This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer (raw, json) Hash identifier: IYCdEcA5wlAizPoLVTkJVLSvPYd9MRGDAVFZF2z43GE= Subject key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80121CC56320DCB0621F5BB0D3AF0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47999 IP: 91.207.38.0/23 IP: 194.187.118.0/24 IP: 213.109.176.0/22 IP: 2a00:de60::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:12:1c:c5:63:20:dc:b0:62:1f:5b:b0:d3:af:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:fd:a9:75:b9:b0:9e:0e:f7:de:6a:17:08: c3:b1:ab:b8:2c:3a:27:48:af:45:b1:4c:e1:c8:3e: 50:e0:4c:99:7c:86:3f:b7:e7:ce:00:42:14:5a:e5: c9:ea:20:bd:16:7b:cb:b6:cf:ae:ed:80:57:5a:f3: bd:03:ba:53:a0:ec:23:df:e5:85:ca:47:08:92:33: 56:6d:c7:ab:83:db:4a:ea:93:b7:1e:11:7b:e3:60: 60:62:e1:f1:89:e3:b5:c2:67:5e:ea:d5:02:8e:02: 9d:f3:7f:31:60:b6:d3:e9:20:50:d3:58:9a:65:71: 49:b2:bd:38:44:ce:cb:79:f8:8b:d2:5f:19:bd:a9: ba:1b:06:6d:48:e5:ce:1c:6a:3d:88:f8:9c:d1:e0: da:8d:73:52:77:8a:26:d0:71:0a:15:c2:e5:d6:c0: 6b:63:72:6e:7e:a2:33:19:73:78:d9:f9:35:47:f1: dd:c5:ef:c9:06:7c:a2:7c:7a:72:cd:ec:ec:da:8d: 2c:5e:42:e2:92:65:6b:4a:f9:82:12:3f:52:88:92: ef:90:47:a6:d9:06:0a:90:f8:04:fa:23:47:88:0e: 89:0d:26:5f:e6:02:74:c6:74:3e:d1:92:fc:25:78: 21:8d:be:83:ee:83:20:38:03:90:59:18:b4:52:e5: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.38.0/23 194.187.118.0/24 213.109.176.0/22 IPv6: 2a00:de60::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47999 Signature Algorithm: sha256WithRSAEncryption 01:e3:2c:03:2c:13:ac:1a:1d:06:26:54:7a:07:11:49:9c:9f: 58:78:2f:7c:67:8a:bf:b3:db:d3:c8:e7:af:fc:61:81:54:5d: ad:c3:25:23:11:3f:6b:8a:48:f6:a7:a9:f0:50:4f:2f:38:05: 83:52:fa:6e:4f:ed:8e:85:ea:76:3c:7e:b6:fc:2f:35:7c:55: aa:c8:86:ea:b6:f9:88:96:a5:dd:33:0c:1e:37:75:fa:74:fe: 81:4e:a5:d3:0d:e5:f9:34:02:21:ce:35:03:5c:9a:49:88:c5: 73:41:c3:ae:10:6f:6a:26:47:b4:f5:1f:56:e1:6f:7c:d0:0c: 2f:8c:be:1a:cc:53:95:3e:82:c3:36:2d:ec:ef:7a:91:25:90: 95:72:60:de:41:d1:1e:0b:98:48:61:11:c6:7f:d0:35:b9:af: d2:f6:69:e0:4c:d4:fb:7c:09:f0:2a:c9:7d:d2:4a:a7:9b:62: 82:57:35:18:b9:f1:9b:1d:97:67:3a:62:e1:95:b9:11:fd:5d: 85:04:54:f8:de:85:52:66:0f:86:8b:3d:f2:b3:20:32:8f:24: 9d:15:78:14:75:94:d8:e4:0f:fa:50:0e:c4:58:e8:d1:06:34: 22:f3:1a:7c:b6:26:28:64:3d:3e:7a:60:cd:f9:59:e8:5f:e0: eb:b8:b2:37 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8gBIcxWMg3LBiH1uw068LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTY0YTFmN2NhNDBiNTgxMTZlNmJjODM4ZTA2MmY5YzcxMjIyOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85H9qXW5sJ4O995qFwjDsau4LDon SK9FsUzhyD5Q4EyZfIY/t+fOAEIUWuXJ6iC9FnvLts+u7YBXWvO9A7pToOwj3+WF ykcIkjNWbcerg9tK6pO3HhF742BgYuHxieO1wmde6tUCjgKd838xYLbT6SBQ01ia ZXFJsr04RM7LefiL0l8Zvam6GwZtSOXOHGo9iPic0eDajXNSd4om0HEKFcLl1sBr Y3JufqIzGXN42fk1R/Hdxe/JBnyifHpyzezs2o0sXkLikmVrSvmCEj9SiJLvkEem 2QYKkPgE+iNHiA6JDSZf5gJ0xnQ+0ZL8JXghjb6D7oMgOAOQWRi0UuWP3QIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFPpkoffKQLWBFua8g44GL5xxIiikMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2JhMjdm Yi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYwMTIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2Zi LTI1NTAtNDlhZC1iMGVmLTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlE amdZdm5IRWlLS1EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEAVvPJgMEAMK7dgMEAtVtsDANBAIAAjAHAwUB KgDeYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAu38wDQYJKoZIhvcNAQELBQAD ggEBAAHjLAMsE6waHQYmVHoHEUmcn1h4L3xnir+z29PI56/8YYFUXa3DJSMRP2uK SPanqfBQTy84BYNS+m5P7Y6F6nY8frb8LzV8VarIhuq2+YiWpd0zDB43dfp0/oFO pdMN5fk0AiHONQNcmkmIxXNBw64Qb2omR7T1H1bhb3zQDC+MvhrMU5U+gsM2Lezv epElkJVyYN5B0R4LmEhhEcZ/0DW5r9L2aeBM1Pt8CfAqyX3SSqebYoJXNRi58Zsd l2c6YuGVuRH9XYUEVPjehVJmD4aLPfKzIDKPJJ0VeBR1lNjkD/pQDsRY6NEGNCLz Gny2JihkPT56YM35Wehf4Ou4sjc= -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:06 2026 by rpki-client