This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.cer (raw, json) Hash identifier: V6CwicPaure6yD9QY19uZjF5f3+6zhcnFNLRjBEAx+g= Subject key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A24EE19EF110579F688099B56022B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 131.117.224.0/19 IP: 185.21.136.0/22 IP: 2a04:1160::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4e:e1:9e:f1:10:57:9f:68:80:99:b5:60:22:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:7e:b3:a6:20:ec:dd:48:d8:66:80:62:ad: 8f:4d:fa:b1:8f:90:0a:89:69:f4:a0:0b:37:e6:0d: 10:08:02:9d:af:c0:b7:c2:87:19:0a:a0:87:20:52: 1a:ef:2a:14:70:6c:aa:d4:4d:6d:72:f8:31:dd:52: 8d:65:66:7a:61:46:23:d9:6d:fc:3e:60:8a:f7:99: 00:44:0f:5e:4e:32:6d:10:4d:03:df:49:8f:1d:f4: 45:b8:9f:50:2d:be:23:13:0e:51:bc:59:eb:7a:b5: b1:75:7f:11:f9:3c:0b:31:6d:14:85:cd:24:5c:1f: 58:73:2d:6e:5a:91:7d:ce:1a:e2:8e:4e:a5:18:c4: ae:7e:ed:9b:d8:06:86:d2:a1:87:41:3c:2b:8c:c4: 37:08:68:bb:5d:4f:21:33:2e:66:37:8d:5f:6b:d6: 9a:d0:9a:c4:45:4b:1c:e7:99:21:10:9c:3c:cf:1e: 90:75:32:11:06:a9:73:ec:ce:fb:f9:cc:66:57:a6: 0e:b9:ae:35:9d:17:9f:89:fd:1e:e8:31:20:05:b4: 3b:a7:dc:f5:27:dc:9b:81:77:ee:03:26:05:3e:33: 0f:17:68:40:1e:93:d6:e8:1d:bb:03:d2:26:0d:0a: 1a:e1:b4:af:81:4e:f7:88:9a:9e:c2:d8:d9:46:c5: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.117.224.0/19 185.21.136.0/22 IPv6: 2a04:1160::/31 Signature Algorithm: sha256WithRSAEncryption 8c:60:43:c9:23:d2:e1:db:8a:91:3b:e6:ce:ab:48:07:a7:73: 11:5b:10:0e:b7:1f:eb:d8:80:79:e0:0f:3b:f2:3b:c6:5b:42: b5:b9:35:7b:72:fb:16:9e:87:44:49:a4:a6:b3:39:00:a0:4c: 69:da:f7:f6:2d:02:95:45:a5:7e:70:b4:1c:af:f2:48:7f:b2: 21:a8:22:b4:9d:13:1c:f7:ac:08:75:75:b7:6a:a3:a4:b1:a1: c1:cc:17:70:d4:b5:ae:14:c5:44:a7:1b:55:e7:85:1d:48:2d: 5b:b6:6b:23:83:f1:b2:c2:b8:9f:0c:b0:d7:5b:12:1d:0a:e6: 99:c1:fb:8a:5d:14:6e:39:c3:c0:8a:f8:ff:2f:05:ab:16:3d: a4:a3:4e:fd:69:be:38:0a:b9:01:f7:84:d4:ba:e5:18:58:d8: 36:0e:4c:9d:ae:9f:f0:79:33:da:77:24:38:af:ea:42:70:5a: 9a:c3:5a:49:36:95:03:34:9c:69:6e:50:74:51:cf:d8:4d:3f: f9:b2:85:72:bf:9b:60:dd:27:9a:e7:c9:ca:11:1c:18:2a:14: b1:51:24:85:26:91:c0:d1:e0:d8:9f:d6:b4:99:81:46:94:85: f4:9d:7d:21:63:f2:2d:99:25:46:3c:e4:eb:52:ab:9e:79:df: ca:c3:3d:83 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt4ok7hnvEQV59ogJm1YCK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOThhMDJkMjBjNmI3ZGUzNTcxMjVmMzhiMTczNWNhMWI5MWY4N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bN+s6Yg7N1I2GaAYq2PTfqxj5AK iWn0oAs35g0QCAKdr8C3wocZCqCHIFIa7yoUcGyq1E1tcvgx3VKNZWZ6YUYj2W38 PmCK95kARA9eTjJtEE0D30mPHfRFuJ9QLb4jEw5RvFnrerWxdX8R+TwLMW0Uhc0k XB9Ycy1uWpF9zhrijk6lGMSufu2b2AaG0qGHQTwrjMQ3CGi7XU8hMy5mN41fa9aa 0JrERUsc55khEJw8zx6QdTIRBqlz7M77+cxmV6YOua41nRefif0e6DEgBbQ7p9z1 J9ybgXfuAyYFPjMPF2hAHpPW6B27A9ImDQoa4bSvgU73iJqewtjZRsWaNwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFPmKAtIMa33jVxJfOLFzXKG5H4ezMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2E5MjA2 ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQzY2QvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZl LWMxZTEtNGMxNS05NTMzLWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0 c1hOY29ia2ZoN00ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEBYN14AMEArkViDANBAIAAjAHAwUBKgQRYDAN BgkqhkiG9w0BAQsFAAOCAQEAjGBDySPS4duKkTvmzqtIB6dzEVsQDrcf69iAeeAP O/I7xltCtbk1e3L7Fp6HREmkprM5AKBMadr39i0ClUWlfnC0HK/ySH+yIagitJ0T HPesCHV1t2qjpLGhwcwXcNS1rhTFRKcbVeeFHUgtW7ZrI4PxssK4nwyw11sSHQrm mcH7il0UbjnDwIr4/y8FqxY9pKNO/Wm+OAq5AfeE1LrlGFjYNg5Mna6f8Hkz2nck OK/qQnBamsNaSTaVAzScaW5QdFHP2E0/+bKFcr+bYN0nmufJyhEcGCoUsVEkhSaR wNHg2J/WtJmBRpSF9J19IWPyLZklRjzk61KrnnnfysM9gw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:28 2026 by rpki-client