This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.cer (raw, json) Hash identifier: R8L9jYZ18ifDCZ2mHShn0AgiTUW6uE3lKcVo0vCEA2E= Subject key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36867318E4E2E924F96A06D79ECB84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215578 IP: 2001:67c:dc8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:86:73:18:e4:e2:e9:24:f9:6a:06:d7:9e:cb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:c2:cb:2a:b7:ce:84:14:46:ca:74:16:9c: ec:fc:ae:6b:55:f2:52:a3:c0:6e:dd:81:de:6f:82: a1:ad:b2:89:c6:3d:70:3a:80:a9:1c:ef:78:f2:6b: 03:4e:29:d4:33:ee:7e:e4:62:bb:87:41:c9:d5:a9: 72:ba:d2:e1:86:53:bb:8f:48:a1:30:3d:20:79:72: 65:b2:4c:61:d8:7d:ae:13:0c:f2:10:7f:91:a9:b3: c1:de:f1:a0:59:72:76:21:87:70:e2:e0:b4:24:5e: e8:60:1a:22:97:51:3f:a8:8f:c9:83:35:0f:16:37: aa:aa:6f:a5:96:24:f2:e3:ba:2b:c5:ae:c5:6a:1d: 38:94:f2:5f:3d:25:de:fe:45:0f:f8:32:27:e2:24: 97:ff:27:f3:e0:b3:c8:5d:37:5e:93:14:86:55:12: bb:47:11:41:34:26:a2:92:b2:9c:3a:9d:17:84:6a: 2a:08:95:47:dd:8d:fc:ee:9f:35:ed:82:f7:2e:fc: b3:52:8b:3d:b4:03:39:21:1a:dd:7b:d9:08:98:bb: 74:e1:95:35:b4:65:b5:1d:c5:24:00:71:e8:15:3e: 02:75:aa:0f:f5:2e:ff:6f:02:34:78:d9:c9:2b:b1: 3e:1a:0f:22:42:28:be:7d:75:f6:aa:4b:bd:3c:fb: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:dc8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215578 Signature Algorithm: sha256WithRSAEncryption a2:ea:d7:4a:cd:ac:a6:dc:64:b4:89:0f:4e:83:09:2c:86:2b: db:88:8b:3f:7a:ed:a8:24:26:40:ce:30:6f:43:37:e4:5d:dc: 88:b8:b8:f9:2a:0a:68:78:a0:56:84:90:c1:58:07:8f:14:68: c7:7e:3a:dc:9d:8a:c8:da:7e:29:53:84:f9:33:dc:39:4e:16: 84:f3:17:bb:35:13:00:cc:fc:e0:56:90:ea:8a:01:e2:6f:b8: f2:b4:bc:83:41:98:04:b2:1d:c0:69:2c:f5:40:d6:57:f0:73: 28:e5:05:9d:00:4d:fa:7b:16:2a:4b:6a:3d:26:59:50:d6:21: cc:52:7e:82:36:28:ef:a6:3f:0b:49:55:5f:e3:9b:53:4c:b2: ac:cc:40:71:09:74:18:fd:2c:e6:64:34:3b:cc:ac:85:95:a5: 44:67:5c:e5:dd:38:7d:ba:f3:9b:fb:ab:ae:15:03:5f:ab:9a: 9f:39:89:09:26:34:c6:f0:6d:86:42:16:21:e3:14:b3:69:33: 2b:9d:cd:d1:bd:a3:5e:1f:18:89:98:f2:a2:60:27:54:71:41: 6f:6c:a7:ae:ee:da:fc:cb:06:0d:22:07:3f:b6:96:70:d7:7b: 7b:22:f9:62:2a:70:0c:df:cc:e3:fa:f0:fb:0a:9f:5f:d3:d9: d6:da:98:28 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt7NoZzGOTi6ST5agbXnsuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWMxOGNiMWE1MDI3ZmExNzI2ZjExNGIzZWZlNjJhM2E5NzljZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3LCyyq3zoQURsp0Fpzs/K5rVfJS o8Bu3YHeb4KhrbKJxj1wOoCpHO948msDTinUM+5+5GK7h0HJ1alyutLhhlO7j0ih MD0geXJlskxh2H2uEwzyEH+RqbPB3vGgWXJ2IYdw4uC0JF7oYBoil1E/qI/JgzUP Fjeqqm+lliTy47orxa7Fah04lPJfPSXe/kUP+DIn4iSX/yfz4LPIXTdekxSGVRK7 RxFBNCaikrKcOp0XhGoqCJVH3Y387p817YL3LvyzUos9tAM5IRrde9kImLt04ZU1 tGW1HcUkAHHoFT4CdaoP9S7/bwI0eNnJK7E+Gg8iQii+fXX2qku9PPvbRwIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPnBjLGlAn+hcm8RSz7+YqOpec4bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzI2Y2E5 Mi02ZmI4LTRkZDItOTc5NS05YmM1YzI2ZDRiZTgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMjZjYTky LTZmYjgtNGRkMi05Nzk1LTliYzVjMjZkNGJlOC8xLzEtY0dNc2FVQ2Y2RnlieEZM UHY1aW82bDV6aHMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwNyDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDShowDQYJKoZIhvcNAQELBQADggEBAKLq10rNrKbcZLSJD06DCSyGK9uI iz967agkJkDOMG9DN+Rd3Ii4uPkqCmh4oFaEkMFYB48UaMd+OtydisjafilThPkz 3DlOFoTzF7s1EwDM/OBWkOqKAeJvuPK0vINBmASyHcBpLPVA1lfwcyjlBZ0ATfp7 FipLaj0mWVDWIcxSfoI2KO+mPwtJVV/jm1NMsqzMQHEJdBj9LOZkNDvMrIWVpURn XOXdOH2685v7q64VA1+rmp85iQkmNMbwbYZCFiHjFLNpMyudzdG9o14fGImY8qJg J1RxQW9sp67u2vzLBg0iBz+2lnDXe3si+WIqcAzfzOP68PsKn1/T2dbamCg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:54 2026 by rpki-client