This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.cer (raw, json) Hash identifier: JEMkb25hrgx/iUz15dI0Z7LIRv8OnUxwvK0Mfcz+N9w= Subject key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DFD5B8031A98969B7B367C5A083D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42369 AS: 49689 IP: 91.250.253.0/24 IP: 94.176.160.0/23 IP: 185.235.147.0/24 IP: 188.240.51.0/24 IP: 193.30.126.0/23 IP: 194.33.191.0/24 IP: 2a10:8b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:df:d5:b8:03:1a:98:96:9b:7b:36:7c:5a:08:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:9b:20:44:02:a9:f6:aa:a5:cd:8a:09:7d: 29:48:cf:fd:31:31:26:c8:c9:29:7c:9d:69:bb:47: 32:34:28:42:de:3c:50:e8:a2:98:a9:b1:f5:ad:a5: c7:e0:bc:1f:f4:50:a3:29:85:56:e2:3d:63:47:71: 22:44:d4:d6:d1:2a:9f:30:dd:75:da:a1:03:02:73: f3:59:18:55:05:e4:d6:46:b7:28:4b:1b:b0:36:3a: 8a:de:65:99:81:f3:f1:b7:6e:a1:2b:8b:86:d2:1c: 2c:7a:54:8b:54:d7:aa:b6:28:b7:4d:ff:79:de:b5: ee:34:7a:71:c9:91:37:82:02:ae:73:13:b1:59:fc: 03:94:22:de:76:49:71:38:ed:be:9e:5a:fa:03:f8: bb:a0:1d:5f:98:a6:1a:76:ca:86:8b:0d:e7:a7:58: 71:40:54:f8:5f:40:57:35:f2:4d:f6:81:21:f1:7d: bc:03:b9:70:b8:6f:c7:e8:6e:e5:d3:f5:93:44:80: 4c:bb:2a:8f:11:d5:4b:35:5c:93:28:a7:b9:18:90: 6f:e9:4e:4e:76:07:91:d1:0e:bd:52:92:ff:6a:95: 11:90:bd:b2:c7:62:2d:d1:4e:3d:d3:61:90:c4:d0: a4:23:ca:cf:aa:bd:c3:bf:2f:50:60:4c:3d:ef:e8: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.250.253.0/24 94.176.160.0/23 185.235.147.0/24 188.240.51.0/24 193.30.126.0/23 194.33.191.0/24 IPv6: 2a10:8b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42369 49689 Signature Algorithm: sha256WithRSAEncryption 8a:3c:aa:aa:64:6d:83:38:c1:93:5a:f1:b7:04:9f:83:3a:2d: f5:a5:47:3a:d1:50:2d:c8:26:5c:12:39:20:9a:0f:f5:4f:c6: 57:73:a7:4c:b2:9c:75:73:0f:7f:25:5e:7c:e7:3a:82:9f:f0: 2c:4e:2a:f1:b6:46:5e:2b:b9:aa:f2:d6:b7:a0:0d:b2:f2:78: ce:a6:db:16:e4:0b:4d:88:25:6c:b1:e6:2d:f4:3f:aa:00:ef: bf:f9:9a:f9:b4:87:d2:ae:23:2f:fd:7c:32:85:19:ab:8f:d8: d9:4d:e2:06:61:20:47:78:66:3c:60:88:74:3e:9d:19:d5:8c: 94:c1:8b:7e:b3:03:0c:b1:df:1e:9c:53:ad:50:7f:df:ba:57: fc:73:5a:a0:f1:b4:e8:c9:0e:b6:6c:23:ad:cc:90:3e:0c:a5: 61:21:54:c8:71:ba:80:47:1d:c8:c0:44:d4:7a:ec:55:6c:10: 2a:d7:a8:e1:a3:b8:a5:91:83:0a:51:76:5c:57:4a:91:1a:1d: 6f:a2:d2:76:77:9b:75:da:b7:bc:f4:cf:aa:bb:6a:b5:cf:61: 0e:1c:9d:09:9a:2d:66:fa:9c:b0:87:07:df:4b:2b:91:bf:3d: b1:a1:64:9c:0e:13:fb:80:98:93:80:f2:9f:51:4e:13:94:6d: d6:25:28:e1 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt/Fd/VuAMamJabezZ8Wgg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODBlMDE3Y2YxNzExNTE5YjBmZjlmNjU4NThjNDkxYjJmYTVkNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaebIEQCqfaqpc2KCX0pSM/9MTEm yMkpfJ1pu0cyNChC3jxQ6KKYqbH1raXH4Lwf9FCjKYVW4j1jR3EiRNTW0SqfMN11 2qEDAnPzWRhVBeTWRrcoSxuwNjqK3mWZgfPxt26hK4uG0hwselSLVNeqtii3Tf95 3rXuNHpxyZE3ggKucxOxWfwDlCLedklxOO2+nlr6A/i7oB1fmKYadsqGiw3np1hx QFT4X0BXNfJN9oEh8X28A7lwuG/H6G7l0/WTRIBMuyqPEdVLNVyTKKe5GJBv6U5O dgeR0Q69UpL/apURkL2yx2It0U4902GQxNCkI8rPqr3Dvy9QYEw97+gFswIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFPgOAXzxcRUZsP+fZYWMSRsvpdQLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzJkYzEz Ni00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1YzhiMWYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2 LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTls aFl4Skd5LWwxQXMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEF BQcBBwEB/wQ9MDswKgQCAAEwJAMEAFv6/QMEAV6woAMEALnrkwMEALzwMwMEAcEe fgMEAMIhvzANBAIAAjAHAwUAKhCLQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA pYECAwDCGTANBgkqhkiG9w0BAQsFAAOCAQEAijyqqmRtgzjBk1rxtwSfgzot9aVH OtFQLcgmXBI5IJoP9U/GV3OnTLKcdXMPfyVefOc6gp/wLE4q8bZGXiu5qvLWt6AN svJ4zqbbFuQLTYglbLHmLfQ/qgDvv/ma+bSH0q4jL/18MoUZq4/Y2U3iBmEgR3hm PGCIdD6dGdWMlMGLfrMDDLHfHpxTrVB/37pX/HNaoPG06MkOtmwjrcyQPgylYSFU yHG6gEcdyMBE1HrsVWwQKteo4aO4pZGDClF2XFdKkRodb6LSdnebddq3vPTPqrtq tc9hDhydCZotZvqcsIcH30srkb89saFknA4T+4CYk4Dyn1FOE5Rt1iUo4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:44 2026 by rpki-client