This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.cer (raw, json) Hash identifier: 1sKOOfZdJr99JdVx0Z4pHBJCfwa0TZ5P+ZEAiABoNRU= Subject key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD7AF8E7189D8CD73AD325C25359F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51321 IP: 185.132.120.0/22 IP: 2a06:df40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d7:af:8e:71:89:d8:cd:73:ad:32:5c:25:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:07:f9:7c:be:b6:47:bb:c0:1f:d3:90:41: a2:09:b1:33:15:7a:f2:dc:63:5c:14:0c:f6:55:fa: d6:ad:0a:1e:2d:a0:b9:b3:6c:56:c6:d9:91:bb:bb: 98:1d:e7:82:8c:da:cc:82:17:09:31:9f:ff:f8:39: 8d:37:ed:89:f6:44:28:a3:8e:19:2a:40:f2:da:3e: 59:56:5e:15:7b:56:2a:da:5d:55:29:27:85:67:8d: 99:24:4a:db:9a:da:84:76:48:bf:20:b0:57:35:91: 4c:92:c1:28:28:2f:49:81:76:96:b7:85:88:ee:76: 92:bd:4d:d0:d7:20:f1:16:f1:3b:06:67:26:6c:9d: bb:1d:47:33:ed:1c:49:fc:f8:55:5b:ef:78:b2:c4: 28:21:ae:17:65:f3:74:28:b6:8c:cc:8e:f4:cf:c3: 1c:c5:6f:7f:db:09:67:50:7a:ed:cf:e3:32:7b:40: 9b:ec:08:32:a6:e5:8a:db:8a:09:5b:d3:8b:38:53: 9c:ea:55:0d:be:58:07:9f:f1:91:e7:d2:52:16:6a: 50:ea:52:c5:08:cc:f9:a9:aa:04:29:e9:9c:ef:1a: b4:f2:6f:2e:98:df:5b:36:a3:ed:81:19:9c:a5:7f: 49:7a:17:0b:03:0e:cc:a3:9e:2d:d0:a7:72:8f:db: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.120.0/22 IPv6: 2a06:df40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51321 Signature Algorithm: sha256WithRSAEncryption a3:45:e8:39:3f:d0:b8:99:f7:d7:03:3e:77:db:94:ba:5d:d1: 68:66:6f:f1:19:93:b6:b5:7f:60:d9:79:e8:62:00:b2:a6:88: 1a:ca:18:18:10:56:a8:15:60:30:0d:2d:01:ee:10:7e:2d:e0: 73:da:79:e1:2a:29:b0:a5:98:c8:bb:9c:74:d5:ff:cb:70:ec: 11:eb:0d:10:9c:6f:77:b0:9b:95:dc:74:a7:97:fa:2c:d6:72: 00:04:3d:46:fd:88:15:a0:db:99:66:67:53:57:97:16:47:ec: 5b:ba:18:3b:b2:44:41:99:ac:72:3d:54:90:b0:f1:a9:65:4c: 81:db:b4:18:a1:c0:13:43:a9:42:51:52:99:7f:14:e3:05:5a: 4b:45:2e:f1:82:48:9f:4f:d6:b0:fa:4b:b2:9a:59:38:6d:24: 21:4f:7d:38:d0:54:a8:c7:c5:cf:b7:0c:3e:3c:8b:b1:34:7d: a8:8d:ae:60:b3:9f:1c:f1:bd:1e:08:be:0a:7d:32:d4:c5:92: 35:82:3a:9d:6e:74:1d:02:52:ed:b0:77:0a:0e:54:51:0d:b2: 77:cd:1d:da:68:02:f1:1a:6d:86:f8:1d:ee:37:9a:c0:24:3f: 38:9b:a5:4b:f3:40:d1:f1:cc:68:f7:c1:d3:1b:8c:14:d0:e3: cc:be:f2:ff -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt87devjnGJ2M1zrTJcJTWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQyNWRhNjRiNDYzYWYzOGI0NDRmZjM3MzExYjE1NjZkZjVmY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztgH+Xy+tke7wB/TkEGiCbEzFXry 3GNcFAz2VfrWrQoeLaC5s2xWxtmRu7uYHeeCjNrMghcJMZ//+DmNN+2J9kQoo44Z KkDy2j5ZVl4Ve1Yq2l1VKSeFZ42ZJErbmtqEdki/ILBXNZFMksEoKC9JgXaWt4WI 7naSvU3Q1yDxFvE7BmcmbJ27HUcz7RxJ/PhVW+94ssQoIa4XZfN0KLaMzI70z8Mc xW9/2wlnUHrtz+Mye0Cb7AgypuWK24oJW9OLOFOc6lUNvlgHn/GR59JSFmpQ6lLF CMz5qaoEKemc7xq08m8umN9bNqPtgRmcpX9JehcLAw7Mo54t0Kdyj9vW0wIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPvSXaZLRjrzi0RP83MRsVZt9fyyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2ZhNjVl OC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVkZTYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4 LWU1OTctNDczOC04Mzk2LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96 Y3hHeFZtMzFfTEkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArmEeDANBAIAAjAHAwUDKgbfQDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAyHkwDQYJKoZIhvcNAQELBQADggEBAKNF6Dk/0LiZ 99cDPnfblLpd0Whmb/EZk7a1f2DZeehiALKmiBrKGBgQVqgVYDANLQHuEH4t4HPa eeEqKbClmMi7nHTV/8tw7BHrDRCcb3ewm5XcdKeX+izWcgAEPUb9iBWg25lmZ1NX lxZH7Fu6GDuyREGZrHI9VJCw8allTIHbtBihwBNDqUJRUpl/FOMFWktFLvGCSJ9P 1rD6S7KaWThtJCFPfTjQVKjHxc+3DD48i7E0faiNrmCznxzxvR4Ivgp9MtTFkjWC Op1udB0CUu2wdwoOVFENsnfNHdpoAvEabYb4He43msAkPzibpUvzQNHxzGj3wdMb jBTQ48y+8v8= -----END CERTIFICATE-----Generated at Mon Jan 26 13:41:08 2026 by rpki-client