This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer (raw, json) Hash identifier: WFaKEyvPfdctDQmVtFI/Z2Lyj+UzAJL7YOADxnPK3R0= Subject key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783450012AECC2F548420D2A446CDB33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39216 IP: 46.21.251.0/24 IP: 212.126.96.0/19 IP: 2a04:2dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:01:2a:ec:c2:f5:48:42:0d:2a:44:6c:db:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:cb:ab:3a:a1:e8:44:06:2c:b0:8b:25:3a: 8b:67:b4:8f:c1:e6:e9:be:ac:1f:ab:d1:26:bf:bc: e0:2f:8a:25:7a:bc:a6:04:fb:7e:21:b5:d6:78:43: c6:c1:b0:be:51:9f:2a:bc:ae:8b:56:fc:ff:e4:41: ef:55:d5:2a:36:bc:90:79:cd:ec:a9:cf:4d:bd:7d: 7a:5f:8b:a2:1b:c9:7c:dd:fd:29:9a:6b:67:19:23: 41:02:fb:bc:67:49:fe:80:bb:76:1a:07:e7:94:53: 81:2f:f4:02:f1:fb:9b:7a:97:65:73:58:39:ba:25: 38:99:39:1f:85:78:38:a4:bf:4a:69:dd:a4:b9:33: 44:7c:cf:55:cd:a0:72:71:1f:39:e5:0e:83:96:fb: 46:10:e5:2c:8b:6f:35:4d:4c:3b:b3:43:52:b8:37: fb:24:d2:1b:34:01:fd:6a:ac:da:72:81:79:63:f3: ef:9d:07:4f:80:f8:61:85:e4:24:f2:7a:e6:b7:05: 3b:24:d8:48:1a:dc:c0:9b:49:c0:33:81:a6:6d:b3: 7a:4b:7f:5f:60:ad:aa:34:63:60:a9:75:03:8c:d5: 93:4a:44:57:3c:67:47:18:88:04:97:7d:5b:f1:16: 82:f1:88:3a:46:51:8a:62:31:dc:ac:62:43:8c:89: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.251.0/24 212.126.96.0/19 IPv6: 2a04:2dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39216 Signature Algorithm: sha256WithRSAEncryption 73:35:e2:60:7f:0c:96:8c:c2:f6:2e:57:86:7e:40:36:a1:0f: 86:c6:48:e3:ff:67:8b:46:69:be:0d:ff:65:97:5f:35:99:06: 5a:ab:02:e1:d3:ea:b6:63:ca:29:97:f7:06:90:53:a9:13:38: 2d:6b:3a:72:b1:33:8f:5a:30:94:1e:b5:0d:d1:f1:84:27:16: 0d:74:3c:f8:73:cf:7c:db:93:7e:a5:b3:c9:b3:e7:a9:e1:a7: bc:51:5f:20:8d:f0:41:bc:30:bc:0c:7b:24:55:8b:40:24:ba: 35:1f:5b:75:e0:2d:2a:97:dd:6b:4d:bd:26:ab:22:ba:71:98: bb:05:9a:e1:25:b6:f6:85:d8:41:cf:dc:15:65:f3:30:d7:92: 9c:5a:ce:bb:f7:a6:27:10:7c:e7:8b:ce:4e:4d:cc:89:eb:4a: f6:fc:7d:09:78:ed:1d:1f:78:47:e8:20:f9:c6:a7:f3:2b:9c: 70:a1:d5:ab:ca:14:f5:d3:77:17:45:c3:e6:63:74:31:ad:e5: ff:de:94:c5:16:4c:53:4d:5c:c5:86:03:80:56:32:2c:48:eb: 2d:49:75:20:ad:ac:fa:ce:bb:d2:bb:8a:de:46:c6:8f:a1:be: d9:be:c7:91:8f:2d:11:75:a8:16:92:a5:62:0c:84:18:6c:b5: cf:f1:3f:ae -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt4NFABKuzC9UhCDSpEbNszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWNjYmI3MmFhOTg4NGE1YmY4ZDBlNzU3NDA0YTE3ZTVlMjMzMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dDLqzqh6EQGLLCLJTqLZ7SPwebp vqwfq9Emv7zgL4olerymBPt+IbXWeEPGwbC+UZ8qvK6LVvz/5EHvVdUqNryQec3s qc9NvX16X4uiG8l83f0pmmtnGSNBAvu8Z0n+gLt2GgfnlFOBL/QC8fubepdlc1g5 uiU4mTkfhXg4pL9Kad2kuTNEfM9VzaBycR855Q6DlvtGEOUsi281TUw7s0NSuDf7 JNIbNAH9aqzacoF5Y/PvnQdPgPhhheQk8nrmtwU7JNhIGtzAm0nAM4GmbbN6S39f YK2qNGNgqXUDjNWTSkRXPGdHGIgEl31b8RaC8Yg6RlGKYjHcrGJDjIknowIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPrMu3KqmISlv40OdXQEoX5eIzIsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2U4Y2I0 NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMzYmQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0 LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUx ZEFTaGZsNGpNaXcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAC4V+wMEBdR+YDANBAIAAjAHAwUDKgQtwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAmTAwDQYJKoZIhvcNAQELBQADggEBAHM1 4mB/DJaMwvYuV4Z+QDahD4bGSOP/Z4tGab4N/2WXXzWZBlqrAuHT6rZjyimX9waQ U6kTOC1rOnKxM49aMJQetQ3R8YQnFg10PPhzz3zbk36ls8mz56nhp7xRXyCN8EG8 MLwMeyRVi0AkujUfW3XgLSqX3WtNvSarIrpxmLsFmuEltvaF2EHP3BVl8zDXkpxa zrv3picQfOeLzk5NzInrSvb8fQl47R0feEfoIPnGp/MrnHCh1avKFPXTdxdFw+Zj dDGt5f/elMUWTFNNXMWGA4BWMixI6y1JdSCtrPrOu9K7it5Gxo+hvtm+x5GPLRF1 qBaSpWIMhBhstc/xP64= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:26 2026 by rpki-client