This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer (raw, json) Hash identifier: txpMkia2l3IB1QjcuavrlKtuJVTvLoVwj+o/NBt38dY= Subject key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9E16C5C8D311BDF4CB4960877DD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207545 IP: 185.13.164.0/22 IP: 185.146.132.0/22 IP: 2a03:a3c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:16:c5:c8:d3:11:bd:f4:cb:49:60:87:7d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:16:32:a7:fb:d6:c0:dc:ff:0c:b2:ba:03: 50:69:4b:36:d1:77:e1:5c:e1:7e:a6:e7:eb:dc:16: af:fd:64:02:61:25:b4:2a:41:f2:3f:59:13:d8:dc: bc:c2:43:17:fd:96:f0:17:c1:bb:2c:7a:5a:e3:b2: 61:23:27:3e:9c:d2:db:f8:2c:de:70:1f:7d:d1:68: 43:25:9e:04:6c:4b:68:4e:8d:ae:c8:30:01:09:7f: cf:d1:31:5a:a0:0a:b9:32:84:85:37:94:e9:99:a8: d6:69:29:ca:02:95:7c:c5:26:79:17:f0:28:3e:c0: f3:29:6a:0b:f1:48:e9:af:07:02:68:fd:38:3c:61: 64:c4:8c:50:14:c5:88:73:05:60:66:0e:4c:76:16: 9a:89:6b:f8:f8:13:ff:c6:d7:a5:57:6e:bc:0a:9f: ef:ff:a6:c9:6e:d3:88:b3:6a:10:9e:0d:03:52:d2: db:aa:ed:6d:cc:3f:6e:25:d0:6d:5b:16:e9:af:50: f2:b7:f7:64:64:a2:6a:2b:d7:30:2b:a4:94:92:c1: ff:a8:2d:3e:bf:5f:03:0a:ee:d6:f6:1f:ff:40:e0: ab:7f:a6:fc:d8:93:c5:85:06:e6:da:86:d3:6d:21: aa:80:13:0d:f6:b9:53:8e:45:db:8b:13:7c:d0:92: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.164.0/22 185.146.132.0/22 IPv6: 2a03:a3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207545 Signature Algorithm: sha256WithRSAEncryption ab:8b:81:6d:0c:31:51:77:b2:c5:40:2b:17:fb:15:25:e8:86: be:2c:4c:fe:32:d5:73:f0:53:ba:40:68:07:35:52:cb:f9:89: ce:22:60:e5:62:e0:1c:c6:8c:7c:67:ce:8a:78:42:03:b9:c1: 4b:6e:4e:86:6d:f8:b2:e3:c3:3b:4d:71:cd:9f:d1:65:c2:8e: f7:78:32:38:db:7e:0f:b5:e9:6d:4c:b5:9f:aa:b7:2b:cf:7a: ca:7e:51:72:6a:14:0d:88:b0:42:69:32:6a:da:10:2f:e9:8c: 99:0a:94:70:e3:b6:f4:7a:fd:fb:6b:d8:9d:2b:bf:d1:39:98: b3:be:29:6b:4d:47:e8:de:07:26:b3:72:96:b1:ad:40:66:a1: e2:8b:fe:8c:17:1d:49:71:f3:d2:f5:3b:ac:7d:69:b1:15:4a: 50:9a:a0:73:e4:16:a3:22:9e:e8:16:80:cd:2b:1e:0a:2b:47: 0c:6f:d0:ef:11:d4:4a:8b:75:ff:3b:67:bd:3b:4f:2f:9d:f4: c2:ca:90:86:79:bf:d3:c9:94:b7:e8:34:56:dd:e7:ca:d7:3a: 5c:c4:08:2d:c0:1a:71:52:f3:32:db:b3:4a:a7:cb:22:3e:7b: 77:be:64:95:87:e2:8c:7d:43:e1:6b:75:16:ce:08:c8:9f:cc: c4:73:3f:6f -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt2654WxcjTEb30y0lgh33QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThjYjk0NmZlODYwMWEwZmQyYTFiM2U0MzgyYjZiMWRjMDQ0ZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6YWMqf71sDc/wyyugNQaUs20Xfh XOF+pufr3Bav/WQCYSW0KkHyP1kT2Ny8wkMX/ZbwF8G7LHpa47JhIyc+nNLb+Cze cB990WhDJZ4EbEtoTo2uyDABCX/P0TFaoAq5MoSFN5TpmajWaSnKApV8xSZ5F/Ao PsDzKWoL8UjprwcCaP04PGFkxIxQFMWIcwVgZg5MdhaaiWv4+BP/xtelV268Cp/v /6bJbtOIs2oQng0DUtLbqu1tzD9uJdBtWxbpr1Dyt/dkZKJqK9cwK6SUksH/qC0+ v18DCu7W9h//QOCrf6b82JPFhQbm2obTbSGqgBMN9rlTjkXbixN80JI1TwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPqMuUb+hgGg/SobPkOCtrHcBE9XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzBkMjI3 MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQwNDcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcw LTVjNmYtNDJjZi1hNTYwLTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMt UTRLMnNkd0VUMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArkNpAMEArmShDANBAIAAjAHAwUAKgOjwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKrkwDQYJKoZIhvcNAQELBQADggEBAKuL gW0MMVF3ssVAKxf7FSXohr4sTP4y1XPwU7pAaAc1Usv5ic4iYOVi4BzGjHxnzop4 QgO5wUtuToZt+LLjwztNcc2f0WXCjvd4Mjjbfg+16W1MtZ+qtyvPesp+UXJqFA2I sEJpMmraEC/pjJkKlHDjtvR6/ftr2J0rv9E5mLO+KWtNR+jeByazcpaxrUBmoeKL /owXHUlx89L1O6x9abEVSlCaoHPkFqMinugWgM0rHgorRwxv0O8R1EqLdf87Z707 Ty+d9MLKkIZ5v9PJlLfoNFbd58rXOlzECC3AGnFS8zLbs0qnyyI+e3e+ZJWH4ox9 Q+FrdRbOCMifzMRzP28= -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:20 2026 by rpki-client