This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer File: 1-wH_19pe5FD8saZWq_xuCxshw2U.cer (raw, json) Hash identifier: uhz7130wR9igSneX18Jj179Kt8owhhasAr4fBO6HyZQ= Subject key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2B2B2D719D0A77E6F5B76FB2DFC7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207027 IP: 91.227.16.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b2:b2:d7:19:d0:a7:7e:6f:5b:76:fb:2d:fc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:a4:49:68:55:1d:0f:9a:66:23:30:0d:dd: 78:c3:5c:e6:63:15:69:d4:0c:b1:10:5d:94:6a:7e: df:f0:cb:95:2f:ef:87:27:9f:95:6b:3a:36:64:40: 1d:26:fe:db:0e:79:84:af:a1:9c:c5:bf:47:f9:58: ab:8f:98:0b:6b:ac:cb:0b:af:eb:d2:fa:a8:97:7d: b7:13:fa:c2:db:7a:0b:fc:45:9b:9d:3d:15:03:1e: 05:aa:2e:60:c0:73:9d:e9:82:b4:55:03:d4:8e:c5: 35:71:bb:a9:9b:06:06:a4:94:e0:41:1e:02:26:39: df:ec:c1:f3:94:77:ae:a6:82:a9:30:08:41:f0:49: 45:20:2b:de:ac:43:c4:2d:63:30:74:f5:64:21:2d: 15:f0:46:88:d0:02:f1:69:17:83:59:2e:5c:85:94: 7a:7a:59:2b:99:c9:e0:6e:d9:8a:06:05:94:ca:a6: a9:1b:33:97:00:5c:57:6c:9d:1e:5e:ff:86:d2:ee: d1:e4:fc:e0:1a:9c:88:7d:c8:18:9b:94:d2:fc:bc: 8f:4b:6b:97:54:20:12:48:44:69:bd:ed:f4:5f:37: 46:b5:23:4c:9c:2a:42:1e:6a:3a:c6:30:fe:3d:c8: 84:da:5b:8a:c8:b2:b9:e2:52:58:4e:ff:19:fb:39: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.16.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207027 Signature Algorithm: sha256WithRSAEncryption a6:a1:76:58:ec:32:77:91:59:9b:92:72:b6:67:91:31:2c:72: e6:da:9f:8a:a4:63:66:64:32:ab:81:8a:97:93:7d:c7:22:32: d1:f7:5f:58:97:d8:f7:b4:fa:e9:95:3a:4f:44:0c:8e:87:c9: 9f:d4:6c:a4:89:8f:3b:fb:6f:49:31:21:06:09:3b:b3:3d:a1: 37:03:1a:f1:f2:6c:f6:f5:2f:b1:72:18:d0:75:ed:a7:f2:80: c9:c8:c8:48:49:bb:5a:21:87:37:aa:29:12:fc:6a:4d:26:e7: 16:9f:33:68:98:97:c2:af:eb:30:38:d4:7c:e1:c3:c0:c5:af: 32:46:01:8e:4e:39:20:51:20:2c:22:91:88:f1:53:d8:44:65: 86:31:67:32:31:2e:6a:77:93:1f:36:c8:40:f8:3b:16:cc:46: 0d:8d:69:74:cb:30:e9:29:b6:0f:31:00:a1:73:d0:7a:29:b9: 26:92:e2:97:7d:4f:5f:a6:1e:e7:5a:3f:b9:e5:01:0b:61:2f: fb:e7:e0:15:56:1f:c9:1d:00:50:5f:25:ed:21:61:d5:c1:eb: 1a:93:47:a5:60:9f:dc:47:51:a1:29:f3:bb:0e:6b:29:2c:c8: 6c:1b:bc:ee:b7:34:a9:a8:7d:14:7f:18:00:2b:9a:08:57:b0: 66:06:21:8f -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt4orKy1xnQp35vW3b7Lfx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjAxZmZkN2RhNWVlNDUwZmNiMWE2NTZhYmZjNmUwYjFiMjFjMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9ikSWhVHQ+aZiMwDd14w1zmYxVp 1AyxEF2Uan7f8MuVL++HJ5+Vazo2ZEAdJv7bDnmEr6Gcxb9H+Virj5gLa6zLC6/r 0vqol323E/rC23oL/EWbnT0VAx4Fqi5gwHOd6YK0VQPUjsU1cbupmwYGpJTgQR4C Jjnf7MHzlHeupoKpMAhB8ElFICverEPELWMwdPVkIS0V8EaI0ALxaReDWS5chZR6 elkrmcngbtmKBgWUyqapGzOXAFxXbJ0eXv+G0u7R5PzgGpyIfcgYm5TS/LyPS2uX VCASSERpve30XzdGtSNMnCpCHmo6xjD+PciE2luKyLK54lJYTv8Z+zlvqwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPsB/9faXuRQ/LGmVqv8bgsbIcNlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2UyNmNl YS1mNjYwLTQ4YTMtODYyZi05MDUwMWFiZjUzOTEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTI2Y2Vh LWY2NjAtNDhhMy04NjJmLTkwNTAxYWJmNTM5MS8xLzEtd0hfMTlwZTVGRDhzYVpX cV94dUN4c2h3MlUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvjEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDKLMwDQYJKoZIhvcNAQELBQADggEBAKahdljsMneRWZuScrZnkTEscuban4qk Y2ZkMquBipeTfcciMtH3X1iX2Pe0+umVOk9EDI6HyZ/UbKSJjzv7b0kxIQYJO7M9 oTcDGvHybPb1L7FyGNB17afygMnIyEhJu1ohhzeqKRL8ak0m5xafM2iYl8Kv6zA4 1Hzhw8DFrzJGAY5OOSBRICwikYjxU9hEZYYxZzIxLmp3kx82yED4OxbMRg2NaXTL MOkptg8xAKFz0HopuSaS4pd9T1+mHudaP7nlAQthL/vn4BVWH8kdAFBfJe0hYdXB 6xqTR6Vgn9xHUaEp87sOayksyGwbvO63NKmofRR/GAArmghXsGYGIY8= -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:51 2026 by rpki-client