hash identifier: SfeIfD3MjxiZq5KtT2GddsDz9fk4XEiVI1X3DDXc574= Subject key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C24DA39A5283E899F77C19AB1083 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51800 IP: 185.153.80.0/22 IP: 217.28.80.0/20 IP: 2a02:28a8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c2:4d:a3:9a:52:83:e8:99:f7:7c:19:ab:10:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:a7:00:9a:18:6a:e5:4b:98:7f:b6:e5:24: 3b:38:f8:07:0e:92:b0:f0:22:95:aa:6a:cc:b8:55: 3e:fc:a5:05:e4:8b:af:4d:32:ae:b8:88:69:e8:c8: e4:9d:02:61:54:6c:34:77:e8:d4:3a:e1:d9:92:42: e2:72:22:8d:63:5d:04:65:68:fe:b5:8e:76:6b:1c: cc:86:10:f1:bf:c0:af:0e:74:64:47:93:ab:14:6d: fa:62:24:f8:03:0a:8c:a7:0c:cd:19:88:6f:f9:57: 69:eb:00:2f:f0:db:ec:61:1b:de:7b:b6:e4:38:8f: f7:cd:4a:96:93:12:41:3e:c4:86:0a:9f:91:64:4e: fb:53:b8:40:43:fa:d0:0c:78:c9:34:fe:a0:05:b5: 29:b2:14:d5:a8:48:30:f7:9a:8d:5c:e8:17:cb:22: ee:02:92:55:5a:83:8d:99:bd:e2:f8:3a:2c:4b:76: 97:cb:14:2b:c5:18:9c:aa:35:b2:6d:45:db:36:70: ed:60:f3:7b:f3:33:f2:8f:a6:38:0f:e9:73:99:a7: 7e:e5:29:75:5e:70:84:34:44:c5:cc:d2:33:3a:62: ba:00:27:d0:06:2e:ef:2c:f9:0e:60:3a:f2:e2:f0: 8e:ce:20:1a:7a:f5:69:18:c0:1a:28:16:9c:d3:9c: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.80.0/22 217.28.80.0/20 IPv6: 2a02:28a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51800 Signature Algorithm: sha256WithRSAEncryption 2e:e1:61:73:e0:a3:a2:d7:59:93:34:d2:a2:48:83:6a:6e:13: f4:46:e8:62:a7:3b:d6:cf:c2:a9:12:ec:ce:60:85:f3:18:dd: 21:b1:6b:7f:ac:e0:2e:5e:98:43:5c:8c:d0:7b:1b:5b:b8:61: 74:37:e8:5d:ba:a2:2d:50:de:dd:a4:9f:a7:bc:85:6b:28:2d: ff:5f:3e:62:d5:bb:4d:c2:65:69:53:33:cc:0a:ad:5f:ec:09: 50:50:11:6c:80:45:d5:15:5c:8a:5b:39:4a:88:80:7d:84:8f: a6:af:db:42:71:ba:10:64:33:20:68:29:85:bb:0c:f3:e0:10: 8f:76:e2:60:45:e8:42:24:da:5c:c6:4e:af:38:0e:7c:6f:91: 0f:40:e0:c5:21:68:72:5d:9b:2b:9e:5c:a2:f5:67:45:db:b9: 21:88:58:2b:b1:b6:e6:61:85:fa:8b:ab:8b:c7:4f:0e:cc:24: 8e:4f:8d:a1:fa:7c:b3:ae:b9:c5:66:4c:b2:73:54:e5:3b:55: 60:6d:97:29:0e:65:c9:7b:76:81:81:7b:5f:aa:d9:69:c7:ec: a4:91:b6:24:8d:32:96:ce:d2:9e:54:8b:28:bf:30:d0:e7:52: 2d:dc:f4:b3:5e:dd:08:fa:73:56:cd:21:d1:3e:59:9e:08:5f: c8:2f:ca:9f -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt5EMJNo5pSg+iZ93wZqxCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmJmNGQ1OWNiZDk3OGFlMTEyN2M2N2ZkMjJmMDRjNjJmZjgzN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvanAJoYauVLmH+25SQ7OPgHDpKw 8CKVqmrMuFU+/KUF5IuvTTKuuIhp6MjknQJhVGw0d+jUOuHZkkLiciKNY10EZWj+ tY52axzMhhDxv8CvDnRkR5OrFG36YiT4AwqMpwzNGYhv+Vdp6wAv8NvsYRvee7bk OI/3zUqWkxJBPsSGCp+RZE77U7hAQ/rQDHjJNP6gBbUpshTVqEgw95qNXOgXyyLu ApJVWoONmb3i+DosS3aXyxQrxRicqjWybUXbNnDtYPN78zPyj6Y4D+lzmad+5Sl1 XnCENETFzNIzOmK6ACfQBi7vLPkOYDry4vCOziAaevVpGMAaKBac05z4VwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPu/TVnL2XiuESfGf9IvBMYv+DfPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0Lzg4Yzk5 NS1lZGUwLTRjYzQtYTY2ZC0yNWJhYTgyMzBmY2IvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvODhjOTk1 LWVkZTAtNGNjNC1hNjZkLTI1YmFhODIzMGZjYi8xLzEtNzlOV2N2WmVLNFJKOFpf MGk4RXhpXzROODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArmZUAMEBNkcUDANBAIAAjAHAwUAKgIoqDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAylgwDQYJKoZIhvcNAQELBQADggEBAC7h YXPgo6LXWZM00qJIg2puE/RG6GKnO9bPwqkS7M5ghfMY3SGxa3+s4C5emENcjNB7 G1u4YXQ36F26oi1Q3t2kn6e8hWsoLf9fPmLVu03CZWlTM8wKrV/sCVBQEWyARdUV XIpbOUqIgH2Ej6av20JxuhBkMyBoKYW7DPPgEI924mBF6EIk2lzGTq84DnxvkQ9A 4MUhaHJdmyueXKL1Z0XbuSGIWCuxtuZhhfqLq4vHTw7MJI5PjaH6fLOuucVmTLJz VOU7VWBtlykOZcl7doGBe1+q2WnH7KSRtiSNMpbO0p5Uiyi/MNDnUi3c9LNe3Qj6 c1bNIdE+WZ4IX8gvyp8= -----END CERTIFICATE-----Generated at Mon Jan 26 05:50:01 2026 by rpki-client