This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer (raw, json) Hash identifier: UmF8gNa+Hmbiv7Z45LP/ly1gR0UwNbrWbfJc7LE969M= Subject key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA59A72E643EFB291A5C4D13FF7CCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48418 IP: 185.254.32.0/23 IP: 185.254.35.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:59:a7:2e:64:3e:fb:29:1a:5c:4d:13:ff:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9629775283733a45c454b8d7be5a66df0db1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:30:44:42:af:ac:52:6a:be:84:7a:72:0b: 39:19:16:bc:2e:9d:90:14:0c:4f:4f:ce:99:86:f0: 24:1a:df:1d:69:44:1a:22:bd:00:18:96:6f:d2:f6: 3f:26:e4:b6:3c:f1:8f:7b:b2:8a:6f:98:86:70:4f: e7:0e:57:8b:7a:9d:94:02:7d:f8:11:1a:02:ea:1a: 0d:ae:6b:a6:91:55:a7:03:4e:6e:7e:71:fe:c0:03: e7:7a:e1:d9:19:97:73:5e:88:42:e1:c7:cc:19:4e: d9:1c:48:0b:2e:6c:cc:88:41:81:f0:8f:62:73:64: e2:36:4b:91:f8:98:48:4e:39:74:e0:b0:cc:2d:ce: 1b:77:63:9a:67:60:68:29:c3:09:90:ee:cc:86:06: 3d:a9:25:03:bf:51:f9:71:84:b5:1e:84:46:49:ab: 39:e9:35:0c:88:36:ce:9e:ea:2e:33:bc:f4:41:07: dc:6a:0c:03:df:42:69:31:e3:30:e3:e6:a9:74:5a: 43:0f:09:fe:f3:8b:34:d5:cd:ba:ee:dc:73:16:96: 91:aa:e2:ac:44:0c:ea:78:84:82:e6:0a:14:63:b5: e9:c8:f5:06:d5:20:1a:6e:44:50:66:b7:8e:38:92: e7:2d:d5:04:9c:c0:02:78:eb:a9:e8:20:19:3b:28: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.32.0/23 185.254.35.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48418 Signature Algorithm: sha256WithRSAEncryption 62:3d:58:c3:d1:d4:0f:04:0c:ed:ca:a1:dd:e4:41:26:11:eb: 71:38:c3:48:05:96:69:71:bc:f5:1a:30:69:00:b4:10:c2:b3: 48:a8:ed:f0:7d:47:e3:0f:78:69:3f:03:5c:31:40:3f:5f:46: e2:00:40:02:91:51:90:c0:7c:7b:7f:a4:c6:a8:7a:0c:1c:f9: a6:7c:6a:18:92:8a:cb:1c:6a:19:5f:b1:71:99:78:4f:c3:8b: 21:10:c8:30:70:2f:ad:7b:f2:fe:9b:bd:d9:1c:d6:4f:e7:50: 8c:54:e2:db:04:b0:4e:81:d2:f4:2e:cf:1d:b0:32:10:71:7a: 34:1a:83:b1:7e:e3:07:0f:16:15:70:25:22:d4:a2:d8:39:07: 5e:47:c4:58:13:af:76:00:b0:be:3f:0f:c4:9e:f1:a5:db:5d: a7:4d:09:4e:61:06:80:a2:a2:00:0f:17:62:1b:e4:d4:29:a2: 9b:d7:0e:f6:46:8f:85:3b:2f:83:b8:53:e2:53:76:fd:d1:d4: e2:dc:76:50:63:b0:b9:77:49:85:59:c8:b0:cb:4c:33:ed:51: f2:e7:aa:dc:48:b6:03:ac:dc:d3:12:15:13:19:b1:b7:44:6e: 13:11:1f:6e:76:28:5e:f9:7b:64:00:fb:3e:0e:e9:3e:98:8a: 8b:17:b0:e9 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt9ylmnLmQ++ykaXE0T/3zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTYyOTc3NTI4MzczM2E0NWM0NTRiOGQ3YmU1YTY2ZGYwZGIxYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9owREKvrFJqvoR6cgs5GRa8Lp2Q FAxPT86ZhvAkGt8daUQaIr0AGJZv0vY/JuS2PPGPe7KKb5iGcE/nDleLep2UAn34 ERoC6hoNrmumkVWnA05ufnH+wAPneuHZGZdzXohC4cfMGU7ZHEgLLmzMiEGB8I9i c2TiNkuR+JhITjl04LDMLc4bd2OaZ2BoKcMJkO7MhgY9qSUDv1H5cYS1HoRGSas5 6TUMiDbOnuouM7z0QQfcagwD30JpMeMw4+apdFpDDwn+84s01c267txzFpaRquKs RAzqeISC5goUY7XpyPUG1SAabkRQZreOOJLnLdUEnMACeOup6CAZOyjvDQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPlil3UoNzOkXEVLjXvlpm3w2xoXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2ViZmNl Ni0yODU3LTQwNGItOWI3NC1iMzI0ZTAyNWI5MjkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2 LTI4NTctNDA0Yi05Yjc0LWIzMjRlMDI1YjkyOS8xLzEtV0tYZFNnM002UmNSVXVO ZS1XbWJmRGJHaGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAbn+IAMEALn+IzAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMAvSIwDQYJKoZIhvcNAQELBQADggEBAGI9WMPR1A8EDO3Kod3kQSYR 63E4w0gFlmlxvPUaMGkAtBDCs0io7fB9R+MPeGk/A1wxQD9fRuIAQAKRUZDAfHt/ pMaoegwc+aZ8ahiSisscahlfsXGZeE/DiyEQyDBwL6178v6bvdkc1k/nUIxU4tsE sE6B0vQuzx2wMhBxejQag7F+4wcPFhVwJSLUotg5B15HxFgTr3YAsL4/D8Se8aXb XadNCU5hBoCiogAPF2Ib5NQpopvXDvZGj4U7L4O4U+JTdv3R1OLcdlBjsLl3SYVZ yLDLTDPtUfLnqtxItgOs3NMSFRMZsbdEbhMRH252KF75e2QA+z4O6T6YiosXsOk= -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:23 2026 by rpki-client