This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.cer (raw, json) Hash identifier: v2pqGyuYOfkGlMQ/Ouj/0PS2awm9x8SgY3qDBZsNsdM= Subject key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EEDDCE4F2DA8FA0394C07FAE14D63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58092 IP: 193.102.78.0/23 IP: 194.62.20.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ed:dc:e4:f2:da:8f:a0:39:4c:07:fa:e1:4d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f89e229f860b058d23fd28a2926161b8786330c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:fb:be:14:52:88:fd:a9:ae:8e:99:ae:c2: 2c:85:45:54:78:a9:31:54:ae:47:d4:eb:f3:4e:af: 3c:20:c7:d9:b2:1c:12:2e:ba:d8:75:f6:1d:8e:ba: 6b:f9:3b:ad:0e:bb:e2:cf:fd:c2:f8:5f:6d:0d:af: 9e:a5:25:5c:e3:6b:77:3b:3e:cb:13:12:1e:f7:bb: 12:b4:85:ad:10:b0:1a:08:45:3c:71:23:ea:70:a3: 78:43:04:b5:ea:65:1d:10:6a:50:ff:af:9b:5c:5f: 14:c9:a5:f7:cd:f8:ae:9f:a4:77:c8:4a:89:f8:d9: a0:20:42:cd:a7:7e:d5:90:2d:2d:65:d4:f6:da:97: 88:38:e4:74:36:75:36:0f:50:ad:e9:c3:50:0c:60: e4:81:34:53:71:11:60:d6:e2:53:1d:93:ba:ef:ac: f5:8e:df:ee:33:48:03:29:38:32:d4:ee:23:ad:e3: 39:74:6c:c0:65:83:c6:6c:7c:b3:e1:74:f8:ec:26: 3a:02:c5:b8:42:bb:f3:d8:c2:ce:88:45:57:a3:86: 27:08:4c:96:d5:e0:df:6c:1c:1f:c3:e2:11:22:83: dc:bb:ed:70:1a:3d:74:d4:96:3e:d6:0e:bb:16:8d: 28:55:b6:8e:df:38:de:7d:d5:71:b4:63:6a:be:5f: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.102.78.0/23 194.62.20.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58092 Signature Algorithm: sha256WithRSAEncryption 1e:3a:de:09:27:d3:73:a8:f1:c9:7a:c0:a8:37:68:62:02:bd: f4:73:4b:dc:95:87:94:0d:fd:18:f2:f7:59:01:22:35:e7:e0: 6e:66:37:7d:ac:b0:18:6f:dc:30:96:f7:ff:7d:ab:d7:53:45: ac:69:6c:c4:e0:e2:56:b5:42:92:17:62:5e:73:fc:3f:22:03: 12:27:a4:c2:7c:7b:3b:b1:84:85:e0:3e:ce:26:8d:4e:17:73: d5:4f:98:aa:ef:47:52:65:bc:3d:c6:a7:54:48:72:39:12:83: 3f:2d:e5:14:18:40:c4:c4:61:d6:fd:fd:62:06:79:d3:07:08: b2:af:51:2e:cb:cb:0d:25:54:61:06:af:ff:c5:49:d2:b0:a4: 63:48:56:e5:d9:4d:42:5e:7b:7c:20:45:8a:47:db:24:8f:f8: 2b:ae:cd:87:64:fb:fe:7d:7c:88:2a:bb:b6:17:3c:35:89:9e: 3b:9b:c3:0d:ba:e8:fc:0b:29:b2:1d:04:b0:10:48:db:1d:87: b7:6e:75:fb:22:f1:ce:6f:e3:74:6a:a0:41:39:97:35:bc:c3: 67:0d:c7:49:8e:39:29:c6:b7:55:b5:82:5d:ac:bf:b9:3b:7e: 92:25:fa:62:a6:91:8f:b0:cd:a7:46:c8:be:03:d6:42:c8:aa: 5a:e8:75:fd -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt8fu3c5PLaj6A5TAf64U1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODllMjI5Zjg2MGIwNThkMjNmZDI4YTI5MjYxNjFiODc4NjMzMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqD7vhRSiP2pro6ZrsIshUVUeKkx VK5H1OvzTq88IMfZshwSLrrYdfYdjrpr+TutDrviz/3C+F9tDa+epSVc42t3Oz7L ExIe97sStIWtELAaCEU8cSPqcKN4QwS16mUdEGpQ/6+bXF8UyaX3zfiun6R3yEqJ +NmgIELNp37VkC0tZdT22peIOOR0NnU2D1Ct6cNQDGDkgTRTcRFg1uJTHZO676z1 jt/uM0gDKTgy1O4jreM5dGzAZYPGbHyz4XT47CY6AsW4Qrvz2MLOiEVXo4YnCEyW 1eDfbBwfw+IRIoPcu+1wGj101JY+1g67Fo0oVbaO3zjefdVxtGNqvl8oqwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPieIp+GCwWNI/0oopJhYbh4YzDGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzhjY2Ez My1jMmIxLTQ1NDEtOWVmMi1hYTBlYjUzZTkwYjkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvOGNjYTMz LWMyYjEtNDU0MS05ZWYyLWFhMGViNTNlOTBiOS8xLzEtSjRpbjRZTEJZMGpfU2lp a21GaHVIaGpNTVkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAcFmTgMEAMI+FDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA4uwwDQYJKoZIhvcNAQELBQADggEBAB463gkn03Oo8cl6wKg3aGIC vfRzS9yVh5QN/Rjy91kBIjXn4G5mN32ssBhv3DCW9/99q9dTRaxpbMTg4la1QpIX Yl5z/D8iAxInpMJ8ezuxhIXgPs4mjU4Xc9VPmKrvR1JlvD3Gp1RIcjkSgz8t5RQY QMTEYdb9/WIGedMHCLKvUS7Lyw0lVGEGr//FSdKwpGNIVuXZTUJee3wgRYpH2ySP +CuuzYdk+/59fIgqu7YXPDWJnjubww266PwLKbIdBLAQSNsdh7dudfsi8c5v43Rq oEE5lzW8w2cNx0mOOSnGt1W1gl2sv7k7fpIl+mKmkY+wzadGyL4D1kLIqlrodf0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:50 2026 by rpki-client