This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer (raw, json) Hash identifier: 61R/98IXgVe7l0iXwJ4tGR/wg4MVZbOv4VyUysQJjqE= Subject key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37580FF13C56AC39138E349B9B0458 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51411 IP: 31.25.92.0/22 IP: 178.236.32.0/22 IP: 185.49.104.0/23 IP: 185.118.12.0/22 IP: 2a01:a120::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:58:0f:f1:3c:56:ac:39:13:8e:34:9b:9b:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:8b:01:d8:3b:18:f8:73:52:84:ea:ec:5d: df:80:40:34:14:b8:d0:ce:d3:a4:1d:2f:02:88:f7: 96:23:dd:ae:7e:b4:6b:fa:7a:18:6f:5a:74:1c:d5: 6e:b6:ff:4d:54:44:12:7e:0f:63:40:12:76:df:b5: 17:fe:dd:c7:1a:da:e3:15:a2:ab:65:89:4a:3d:cb: fd:45:eb:b8:56:47:7e:be:f1:92:40:dc:8e:9d:38: b0:c0:b0:9c:3d:2d:4d:31:2d:ce:7f:a3:2f:2d:5d: 5a:00:95:1e:a9:dc:f7:e2:ad:c0:fa:a9:ad:f3:2f: 44:e6:3e:76:84:ea:48:9e:3c:f2:fa:d1:62:5b:36: 66:8e:68:d5:3d:b7:0d:17:b4:27:36:2e:17:db:69: 36:ab:9d:e8:c4:20:d9:4d:1d:e8:71:42:7d:43:4a: a8:e4:2c:30:00:4b:bd:25:97:dc:2f:e5:3f:ae:db: 4b:a7:a6:d6:b9:f6:15:5b:66:29:93:20:d2:0e:33: 89:90:07:12:7f:b3:93:f9:9a:15:3a:d2:20:a5:6d: 1a:eb:69:bd:00:74:bc:e0:fd:14:7f:5a:23:d1:32: 3a:a1:a7:1d:b5:3c:58:22:97:85:3f:a8:0a:ac:52: cf:fd:ee:dd:28:89:b8:8b:37:8f:d7:10:05:9a:6a: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.92.0/22 178.236.32.0/22 185.49.104.0/23 185.118.12.0/22 IPv6: 2a01:a120::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51411 Signature Algorithm: sha256WithRSAEncryption 53:0c:ef:f7:98:8c:de:6c:65:6b:b7:80:c7:ce:31:b5:46:53: 4a:97:25:69:f9:0d:da:16:41:32:3e:54:14:ca:98:2a:29:f0: 6b:bf:f4:1f:aa:c0:c9:f3:ab:40:ab:40:8b:4a:68:65:12:93: 7e:33:f6:2d:77:22:8e:e9:96:b3:c7:e1:8c:b8:22:4a:8d:31: 98:a9:48:d4:b9:af:f1:76:95:3d:23:99:4b:a2:fd:b4:23:88: c4:db:7f:40:32:76:5e:39:62:ef:9b:c7:a7:05:da:a6:9d:f1: 55:14:e2:61:74:7c:b2:5e:8b:8d:50:80:af:ed:eb:68:cc:3c: 82:31:ab:17:68:bc:6c:68:47:f1:a6:41:6e:70:e9:c9:98:81: e2:f7:e3:dc:65:1e:a2:ba:d6:ec:7a:a9:0b:e7:76:f4:b1:db: 66:1d:88:c2:2c:6e:2e:bd:21:27:67:86:ba:39:95:bc:6b:25: 5d:d2:43:72:4c:4c:e6:f9:f2:dd:d6:f6:1f:18:3a:2a:5e:f9: 14:d7:09:b0:23:10:8f:c6:aa:0f:de:4a:05:d4:0f:ae:12:f7: b9:78:72:20:62:95:b3:28:96:ce:cb:a5:3a:be:5b:1c:74:30: 61:6d:43:57:2c:c6:e1:29:e9:aa:60:bd:6f:8e:07:ba:59:f1: 67:fe:8e:38 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt+N1gP8TxWrDkTjjSbmwRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTNkMGJjMTFiMjlkYTQ0YWQ1NzMwNGMzZjg1Njg4NzBhMDE5YzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseeLAdg7GPhzUoTq7F3fgEA0FLjQ ztOkHS8CiPeWI92ufrRr+noYb1p0HNVutv9NVEQSfg9jQBJ237UX/t3HGtrjFaKr ZYlKPcv9Reu4Vkd+vvGSQNyOnTiwwLCcPS1NMS3Of6MvLV1aAJUeqdz34q3A+qmt 8y9E5j52hOpInjzy+tFiWzZmjmjVPbcNF7QnNi4X22k2q53oxCDZTR3ocUJ9Q0qo 5CwwAEu9JZfcL+U/rttLp6bWufYVW2YpkyDSDjOJkAcSf7OT+ZoVOtIgpW0a62m9 AHS84P0Uf1oj0TI6oacdtTxYIpeFP6gKrFLP/e7dKIm4izeP1xAFmmp1JQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFPo9C8EbKdpErVcwTD+FaIcKAZwkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2FhNjYy OS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjczNWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5 LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJN UDRWb2h3b0JuQ1EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEAh8ZXAMEArLsIAMEAbkxaAMEArl2DDANBAIA AjAHAwUAKgGhIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAyNMwDQYJKoZIhvcN AQELBQADggEBAFMM7/eYjN5sZWu3gMfOMbVGU0qXJWn5DdoWQTI+VBTKmCop8Gu/ 9B+qwMnzq0CrQItKaGUSk34z9i13Io7plrPH4Yy4IkqNMZipSNS5r/F2lT0jmUui /bQjiMTbf0Aydl45Yu+bx6cF2qad8VUU4mF0fLJei41QgK/t62jMPIIxqxdovGxo R/GmQW5w6cmYgeL349xlHqK61ux6qQvndvSx22YdiMIsbi69ISdnhro5lbxrJV3S Q3JMTOb58t3W9h8YOipe+RTXCbAjEI/Gqg/eSgXUD64S97l4ciBilbMols7LpTq+ Wxx0MGFtQ1csxuEp6apgvW+OB7pZ8Wf+jjg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:35 2026 by rpki-client