This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer (raw, json) Hash identifier: BXiAYdgf7KytIS9X3HT45u8AjMhjW/nBClrwBQ6RLhI= Subject key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC4CD345CFD578E9F6962223A4055 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203316 AS: 215202 AS: 215918 IP: 81.85.59.0/24 IP: 185.138.212.0/22 IP: 2a03:a7a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c4:cd:34:5c:fd:57:8e:9f:69:62:22:3a:40:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:88:fa:ea:67:7b:71:95:16:cf:25:26:c2:39: 0e:86:0b:39:95:a2:e8:f4:32:3f:07:06:44:12:5b: 6e:75:e5:d9:fe:2e:65:05:64:92:96:70:18:ff:8b: 3b:f6:62:99:d6:da:83:c5:35:5b:99:06:46:a4:a3: e0:ee:99:12:eb:12:23:79:f7:24:b9:87:3b:ba:d2: 74:5a:4f:f2:2c:4d:94:22:4a:12:f1:73:58:6b:b4: 62:71:26:25:b4:c4:79:9a:67:84:56:44:37:9b:2b: 99:ce:60:1a:3e:a3:d8:ba:49:7e:cd:86:1a:41:ad: 2a:cc:fe:78:4e:96:63:c3:47:b4:98:cb:da:15:88: 6c:fa:7e:83:58:92:b8:2e:15:12:3e:9e:91:26:8c: 46:cf:31:47:f1:82:c0:34:b6:4d:e7:e4:4e:32:5c: 20:58:62:1b:b1:69:43:48:f2:42:81:d7:98:84:51: 57:2e:ef:e8:79:d7:e5:fd:fb:84:4a:62:7b:98:2d: 88:69:b3:af:c1:a0:d0:82:c9:98:d2:17:c5:ec:79: 6c:b4:19:0d:6c:e3:06:74:d1:1c:ab:44:e0:59:1f: 1b:66:d6:a2:e6:b2:1c:39:3f:35:ad:74:14:f5:33: 8d:1f:08:ac:61:11:0d:23:09:1d:21:60:7e:b4:3f: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.59.0/24 185.138.212.0/22 IPv6: 2a03:a7a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203316 215202 215918 Signature Algorithm: sha256WithRSAEncryption 93:d3:0e:5a:56:35:f0:79:45:84:14:02:5a:30:fa:0c:86:94: 4e:a2:87:c0:ae:b3:2e:76:63:c4:0e:c8:56:a6:a2:7b:4a:f1: bb:f3:d8:c2:c3:f7:54:de:d4:22:d3:53:a2:c4:6e:55:ba:d5: 65:00:dc:73:6f:e4:59:26:e6:35:f1:a6:da:ee:19:78:dd:4b: 62:a6:23:38:e5:43:33:e2:df:6c:fa:c3:99:89:08:47:d8:e0: 10:80:38:d7:39:4d:93:29:28:5a:5c:8d:e0:d2:61:de:6b:e0: 99:84:49:c7:c9:4c:ec:3a:05:83:e8:62:91:73:ca:3e:39:9b: 0f:c5:19:73:27:bb:63:2a:8d:1f:a8:c3:16:16:b0:26:04:d5: 0c:0a:f6:55:f7:fa:29:ca:b7:8a:db:c9:3d:91:f0:fa:b5:cd: 10:c8:f5:be:c5:a7:7c:b6:47:fc:db:f6:9a:be:b0:c2:fc:e7: 22:c3:1b:c7:72:09:cc:2a:74:21:5d:79:0c:99:3e:6f:89:5e: e2:61:fb:0d:9b:9a:2b:8e:0d:2a:dd:0c:78:c1:17:e9:11:67: 1d:dc:57:31:6b:2e:49:48:66:aa:f6:14:b9:2a:90:b0:77:51: e6:d1:1c:75:fb:42:2c:ce:fb:29:dd:34:35:eb:14:4e:e8:50: 48:ca:06:04 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt87MTNNFz9V46faWIiOkBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY4Y2Q1ZDI0YTA4YjVhOGFmYjU3YzllNjA0ZDE5M2JjOGNhZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4j66md7cZUWzyUmwjkOhgs5laLo 9DI/BwZEEltudeXZ/i5lBWSSlnAY/4s79mKZ1tqDxTVbmQZGpKPg7pkS6xIjefck uYc7utJ0Wk/yLE2UIkoS8XNYa7RicSYltMR5mmeEVkQ3myuZzmAaPqPYukl+zYYa Qa0qzP54TpZjw0e0mMvaFYhs+n6DWJK4LhUSPp6RJoxGzzFH8YLANLZN5+ROMlwg WGIbsWlDSPJCgdeYhFFXLu/oedfl/fuESmJ7mC2IabOvwaDQgsmY0hfF7HlstBkN bOMGdNEcq0TgWR8bZtai5rIcOT81rXQU9TONHwisYRENIwkdIWB+tD/82QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFPv4zV0koItaivtXyeYE0ZO8jK4gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2ViM2U5 Yi02ZGI1LTQ2YzYtOWFhMS1lYjg3ODY5YmQxYzkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTli LTZkYjUtNDZjNi05YWExLWViODc4NjliZDFjOS8xLzEtX2pOWFNTZ2kxcUstMWZK NWdUUms3eU1yaUEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAFFVOwMEArmK1DANBAIAAjAHAwUAKgOnoDAk BggrBgEFBQcBCAEB/wQVMBOgETAPAgMDGjQCAwNIogIDA0tuMA0GCSqGSIb3DQEB CwUAA4IBAQCT0w5aVjXweUWEFAJaMPoMhpROoofArrMudmPEDshWpqJ7SvG789jC w/dU3tQi01OixG5VutVlANxzb+RZJuY18aba7hl43UtipiM45UMz4t9s+sOZiQhH 2OAQgDjXOU2TKShaXI3g0mHea+CZhEnHyUzsOgWD6GKRc8o+OZsPxRlzJ7tjKo0f qMMWFrAmBNUMCvZV9/opyreK28k9kfD6tc0QyPW+xad8tkf82/aavrDC/OciwxvH cgnMKnQhXXkMmT5viV7iYfsNm5orjg0q3Qx4wRfpEWcd3Fcxay5JSGaq9hS5KpCw d1Hm0Rx1+0Iszvsp3TQ16xRO6FBIygYE -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:31 2026 by rpki-client