This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer File: 1-jDy9nL7VLpJd8bhpronExwjH_I.cer (raw, json) Hash identifier: /p+GGlOJcBqPtvL3YfcOUNA8A1QwivzAxICc3FVWouI= Subject key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5381DF098A6758E119C5B9410BFA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214759 IP: 2001:67c:2c1c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:38:1d:f0:98:a6:75:8e:11:9c:5b:94:10:bf:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:ca:28:56:fd:02:5c:91:76:d7:4c:92:81: d4:bb:8f:6c:31:e7:25:56:74:ec:e0:6b:0a:c6:b4: 43:a4:f3:42:35:ab:21:ba:95:36:0e:1d:28:ef:ed: ce:a0:78:d4:03:7a:40:cd:3d:7d:13:3a:b6:3f:7b: ed:04:e6:7b:6b:f3:f7:8a:64:30:2c:01:f4:f1:05: 95:b2:05:95:20:a5:da:ca:ea:e2:30:ba:10:ae:3b: f1:83:9b:81:77:6e:b5:fd:45:df:38:81:b1:c9:ee: b9:f0:1d:c1:52:66:dc:d5:70:d0:99:c9:87:52:a3: 51:78:99:95:e5:5a:21:1d:a6:1c:60:57:bb:38:2d: 5c:3e:6a:2b:90:33:b2:7e:5b:69:4e:54:cb:3b:8b: 82:97:43:e1:aa:f9:6a:72:a1:33:f0:29:32:2c:a5: af:a8:d0:73:9c:fa:30:23:f1:15:5c:cb:a3:10:af: db:f3:03:d7:79:58:b2:5c:d9:0b:6e:32:9a:b1:c0: 97:90:04:50:64:f5:69:f2:27:cd:e9:a4:2f:a2:63: b0:61:84:fc:e4:d8:a5:60:2c:af:29:e3:ef:88:a4: 0d:90:c6:7f:a4:46:a2:41:fe:65:a5:ac:bc:3c:c6: 2e:c7:e6:56:00:09:51:0f:8f:c2:80:5f:a7:37:59: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c1c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214759 Signature Algorithm: sha256WithRSAEncryption 8a:71:20:43:dd:03:6f:08:0f:9f:8a:c3:70:38:08:12:90:02: ec:40:d1:b8:56:6e:3d:f6:06:67:3a:a2:55:b8:97:e5:6c:1a: c3:cc:df:fe:63:3e:04:ae:ea:1e:84:f5:21:d3:38:01:f9:28: 3d:d1:08:e9:56:e5:93:0b:6b:cb:dd:13:24:62:a6:bd:7a:fe: f3:fe:7b:f5:e1:60:2e:5e:bd:7a:5a:55:fa:af:6f:b6:b0:c9: 6a:fc:e4:63:e4:f9:18:bf:66:18:58:f7:b6:cb:40:91:f9:29: b2:19:7e:ec:35:57:a1:02:c0:98:fa:9e:c8:fa:67:be:e9:ba: 13:3a:be:52:3f:f6:8a:d1:48:21:0b:19:dc:0a:e7:ed:b0:8c: 20:17:0a:77:57:83:85:c0:57:b8:fa:53:f0:de:0d:e8:32:c3: f9:3c:7b:9f:4f:35:0f:6e:6d:db:61:03:4d:57:9f:c6:ab:86: 55:cf:c4:21:3f:62:4d:a7:4f:72:0f:e1:a7:99:40:28:c3:ea: cc:0f:b6:ae:a2:99:61:9f:80:1e:cc:75:43:cd:35:a1:72:28: 5f:c6:00:2d:82:78:de:50:d3:ad:08:66:c3:82:68:f0:e9:c2: 79:2c:1c:59:19:fd:16:5a:da:08:50:4e:05:14:6b:98:67:47: e9:45:29:21 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt+pTgd8JimdY4RnFuUEL+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTMwZjJmNjcyZmI1NGJhNDk3N2M2ZTFhNmJhMjcxMzFjMjMxZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J3KKFb9AlyRdtdMkoHUu49sMecl VnTs4GsKxrRDpPNCNashupU2Dh0o7+3OoHjUA3pAzT19Ezq2P3vtBOZ7a/P3imQw LAH08QWVsgWVIKXayuriMLoQrjvxg5uBd261/UXfOIGxye658B3BUmbc1XDQmcmH UqNReJmV5VohHaYcYFe7OC1cPmorkDOyfltpTlTLO4uCl0PhqvlqcqEz8CkyLKWv qNBznPowI/EVXMujEK/b8wPXeViyXNkLbjKascCXkARQZPVp8ifN6aQvomOwYYT8 5NilYCyvKePviKQNkMZ/pEaiQf5lpay8PMYux+ZWAAlRD4/CgF+nN1mghQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPow8vZy+1S6SXfG4aa6JxMcIx/yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzE5Njhk MC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1NjcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQw LWZhZjEtNGUzNy1hYzg4LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJo cHJvbkV4d2pIX0kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwsHDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDRucwDQYJKoZIhvcNAQELBQADggEBAIpxIEPdA28ID5+Kw3A4CBKQAuxA 0bhWbj32Bmc6olW4l+VsGsPM3/5jPgSu6h6E9SHTOAH5KD3RCOlW5ZMLa8vdEyRi pr16/vP+e/XhYC5evXpaVfqvb7awyWr85GPk+Ri/ZhhY97bLQJH5KbIZfuw1V6EC wJj6nsj6Z77puhM6vlI/9orRSCELGdwK5+2wjCAXCndXg4XAV7j6U/DeDegyw/k8 e59PNQ9ubdthA01Xn8arhlXPxCE/Yk2nT3IP4aeZQCjD6swPtq6imWGfgB7MdUPN NaFyKF/GAC2CeN5Q060IZsOCaPDpwnksHFkZ/RZa2ghQTgUUa5hnR+lFKSE= -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:45 2026 by rpki-client