This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer File: 1ITgzuV1xhkFP47isQBMxEL9LO0.cer (raw, json) Hash identifier: sJU0jfNPXWEwZbKtbTHbSPPEb6kbfyFosLWgvmX3eN0= Subject key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32FE4CC665BF0A9316F5A7E3BC914 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.163.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2f:e4:cc:66:5b:f0:a9:31:6f:5a:7e:3b:c9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:64:ad:21:7c:95:7b:6d:20:b2:aa:32:72: 7a:1a:0f:ec:a4:94:ac:c3:62:ff:0d:ef:e7:47:ab: 50:8d:22:43:fa:b7:49:93:ce:44:3b:da:98:ae:3c: 25:17:b4:d3:c1:1f:cb:5b:34:37:6a:95:d1:e1:79: f1:b9:6a:ce:2f:9e:a4:d4:5f:24:e9:5d:20:d0:55: c7:2e:bf:9d:7c:3f:ed:79:62:87:13:db:82:99:ba: 9d:b3:97:c0:5e:7b:b4:e6:93:96:66:a5:87:e1:13: 65:98:c5:27:49:76:bb:8b:5d:ac:30:c1:17:6f:bb: 70:be:d5:71:d0:3f:c3:72:9e:09:98:3b:26:b7:7b: 35:ce:e1:06:18:2d:c0:45:77:68:5b:53:6f:33:7f: 14:7f:6f:05:41:aa:67:bd:91:35:65:9b:43:5b:39: 47:89:d5:4d:b8:88:60:31:17:65:58:7a:81:5f:d4: 00:8e:c6:dc:bf:5b:14:58:a3:ef:6c:bf:86:92:27: d3:46:d0:44:20:1e:87:94:33:a4:fd:f1:36:e9:2f: 27:a3:3c:6a:ad:ac:4f:8d:de:5d:2e:4e:1f:76:c0: 57:20:e1:b5:81:9a:17:65:9b:08:34:9a:d3:06:e1: b2:78:56:6a:79:0a:b8:5b:7d:14:99:d9:ba:d6:82: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.222.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:87:32:d6:a7:3d:82:f9:e6:2c:86:c8:89:5f:5d:7c:65:6e: 60:57:01:43:6f:bf:a2:9a:fb:fa:91:65:00:cb:80:4b:62:d2: 5e:68:05:f8:8d:a2:77:94:13:ef:a9:80:53:2e:58:25:e8:86: 45:69:74:fa:44:a5:7b:d4:d5:ac:6f:58:c9:f2:11:b0:37:ac: 84:d1:56:52:c6:7d:95:2b:54:a6:ad:91:97:52:7e:92:f9:ad: ba:b2:50:7f:02:bd:71:d7:32:ef:e7:7b:f5:46:d0:d6:29:4e: fb:1a:c8:c8:a7:96:14:91:48:ba:6a:70:aa:c0:39:30:e0:99: c4:4b:d6:fa:c8:23:39:6f:3c:76:3d:19:fb:f6:03:78:79:35: 67:2d:e5:fb:2f:69:ad:e7:2a:6c:a0:06:f5:50:f5:5a:bd:96: 73:f6:cc:35:b1:96:45:70:84:1d:c2:4e:56:13:98:72:ef:07: 9f:ce:7b:77:3f:b5:d7:10:ee:98:f2:af:52:69:56:e8:0a:fe: 71:16:f5:4f:01:58:ce:97:80:fe:2a:14:02:d0:e9:79:3b:ff: 64:c8:2b:2b:c9:78:7e:90:54:d5:ed:c9:34:89:ef:43:3f:8a: 37:b8:5d:f7:9c:ae:6f:83:06:a0:2c:05:db:24:80:77:27:00: 75:cb:4f:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7oy/kzGZb8Kkxb1p+O8kUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDg0ZTBjZWU1NzVjNjE5MDUzZjhlZTJiMTAwNGNjNDQyZmQyY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudkrSF8lXttILKqMnJ6Gg/spJSs w2L/De/nR6tQjSJD+rdJk85EO9qYrjwlF7TTwR/LWzQ3apXR4XnxuWrOL56k1F8k 6V0g0FXHLr+dfD/teWKHE9uCmbqds5fAXnu05pOWZqWH4RNlmMUnSXa7i12sMMEX b7twvtVx0D/Dcp4JmDsmt3s1zuEGGC3ARXdoW1NvM38Uf28FQapnvZE1ZZtDWzlH idVNuIhgMRdlWHqBX9QAjsbcv1sUWKPvbL+GkifTRtBEIB6HlDOk/fE26S8nozxq raxPjd5dLk4fdsBXIOG1gZoXZZsINJrTBuGyeFZqeQq4W30Umdm61oKlWwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNSE4M7ldcYZBT+O4rEATMRC/SztMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzc4NDdm Yi1mNTVhLTQ5OTUtODUzMS1lYzAyNjJhYjMzZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNzg0N2Zi LWY1NWEtNDk5NS04NTMxLWVjMDI2MmFiMzNmMS8xLzFJVGd6dVYxeGhrRlA0N2lz UUJNeEVMOUxPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaPeMA0GCSqGSIb3DQEBCwUAA4IBAQB6hzLW pz2C+eYshsiJX118ZW5gVwFDb7+imvv6kWUAy4BLYtJeaAX4jaJ3lBPvqYBTLlgl 6IZFaXT6RKV71NWsb1jJ8hGwN6yE0VZSxn2VK1SmrZGXUn6S+a26slB/Ar1x1zLv 53v1RtDWKU77GsjIp5YUkUi6anCqwDkw4JnES9b6yCM5bzx2PRn79gN4eTVnLeX7 L2mt5ypsoAb1UPVavZZz9sw1sZZFcIQdwk5WE5hy7wefznt3P7XXEO6Y8q9SaVbo Cv5xFvVPAVjOl4D+KhQC0Ol5O/9kyCsryXh+kFTV7ck0ie9DP4o3uF33nK5vgwag LAXbJIB3JwB1y09E -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:10 2026 by rpki-client