This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer (raw, json) Hash identifier: RZzHS9qUg3FAqptBqEbjx/A8XE9p8hAiUHBIOBGRYuM= Subject key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFB4D7CE2B4F340D9E3EF4FB5DEF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198990 IP: 66.51.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:4d:7c:e2:b4:f3:40:d9:e3:ef:4f:b5:de:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:dd:22:19:c2:f2:00:13:f7:48:26:d2:be: af:b7:64:49:52:26:b7:86:ef:af:ce:32:0d:0c:9c: 56:ea:06:fb:9a:a3:c1:80:db:6e:b8:3e:32:f5:00: fa:e9:aa:f5:57:b7:cf:69:7b:dc:8d:42:5b:81:1f: b7:77:ee:fb:dc:9d:73:be:ab:89:bc:2b:e5:2e:0a: 0b:40:e9:85:92:02:73:31:f5:af:9b:a6:81:b4:cd: 8d:b3:89:df:3e:c8:41:fb:e6:7b:7a:f1:0b:2a:5e: 6d:aa:53:0c:77:2a:9c:f1:7a:52:2e:6d:0c:ab:4c: 01:b3:23:06:9e:02:bf:10:b1:25:5d:6e:6f:38:bc: 3d:f4:47:f4:4b:09:46:1a:94:35:3b:f5:c8:95:e6: d4:59:ea:c8:a2:d2:db:eb:fe:41:5d:c3:aa:b9:b2: 00:6e:d0:98:c8:15:b2:7a:fe:04:ac:bc:cc:7c:63: 56:0e:96:4a:08:c5:e1:8c:0f:3c:4c:b9:8a:b8:05: 49:a2:84:d0:4c:a5:d7:70:1f:bb:64:7d:df:c3:29: db:87:8e:7c:f6:51:18:8d:b9:98:d8:96:b6:fa:9a: 82:f3:66:71:16:50:ef:2c:f5:bf:3b:d0:4e:06:d4: 6c:92:7a:60:ae:88:8c:ad:36:a3:90:78:37:5c:e9: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.51.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198990 Signature Algorithm: sha256WithRSAEncryption a6:3c:5b:22:6e:5b:27:b3:1f:b7:26:ad:9b:69:5b:67:78:77: d0:8a:6b:2b:55:ae:61:32:29:5e:ac:f6:92:c1:a5:8a:a1:84: e2:fb:5a:4b:34:c5:4e:3d:07:31:2e:ce:a6:b3:8a:0d:81:be: fe:4a:b9:c3:13:df:2d:e5:4f:04:6e:4a:e1:39:de:3d:86:51: 6e:29:73:6f:85:64:3f:26:d8:dd:5c:4d:32:8d:2c:ed:53:71: be:55:f1:9e:7c:90:ae:d0:2c:35:29:dc:80:d2:a2:6a:2c:b6: e1:12:0a:e3:1c:c8:9f:bd:2e:7c:01:88:b2:94:57:2e:18:e9: 5a:35:f3:2a:9e:88:7c:d7:76:23:ad:98:fc:2c:9d:46:ea:f3: 27:69:0b:30:49:94:f6:9c:5f:49:ee:b7:48:58:94:d7:02:f3: d6:32:c0:78:d2:2b:aa:b8:37:61:0b:1a:f5:43:58:59:22:03: 2d:c2:56:cd:b8:cf:08:a5:55:09:97:1d:84:53:96:44:db:14: c3:30:0b:4d:9c:3b:b5:c1:09:f5:48:92:25:22:16:a4:b2:6d: f4:e6:9c:ad:b7:08:6c:4d:65:03:0b:67:54:b7:eb:21:b6:0d: fa:a1:ec:7b:42:a2:bf:34:7c:c6:01:0c:1c:a5:b0:00:82:58: 32:a5:ed:7b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9WvtNfOK080DZ4+9Ptd70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGJhNDFiNmFkNmU2Mzc4MGVjM2YxMjE2MGU3YzRlZDBmNzQ2OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxHdIhnC8gAT90gm0r6vt2RJUia3 hu+vzjINDJxW6gb7mqPBgNtuuD4y9QD66ar1V7fPaXvcjUJbgR+3d+773J1zvquJ vCvlLgoLQOmFkgJzMfWvm6aBtM2Ns4nfPshB++Z7evELKl5tqlMMdyqc8XpSLm0M q0wBsyMGngK/ELElXW5vOLw99Ef0SwlGGpQ1O/XIlebUWerIotLb6/5BXcOqubIA btCYyBWyev4ErLzMfGNWDpZKCMXhjA88TLmKuAVJooTQTKXXcB+7ZH3fwynbh458 9lEYjbmY2Ja2+pqC82ZxFlDvLPW/O9BOBtRsknpgroiMrTajkHg3XOkf9QIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPi6QbatbmN4DsPxIWDnxO0PdGmsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzgzZWU2 Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5ZjgxZGUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZm LWVlODMtNDQ0Yi1iZGM2LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0Vo WU9mRTdROTBhYXcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAkIzYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDCU4wDQYJKoZIhvcNAQELBQADggEBAKY8WyJuWyezH7cmrZtpW2d4d9CKaytV rmEyKV6s9pLBpYqhhOL7Wks0xU49BzEuzqazig2Bvv5KucMT3y3lTwRuSuE53j2G UW4pc2+FZD8m2N1cTTKNLO1Tcb5V8Z58kK7QLDUp3IDSomostuESCuMcyJ+9LnwB iLKUVy4Y6Vo18yqeiHzXdiOtmPwsnUbq8ydpCzBJlPacX0nut0hYlNcC89YywHjS K6q4N2ELGvVDWFkiAy3CVs24zwilVQmXHYRTlkTbFMMwC02cO7XBCfVIkiUiFqSy bfTmnK23CGxNZQMLZ1S36yG2Dfqh7HtCor80fMYBDBylsACCWDKl7Xs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:49 2026 by rpki-client