This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.cer (raw, json) Hash identifier: k68ibljtksGFYcBAfaKmNNAQKSI04MzbeUATi606b8c= Subject key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348CC4F013C9BB8BD871110CE56EDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35649 AS: 42471 AS: 44728 AS: 48169 IP: 46.150.64.0/19 IP: 91.237.6.0/23 IP: 91.237.12.0/22 IP: 176.111.176.0/20 IP: 194.187.228.0/22 IP: 195.42.126.0/24 IP: 2001:67c:2cc8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:c4:f0:13:c9:bb:8b:d8:71:11:0c:e5:6e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:ea:ab:63:c7:7f:ea:b3:ec:a0:7b:23:4a: ee:d3:62:a1:87:bb:9b:7d:95:7e:15:c8:77:89:0c: 57:0c:42:c2:29:c8:25:b4:b0:f0:58:f2:ea:60:f8: 80:e6:78:cb:08:05:e4:b0:f1:aa:4a:fc:f5:67:45: 49:76:d9:18:1c:76:f6:04:e2:7a:f7:68:d7:a5:f4: e5:c7:c0:f0:00:1f:c8:8a:90:cd:af:2a:27:ac:67: e0:c9:50:07:69:9e:9a:ed:78:8b:51:64:72:71:4c: 21:83:71:4b:a7:46:d4:cf:f7:74:7d:4b:be:69:2a: b8:87:8c:ae:d4:0d:21:3a:89:2e:4b:3a:a1:58:97: 8c:4d:db:43:92:b6:50:4a:71:00:92:09:fb:61:4e: 00:32:f5:33:12:c7:b1:3b:3b:dd:8b:27:90:73:f2: 09:99:e1:d5:03:ac:b6:5e:e2:4a:ce:01:b9:0d:46: d4:43:7f:70:e3:6f:03:7e:8e:f8:6e:a8:2e:98:ed: da:b6:a2:15:fa:bf:30:3d:df:8a:0e:15:e9:3f:37: 05:d4:a1:ba:54:2e:88:8d:e3:b3:1d:06:cf:a2:19: 5c:4e:89:ff:15:99:30:b4:0c:f1:2d:bf:38:ac:8f: e9:98:98:0a:1c:4d:eb:bc:54:0a:ae:ff:14:cb:0c: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.64.0/19 91.237.6.0/23 91.237.12.0/22 176.111.176.0/20 194.187.228.0/22 195.42.126.0/24 IPv6: 2001:67c:2cc8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35649 42471 44728 48169 Signature Algorithm: sha256WithRSAEncryption 66:5f:42:8c:33:f5:ad:cb:63:21:ab:2a:64:a4:51:af:c7:fd: 88:76:2d:51:45:57:0a:c2:a1:f9:ff:a1:0c:72:b2:26:ca:45: 4e:a7:0e:cb:b0:44:96:75:58:7f:c4:f2:85:1c:b3:1b:f7:5f: 4a:7a:b7:b3:d4:0d:10:46:d7:65:7a:ca:b9:b4:f5:27:1f:f6: b9:9e:c6:99:96:78:25:57:7b:52:92:da:94:d2:88:30:a8:f7: b2:30:85:d9:4c:32:1c:e3:9c:a8:18:9b:e5:e9:21:bf:30:10: 61:88:f7:dd:e1:4b:25:c8:24:34:58:23:57:ad:ec:8c:42:40: 6d:85:a5:11:a6:7a:a7:6a:e3:69:22:bd:f9:0a:d2:65:7a:e0: 50:dd:f0:ae:14:8b:58:69:f7:bc:92:66:79:b7:5e:5c:9d:e3: bf:57:22:d3:fe:80:58:f9:2e:24:8a:4e:9d:84:91:ac:4a:44: 06:c5:f2:9c:23:3e:b1:9c:29:b7:51:f4:4d:65:a3:d7:99:31: 2a:25:9d:7c:bb:c3:43:ba:b1:02:9c:24:f1:8a:3a:6f:40:9a: b7:b9:11:3f:df:66:39:0c:a9:57:82:b2:76:fc:db:64:17:18: 0c:d5:1f:28:01:e8:18:73:1c:bd:c8:50:b9:82:ed:6b:86:5f: 31:6d:d4:d7 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt4NIzE8BPJu4vYcREM5W7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDM1NjU4YjU4YjcxNDE5NmVlZjM3MWJkOTY3YzBjNWUyY2FiZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xzqq2PHf+qz7KB7I0ru02Khh7ub fZV+Fch3iQxXDELCKcgltLDwWPLqYPiA5njLCAXksPGqSvz1Z0VJdtkYHHb2BOJ6 92jXpfTlx8DwAB/IipDNryonrGfgyVAHaZ6a7XiLUWRycUwhg3FLp0bUz/d0fUu+ aSq4h4yu1A0hOokuSzqhWJeMTdtDkrZQSnEAkgn7YU4AMvUzEsexOzvdiyeQc/IJ meHVA6y2XuJKzgG5DUbUQ39w428Dfo74bqgumO3atqIV+r8wPd+KDhXpPzcF1KG6 VC6IjeOzHQbPohlcTon/FZkwtAzxLb84rI/pmJgKHE3rvFQKrv8UywwFsQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzkxZjhm OS1mYzNmLTRiYjgtODQ1NC00MDViMGJkYTJjMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvOTFmOGY5 LWZjM2YtNGJiOC04NDU0LTQwNWIwYmRhMmMyNi8xLzFEVmxpMWkzRkJsdTd6Y2Iy V2ZBeGVMS3ZXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAqBAIAATAkAwQFLpZAAwQBW+0GAwQCW+0MAwQEsG+wAwQCwrvk AwQAwyp+MA8EAgACMAkDBwAgAQZ8LMgwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAID AItBAgMApecCAwCuuAIDALwpMA0GCSqGSIb3DQEBCwUAA4IBAQBmX0KMM/Wty2Mh qypkpFGvx/2Idi1RRVcKwqH5/6EMcrImykVOpw7LsESWdVh/xPKFHLMb919Kerez 1A0QRtdlesq5tPUnH/a5nsaZlnglV3tSktqU0ogwqPeyMIXZTDIc45yoGJvl6SG/ MBBhiPfd4UslyCQ0WCNXreyMQkBthaURpnqnauNpIr35CtJleuBQ3fCuFItYafe8 kmZ5t15cneO/VyLT/oBY+S4kik6dhJGsSkQGxfKcIz6xnCm3UfRNZaPXmTEqJZ18 u8NDurECnCTxijpvQJq3uRE/32Y5DKlXgrJ2/NtkFxgM1R8oAegYcxy9yFC5gu1r hl8xbdTX -----END CERTIFICATE-----Generated at Mon Jan 26 09:56:15 2026 by rpki-client