This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.cer (raw, json) Hash identifier: Xy+XLGNuQJ9age458m06FeubFn+pToUAgdcnlrQbJJ0= Subject key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38649BEDF036AC2CD0A24E502B3A62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28853 IP: 193.138.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:64:9b:ed:f0:36:ac:2c:d0:a2:4e:50:2b:3a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:ef:49:27:41:8c:65:ac:b3:2d:2f:77:bd: b8:80:11:95:0b:11:f7:5c:47:23:3c:a4:4a:5a:d6: c6:f8:a1:ac:01:04:40:9c:68:75:bd:b7:03:f7:5e: ae:79:5f:96:3f:72:ba:d4:12:fe:65:7a:a8:3e:5b: 51:a3:47:e8:17:e7:4c:e3:4c:7f:61:85:2a:d9:05: 1a:a4:b4:4f:b3:c6:d8:d0:6d:92:85:32:a6:52:cc: 92:f7:d5:28:10:58:a2:1d:dc:49:e1:42:6b:40:86: 90:ae:e0:05:13:de:ab:e6:d4:76:77:89:dc:ce:c5: c7:a4:f0:fb:f3:a6:c0:cc:2f:1c:43:60:0f:8d:5a: c9:c9:35:e0:ab:65:d8:7f:aa:85:61:b9:18:d9:02: ed:f3:86:da:ed:4c:46:05:15:fb:74:aa:4a:12:74: 74:3e:42:77:a1:94:1d:81:e0:34:7f:2f:12:4f:70: 0c:60:5c:79:c6:99:4a:3b:e8:5f:c7:7e:70:ab:68: ab:00:7c:bd:c9:11:32:bc:09:c9:10:42:6f:e9:67: 0c:e9:9c:a0:93:f4:59:1f:aa:3f:01:37:88:f0:75: 06:26:ef:24:b8:d8:ff:89:c0:ac:79:32:7c:23:b9: 6f:73:7f:ba:92:6c:2d:cc:ee:1d:90:49:f6:e2:b1: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28853 Signature Algorithm: sha256WithRSAEncryption 69:31:7c:8c:4e:0a:49:98:c8:a6:bf:ff:a4:19:b6:a7:4c:7e: e9:70:8b:74:6f:04:37:96:de:2a:59:b6:f8:ae:6d:59:b5:f8: e6:30:15:15:a7:76:8e:bf:cb:23:5e:9d:79:5a:b5:4a:d8:da: 7b:1a:59:d2:21:59:1b:65:ee:8b:24:61:17:4e:b5:34:dd:c3: e8:b3:35:c1:81:a2:38:dd:2c:9c:08:2a:65:50:29:6d:6e:63: 83:a8:c6:b4:82:b4:47:94:3d:9f:f0:e5:c7:50:fb:f7:c7:fd: e4:67:92:2b:5e:6e:b3:da:8b:fd:4d:35:ea:20:2d:9e:e9:fa: 79:43:ab:b7:02:09:ce:4f:db:54:d4:8e:e9:df:ec:46:b3:98: 7e:a8:92:82:f7:75:22:40:48:6f:d2:42:49:99:0f:c8:17:aa: f0:79:91:f9:5f:34:98:31:63:60:44:52:82:a2:18:17:22:e6: 96:45:ef:ce:2e:44:2f:67:54:51:80:b8:36:ea:34:00:8d:6c: cf:b8:d4:47:d7:5b:f6:fe:57:6d:fe:49:21:4b:52:f5:2f:af: 7c:da:ea:8b:f5:03:71:99:e7:cb:99:0b:4e:66:ad:cb:3b:52: 01:ee:c7:e9:20:34:26:8f:6a:0e:32:f5:ca:d9:6a:c4:fc:93: d9:a7:91:45 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OGSb7fA2rCzQok5QKzpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODlkZjU2MjQ4Zjk3NzdmYTIyZDVkYTZjMDRiNWZiMzMyYTRiMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlybvSSdBjGWssy0vd724gBGVCxH3 XEcjPKRKWtbG+KGsAQRAnGh1vbcD916ueV+WP3K61BL+ZXqoPltRo0foF+dM40x/ YYUq2QUapLRPs8bY0G2ShTKmUsyS99UoEFiiHdxJ4UJrQIaQruAFE96r5tR2d4nc zsXHpPD786bAzC8cQ2APjVrJyTXgq2XYf6qFYbkY2QLt84ba7UxGBRX7dKpKEnR0 PkJ3oZQdgeA0fy8ST3AMYFx5xplKO+hfx35wq2irAHy9yREyvAnJEEJv6WcM6Zyg k/RZH6o/ATeI8HUGJu8kuNj/icCseTJ8I7lvc3+6kmwtzO4dkEn24rG3nQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPid9WJI+Xd/oi1dpsBLX7MypLNQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2Q0NmQy NS01ZDhmLTQ5ODktYjU1Ny1jMTZiYWVkZjZmYTYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1 LTVkOGYtNDk4OS1iNTU3LWMxNmJhZWRmNmZhNi8xLzEtSjMxWWtqNWQzLWlMVjJt d0V0ZnN6S2tzMUEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGKZzAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJwtTANBgkqhkiG9w0BAQsFAAOCAQEAaTF8jE4KSZjIpr//pBm2p0x+6XCLdG8E N5beKlm2+K5tWbX45jAVFad2jr/LI16deVq1StjaexpZ0iFZG2XuiyRhF061NN3D 6LM1wYGiON0snAgqZVApbW5jg6jGtIK0R5Q9n/Dlx1D798f95GeSK15us9qL/U01 6iAtnun6eUOrtwIJzk/bVNSO6d/sRrOYfqiSgvd1IkBIb9JCSZkPyBeq8HmR+V80 mDFjYERSgqIYFyLmlkXvzi5EL2dUUYC4Nuo0AI1sz7jUR9db9v5Xbf5JIUtS9S+v fNrqi/UDcZnny5kLTmatyztSAe7H6SA0Jo9qDjL1ytlqxPyT2aeRRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:33 2026 by rpki-client