This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer (raw, json) Hash identifier: nO+eykfIHKLYdJ3LP6RT1rnQUjrPgDfSEWklFpCppww= Subject key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA723793016820C18922376D11115C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35775 IP: 194.88.148.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:72:37:93:01:68:20:c1:89:22:37:6d:11:11:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:74:f0:b5:a6:c7:34:01:3a:43:a7:16:42: 3a:c9:bd:69:27:48:6b:83:74:c6:78:a0:75:a1:96: 75:f8:c1:7f:b4:19:2f:f9:2d:8e:e5:c5:f4:ba:23: 42:07:a9:50:3c:a5:e7:26:e0:df:12:8c:5a:ba:19: 2a:db:ce:bc:f9:54:48:3b:23:02:1f:81:6c:b6:62: cd:53:a9:6a:0a:e1:ad:31:d3:91:23:8a:e0:40:a4: 8e:3c:e2:95:51:e6:ac:12:cc:1b:b4:93:7d:a1:19: d2:98:77:61:8b:81:80:67:7b:5b:24:14:18:09:7a: 77:8d:47:7d:75:d4:4d:82:1b:5e:cc:0f:3f:d9:e2: b7:6d:53:73:f8:cf:c7:ab:99:32:79:2f:32:5d:e1: 2d:89:99:eb:79:41:68:d8:3c:2d:3b:eb:ac:00:0b: 38:7c:cd:bb:80:81:f3:88:88:10:f1:89:4e:a5:24: 48:12:6c:5a:81:7d:40:d4:92:c0:0a:1e:0d:b6:32: 11:9b:c4:46:cc:cb:74:b2:89:8e:35:42:a3:31:55: d9:1e:fd:de:e0:0f:af:f7:77:0d:fb:3e:5c:d1:79: bd:52:49:d3:9f:36:8c:53:20:3f:25:3f:01:d8:76: 60:90:f8:36:c5:6e:2b:3d:16:b4:a8:b9:f4:17:dc: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.148.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35775 Signature Algorithm: sha256WithRSAEncryption 07:0b:0f:a7:d0:13:d4:38:05:0d:41:a3:82:5a:78:bb:2b:2c: 69:2d:cb:5c:a8:8f:6e:15:09:e8:7b:13:4d:6a:2a:01:f7:8f: 8e:c3:9c:90:3c:eb:71:ad:2a:1c:50:86:fd:f9:b6:fe:82:9e: 4f:27:01:42:6e:2d:a5:11:53:c1:a4:6a:7d:f6:56:c5:5f:9a: c2:f1:f6:2f:af:7b:a0:0d:69:8c:79:ec:e5:8c:ec:d6:2b:e8: 67:b7:87:3b:64:15:e3:59:6d:e9:c0:62:5c:bd:67:61:48:72: 34:55:d8:a7:de:a4:a0:f8:d1:3f:ce:56:d0:73:70:8f:60:e1: 23:37:28:ee:03:dd:fb:25:b4:eb:ee:0b:56:27:fe:db:f1:cb: a9:65:53:69:21:35:d6:4c:11:e1:00:c7:01:aa:33:41:d5:fb: 71:e7:32:95:9a:32:87:a9:d4:3a:a6:55:31:a0:52:7a:28:17: 8b:00:75:03:f9:6b:fa:bd:80:09:ca:7f:cf:4b:7a:82:94:09: 92:61:fd:3a:04:a4:84:5e:8f:d6:6e:70:21:27:cb:53:c0:d1: 28:b4:bd:71:be:bd:54:5f:4b:64:63:08:e1:5f:59:fb:f2:68: 14:ae:78:5d:02:a1:fd:85:fb:fd:84:62:e0:23:cb:6d:58:00: f9:84:2d:28 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9ynI3kwFoIMGJIjdtERFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWUyMGY3ZDNhMmNjOTVkOWRlNmY0ZTMzNGNiNGI2NzkyMmU3MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof908LWmxzQBOkOnFkI6yb1pJ0hr g3TGeKB1oZZ1+MF/tBkv+S2O5cX0uiNCB6lQPKXnJuDfEoxauhkq2868+VRIOyMC H4FstmLNU6lqCuGtMdORI4rgQKSOPOKVUeasEswbtJN9oRnSmHdhi4GAZ3tbJBQY CXp3jUd9ddRNghtezA8/2eK3bVNz+M/Hq5kyeS8yXeEtiZnreUFo2DwtO+usAAs4 fM27gIHziIgQ8YlOpSRIEmxagX1A1JLACh4NtjIRm8RGzMt0somONUKjMVXZHv3e 4A+v93cN+z5c0Xm9UknTnzaMUyA/JT8B2HZgkPg2xW4rPRa0qLn0F9w4owIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPniD306LMldneb04zTLS2eSLnD1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzdlN2Zj ZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZiZWYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNl LTQ4NDEtNDc2Yi04NGMwLWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRq Tk10TFo1SXVjUFUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJYlDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAi78wDQYJKoZIhvcNAQELBQADggEBAAcLD6fQE9Q4BQ1Bo4JaeLsrLGkty1yo j24VCeh7E01qKgH3j47DnJA863GtKhxQhv35tv6Cnk8nAUJuLaURU8Gkan32VsVf msLx9i+ve6ANaYx57OWM7NYr6Ge3hztkFeNZbenAYly9Z2FIcjRV2KfepKD40T/O VtBzcI9g4SM3KO4D3fsltOvuC1Yn/tvxy6llU2khNdZMEeEAxwGqM0HV+3HnMpWa Moep1DqmVTGgUnooF4sAdQP5a/q9gAnKf89LeoKUCZJh/ToEpIRej9ZucCEny1PA 0Si0vXG+vVRfS2RjCOFfWfvyaBSueF0Cof2F+/2EYuAjy21YAPmELSg= -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:09 2026 by rpki-client