This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.cer (raw, json) Hash identifier: 9L5MnGqD8XyjL782/2+QxZXl/oWVWtIB7WJ3aya/Jj8= Subject key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CE50FA82F26C8BC6BBCB0FB1B913 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34507 IP: 91.209.213.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ce:50:fa:82:f2:6c:8b:c6:bb:cb:0f:b1:b9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:48:32:6e:83:5b:40:47:4a:97:6e:e5:6f: bf:e1:3f:fc:62:10:e3:09:60:5f:91:47:c7:df:f8: 1c:13:a7:60:bd:0a:1d:f1:ce:fc:88:ed:e3:62:5c: 01:7f:2f:0c:30:07:37:3e:98:b7:bb:dd:a3:a5:9a: 63:96:ba:82:4a:31:80:79:91:12:1e:3e:59:db:d2: 7e:e9:22:93:a9:d6:58:1b:a3:0e:f1:4c:e2:45:2c: 85:0a:11:89:a2:da:87:4f:7f:08:4c:0b:6f:63:32: 43:cc:8e:d7:06:b6:d5:05:51:30:11:e9:5c:36:8b: 8d:b8:5d:02:11:49:19:9f:46:c2:72:a9:8d:2e:8f: 95:ac:18:07:46:16:c6:7a:62:fc:55:ed:64:6b:1f: 50:b1:dd:a2:2b:2c:92:00:32:c3:ae:ff:d2:3a:cc: d3:30:42:87:c9:f3:02:d1:6e:50:09:0f:cd:b7:97: 82:25:8f:ee:a2:7f:a4:70:75:f6:5d:f4:1d:e0:80: 6c:7d:99:a0:39:93:4a:ac:df:08:51:f1:b4:e6:02: e3:78:6e:04:9b:f7:7b:ea:34:f0:5c:09:27:76:c6: f2:14:1b:a5:e8:57:46:7a:59:58:02:d8:36:cf:95: ba:6f:e3:4f:5f:d4:57:72:f1:41:fb:a4:e3:b5:0b: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34507 Signature Algorithm: sha256WithRSAEncryption 40:a9:34:66:c5:a8:18:b0:d1:47:87:66:36:1c:e8:fa:ca:29: e3:8f:2c:75:34:99:30:7f:ca:b4:2c:13:ee:c2:57:7f:38:e0: 63:71:3e:8f:3d:17:d0:bd:40:6e:67:7e:3f:b2:a6:f3:ac:61: a9:c0:6e:fc:d6:d3:38:a3:8b:c6:c8:c3:04:d2:e0:a4:62:ef: 02:50:bf:13:6a:83:14:75:55:12:53:07:1c:e6:82:5c:2c:69: 76:be:9d:39:09:85:22:7b:84:fa:67:7b:69:11:da:19:6a:0a: 15:87:ee:b6:9b:7f:73:9a:7e:6d:e7:42:84:dc:4c:58:ef:5f: d9:da:01:3d:c7:4c:06:a3:fe:94:1f:48:23:9d:df:cd:fb:bf: 24:08:59:1b:56:a1:89:81:7b:fb:d9:84:84:1a:80:92:61:98: d8:78:0a:f9:85:c5:c1:40:78:ed:3b:8d:c5:0a:a3:c9:e4:bb: f2:ff:b8:46:87:e3:3c:db:26:97:1f:28:5b:52:2e:e2:13:50: 3f:88:63:c2:c5:4d:33:ab:77:5f:ac:fa:57:d5:96:95:18:8b: cd:95:39:8a:06:a3:bc:55:73:53:4d:94:ea:65:d8:13:16:f0: dd:73:80:90:d9:0e:f0:dc:59:cb:f0:2d:cf:33:c3:d2:f3:04: 24:ea:bf:f0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt7pM5Q+oLybIvGu8sPsbkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODE2ODY1OTI4ZWVlZWU1Y2JjOTJmNGM0ZDM4YWU1YzYwMWRlZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVJIMm6DW0BHSpdu5W+/4T/8YhDj CWBfkUfH3/gcE6dgvQod8c78iO3jYlwBfy8MMAc3Ppi3u92jpZpjlrqCSjGAeZES Hj5Z29J+6SKTqdZYG6MO8UziRSyFChGJotqHT38ITAtvYzJDzI7XBrbVBVEwEelc NouNuF0CEUkZn0bCcqmNLo+VrBgHRhbGemL8Ve1kax9Qsd2iKyySADLDrv/SOszT MEKHyfMC0W5QCQ/Nt5eCJY/uon+kcHX2XfQd4IBsfZmgOZNKrN8IUfG05gLjeG4E m/d76jTwXAkndsbyFBul6FdGellYAtg2z5W6b+NPX9RXcvFB+6TjtQuI0wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPgWhlko7u7ly8kvTE04rlxgHe4KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzY4YjFi Zi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIzYWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJm LThmNDgtNDE2OS1hOWEyLTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlN VFRpdVhHQWQ3Z28ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvR1TAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAhsswDQYJKoZIhvcNAQELBQADggEBAECpNGbFqBiw0UeHZjYc6PrKKeOPLHU0 mTB/yrQsE+7CV3844GNxPo89F9C9QG5nfj+ypvOsYanAbvzW0ziji8bIwwTS4KRi 7wJQvxNqgxR1VRJTBxzmglwsaXa+nTkJhSJ7hPpne2kR2hlqChWH7rabf3Oafm3n QoTcTFjvX9naAT3HTAaj/pQfSCOd3837vyQIWRtWoYmBe/vZhIQagJJhmNh4CvmF xcFAeO07jcUKo8nku/L/uEaH4zzbJpcfKFtSLuITUD+IY8LFTTOrd1+s+lfVlpUY i82VOYoGo7xVc1NNlOpl2BMW8N1zgJDZDvDcWcvwLc8zw9LzBCTqv/A= -----END CERTIFICATE-----Generated at Mon Jan 26 05:10:03 2026 by rpki-client