This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.cer (raw, json) Hash identifier: /Q4pRaHy0jJPPy3cbvKVwaBf8/kA4Vb0zX3/7CMuiP4= Subject key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C95005FBDA85E940693962C9C70E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42106 AS: 204196 IP: 80.209.252.0/23 IP: 185.145.128.0/22 IP: 185.207.204.0/22 IP: 185.217.92.0/22 IP: 185.221.200.0/22 IP: 185.224.80.0/22 IP: 185.231.220.0/22 IP: 185.235.176.0/22 IP: 185.240.160.0/22 IP: 185.243.188.0/22 IP: 185.252.132.0/22 IP: 193.143.20.0/22 IP: 2a07:4e80::/29 IP: 2a0b:2840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c9:50:05:fb:da:85:e9:40:69:39:62:c9:c7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:5c:b5:07:2d:bd:73:b9:16:d5:92:b2:a5: b7:32:94:12:22:2e:2b:e3:5e:1e:e7:24:70:64:16: 88:81:df:e5:86:89:39:3f:be:83:55:30:9f:97:56: 1e:8a:a8:80:4b:7d:67:d4:24:ae:94:7c:68:8e:a2: 51:09:7d:93:f8:34:2e:22:5c:c0:2f:c8:50:ef:35: 19:e2:c4:5b:b5:1e:17:ec:b0:e4:19:a0:cc:e8:a2: 28:f7:64:5c:75:a4:f1:50:ef:2b:09:f5:fa:f0:20: 10:2b:5e:73:8c:03:98:2e:a7:8e:a2:f3:2c:c2:50: 38:b3:06:77:c3:fa:90:f0:9a:eb:d6:c1:3e:9d:0e: 08:a2:f9:9c:82:c5:b6:aa:3c:5f:58:be:22:f1:13: ad:ad:14:1a:f2:d1:a4:2b:0f:9a:79:c7:dd:54:d0: de:8c:ab:54:94:c4:f8:d8:d2:42:0f:fe:64:14:bf: 26:94:de:9b:bb:9e:50:32:93:e7:ce:3a:6b:60:3e: f2:ea:a1:e4:5f:d7:8c:48:1f:1c:8f:5f:24:c6:15: 4c:03:74:80:28:88:a0:b3:5f:ad:5c:05:23:a2:f2: ac:2d:1c:9c:f2:d4:16:37:70:2f:95:37:10:ea:84: 64:63:d4:ea:8f:b9:9a:05:f9:45:a0:d1:db:7a:05: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.209.252.0/23 185.145.128.0/22 185.207.204.0/22 185.217.92.0/22 185.221.200.0/22 185.224.80.0/22 185.231.220.0/22 185.235.176.0/22 185.240.160.0/22 185.243.188.0/22 185.252.132.0/22 193.143.20.0/22 IPv6: 2a07:4e80::/29 2a0b:2840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42106 204196 Signature Algorithm: sha256WithRSAEncryption 35:6c:b8:3e:26:71:6b:0d:b3:29:c0:4f:82:a8:dc:2a:70:b5: 43:7c:25:79:cd:6a:bd:6a:c5:71:e6:36:89:c1:7c:1d:f6:8a: 99:83:e3:72:46:29:1d:d8:36:d5:24:9e:f3:0e:aa:db:c2:4e: 51:17:b9:2d:91:cd:28:2c:de:09:30:f2:79:a9:31:60:f0:8b: 27:3d:fd:47:7f:eb:0b:a4:e2:25:04:1a:e1:67:f0:8e:0e:b8: 29:6b:96:b3:89:4c:a5:e7:b0:3d:d6:a9:3e:11:e0:43:6d:53: ab:ca:77:fa:18:3c:fe:d2:a9:ef:3a:d1:09:32:9f:54:84:7e: 8d:e1:32:ea:79:4b:75:fc:46:2c:2c:12:2c:e7:c5:df:e1:db: 52:f3:f1:fd:2c:bb:51:fc:fc:c1:bc:37:eb:f6:f1:e7:5d:4f: 4f:28:c4:47:d1:db:0a:ad:d1:92:58:46:a0:5b:83:6c:53:af: b2:70:42:89:a2:62:72:b9:e8:96:68:75:9d:81:db:88:d7:92: 96:be:4d:eb:82:2f:ea:c1:3c:da:0c:db:46:11:e9:a9:33:43: e5:43:5f:47:9f:47:ba:8d:8a:d3:40:e3:15:50:af:6e:7a:7d: 34:d5:9e:58:c0:c0:d8:b0:a5:be:9a:d2:a1:69:5d:02:3d:bf: 56:8a:38:e0 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt3WMlQBfvahelAaTliyccOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTJlNzJhYmY3YjE3MjhmZGE2YWEwYjA0MTNkODg1NDgxMmVhMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9VctQctvXO5FtWSsqW3MpQSIi4r 414e5yRwZBaIgd/lhok5P76DVTCfl1YeiqiAS31n1CSulHxojqJRCX2T+DQuIlzA L8hQ7zUZ4sRbtR4X7LDkGaDM6KIo92RcdaTxUO8rCfX68CAQK15zjAOYLqeOovMs wlA4swZ3w/qQ8Jrr1sE+nQ4IovmcgsW2qjxfWL4i8ROtrRQa8tGkKw+aecfdVNDe jKtUlMT42NJCD/5kFL8mlN6bu55QMpPnzjprYD7y6qHkX9eMSB8cj18kxhVMA3SA KIigs1+tXAUjovKsLRyc8tQWN3AvlTcQ6oRkY9Tqj7maBflFoNHbegUV/wIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFPoucqv3sXKP2mqgsEE9iFSBLqNhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2Y2MTU5 MS03Y2E4LTRhOWEtODk5Zi1hMzY2ZGEyNTFhODMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkx LTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4My8xLzEtaTV5cV9leGNvX2FhcUN3 UVQySVZJRXVvMkUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB3BggrBgEF BQcBBwEB/wRoMGYwTgQCAAEwSAMEAVDR/AMEArmRgAMEArnPzAMEArnZXAMEArnd yAMEArngUAMEArnn3AMEArnrsAMEArnwoAMEArnzvAMEArn8hAMEAsGPFDAUBAIA AjAOAwUDKgdOgAMFAyoLKEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKR6AgMD HaQwDQYJKoZIhvcNAQELBQADggEBADVsuD4mcWsNsynAT4Ko3CpwtUN8JXnNar1q xXHmNonBfB32ipmD43JGKR3YNtUknvMOqtvCTlEXuS2RzSgs3gkw8nmpMWDwiyc9 /Ud/6wuk4iUEGuFn8I4OuClrlrOJTKXnsD3WqT4R4ENtU6vKd/oYPP7Sqe860Qky n1SEfo3hMup5S3X8RiwsEiznxd/h21Lz8f0su1H8/MG8N+v28eddT08oxEfR2wqt 0ZJYRqBbg2xTr7JwQomiYnK56JZodZ2B24jXkpa+TeuCL+rBPNoM20YR6akzQ+VD X0efR7qNitNA4xVQr256fTTVnljAwNiwpb6a0qFpXQI9v1aKOOA= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:29 2026 by rpki-client