This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer (raw, json) Hash identifier: UlZzYGHf2Ou6pC98L/bJfRtpnVkID5pUJZLEoWRsG44= Subject key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1212D29943DBDCD2B7B8B010103AA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.228.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:12:d2:99:43:db:dc:d2:b7:b8:b0:10:10:3a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:79:1a:c1:9b:2e:a1:5c:09:21:9e:ef:5c: 1a:94:c5:6d:68:19:1d:a2:fb:6f:a1:eb:4c:77:e3: 21:17:9c:51:d0:bb:18:c1:ba:b4:52:d9:93:15:b2: 93:12:d5:09:b1:8f:08:26:51:84:73:f8:53:bc:68: 2b:dc:6a:a3:fc:23:c5:c6:ff:ad:d8:5c:02:43:45: d4:0f:2d:8f:0f:a7:a0:18:57:7d:44:d4:74:83:6d: d9:30:4e:6d:df:8e:e3:74:85:a5:fe:a4:ee:f5:c3: 1b:35:0f:29:f3:18:94:5b:d1:8a:eb:be:77:82:50: 8c:9a:20:0f:c5:62:50:52:7e:77:0f:2a:d2:0d:8e: 41:88:0e:cb:67:74:d9:9a:05:d5:59:a8:0f:ab:5b: 01:8a:ef:91:1c:85:d5:3f:39:3a:0f:cb:ba:a1:7f: 90:32:7f:f6:20:88:50:b1:78:e2:11:de:1a:58:47: 6e:dd:74:ef:82:f4:2f:b0:a7:a5:d7:4c:36:5e:0d: c6:9b:d3:fd:5b:5a:60:a9:0a:a2:26:74:72:4f:9c: d5:d8:e7:1b:d2:af:54:4a:54:dc:10:b5:45:01:b4: 3b:c1:3a:5d:9b:be:e4:48:ec:65:bc:73:cf:75:1b: e0:17:45:a5:1d:76:08:cb:88:11:a8:09:b7:60:1e: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.36.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:64:90:9b:b1:7e:36:a6:8d:0b:ac:12:f3:71:32:04:42:e9: ad:e7:3a:cc:26:d7:6b:69:82:79:ee:b6:ae:62:9e:b8:f2:b2: 24:ef:8a:27:f0:29:1f:32:3b:43:b2:7d:b3:4c:aa:f3:ae:03: 83:4b:79:27:22:d9:a2:b0:5f:82:8b:3b:36:44:48:75:5a:5d: 13:74:c0:78:ba:1e:e9:c1:b0:52:12:bd:37:d3:91:c7:03:d9: 06:de:b2:68:09:6c:6c:ee:da:ed:24:be:cb:22:77:00:b0:1f: 1d:5b:97:fd:ed:d3:bc:f9:85:21:8e:3f:e2:c7:e6:e4:72:40: 25:4c:5e:0b:b8:1d:a6:d6:86:7c:b9:87:8c:6f:a7:33:54:e3: 45:42:a0:53:57:87:c6:4e:82:26:0d:db:b2:94:d8:b0:7c:cd: 4b:71:67:24:c0:bd:1c:11:2a:1b:91:fd:2f:4c:ae:fe:ae:25: bd:e0:77:2c:ac:65:b4:c4:cf:35:9c:07:c0:26:5d:bb:9d:04: d1:08:9e:4b:a6:aa:93:55:91:65:e8:e4:93:5e:dd:09:a9:78: 40:8c:ab:1a:2c:ac:58:2f:e3:c6:70:76:0d:56:17:e1:b9:63: 05:d7:fe:67:3e:e5:94:1f:08:6b:1d:a7:06:e0:d5:40:4c:2a: d9:bc:17:aa -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt8EhLSmUPb3NK3uLAQEDqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTU4N2M1YjBkNDE1NTE2ZDcyZjU5MTRmNWY1ZmI1MjhhMzJhMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEl5GsGbLqFcCSGe71walMVtaBkd ovtvoetMd+MhF5xR0LsYwbq0UtmTFbKTEtUJsY8IJlGEc/hTvGgr3Gqj/CPFxv+t 2FwCQ0XUDy2PD6egGFd9RNR0g23ZME5t347jdIWl/qTu9cMbNQ8p8xiUW9GK6753 glCMmiAPxWJQUn53DyrSDY5BiA7LZ3TZmgXVWagPq1sBiu+RHIXVPzk6D8u6oX+Q Mn/2IIhQsXjiEd4aWEdu3XTvgvQvsKel10w2Xg3Gm9P9W1pgqQqiJnRyT5zV2Ocb 0q9USlTcELVFAbQ7wTpdm77kSOxlvHPPdRvgF0WlHXYIy4gRqAm3YB6twwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPlYfFsNQVUW1y9ZFPX1+1KKMqEsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2Y3ZDA3 MC0zMjgxLTQ3YjctODVjOC04ZmI2MjQzOTRlN2EvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjdkMDcw LTMyODEtNDdiNy04NWM4LThmYjYyNDM5NGU3YS8xLzEtVmg4V3cxQlZSYlhMMWtV OWZYN1Vvb3lvU3cubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEArnkJDANBgkqhkiG9w0BAQsFAAOCAQEAW2SQ m7F+NqaNC6wS83EyBELprec6zCbXa2mCee62rmKeuPKyJO+KJ/ApHzI7Q7J9s0yq 864Dg0t5JyLZorBfgos7NkRIdVpdE3TAeLoe6cGwUhK9N9ORxwPZBt6yaAlsbO7a 7SS+yyJ3ALAfHVuX/e3TvPmFIY4/4sfm5HJAJUxeC7gdptaGfLmHjG+nM1TjRUKg U1eHxk6CJg3bspTYsHzNS3FnJMC9HBEqG5H9L0yu/q4lveB3LKxltMTPNZwHwCZd u50E0QieS6aqk1WRZejkk17dCal4QIyrGiysWC/jxnB2DVYX4bljBdf+Zz7llB8I ax2nBuDVQEwq2bwXqg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:39 2026 by rpki-client