This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer File: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer (raw, json) Hash identifier: YcHgUEOSizoJ+WZjbway52+YcS4ilb9np9dp+xinCKg= Subject key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2EB9625DB84ED564B91120FD95738 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51665 IP: 178.237.192.0/20 IP: 2a04:7e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:eb:96:25:db:84:ed:56:4b:91:12:0f:d9:57:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:67:74:6b:df:5e:dd:a0:75:2a:25:e0:91: f6:aa:cf:1e:6b:47:63:4f:85:e9:ef:12:66:7e:fb: 85:7b:50:0c:87:70:d7:e6:05:1e:80:2f:32:ad:5c: e5:77:16:e7:8b:3a:f1:69:25:5e:88:ec:0b:7d:0d: f5:26:37:dc:e2:2d:05:7d:b0:e3:3c:62:d1:23:20: 64:cf:56:e1:fc:ff:f9:37:b1:c0:a6:45:51:ff:3c: ec:2d:16:43:67:ec:8d:e8:36:d3:89:bc:9f:0b:84: 36:26:4a:e1:03:26:f0:34:24:6d:c8:9d:e3:30:c1: 56:c3:7a:90:ac:bb:0d:db:2d:56:64:87:41:62:b6: 1d:a8:93:ca:59:24:27:8c:79:ca:4a:63:fc:6e:e1: 46:7c:84:7b:92:84:7e:08:c1:25:86:c7:bb:e8:84: 3f:c8:53:69:4d:07:b7:ce:ea:4a:39:1b:b2:82:ea: 77:19:7b:35:f1:2e:8c:f6:19:0f:3f:b2:7c:2d:da: b7:07:6b:c0:16:68:7c:f8:e1:df:4e:16:5c:31:41: 05:95:60:3f:0f:19:6a:e6:91:05:94:23:8e:68:1f: 2c:8d:71:30:a9:9e:00:df:4f:88:bc:f9:27:aa:15: 71:f4:ba:a2:74:2d:24:28:16:ac:d2:93:d4:0f:05: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.192.0/20 IPv6: 2a04:7e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51665 Signature Algorithm: sha256WithRSAEncryption 2c:d6:c3:12:9c:ad:b7:2a:aa:b6:96:c1:92:96:07:ba:55:47: b7:7c:41:be:88:79:65:51:12:d8:7a:e7:a3:03:c3:b5:be:50: 40:1f:f9:5f:c8:74:ec:15:7a:fc:c1:30:5c:5f:16:a4:2a:aa: 01:7e:79:09:6e:7b:73:87:e9:c8:90:2c:8c:ab:aa:53:70:21: 25:e8:10:b8:37:29:71:84:a8:19:4c:c5:2b:d1:66:f9:4b:9f: 5d:c9:56:c8:a0:cd:7f:ea:72:f6:bc:81:84:c3:e6:82:59:c5: 19:75:c8:1e:0a:36:50:a0:b9:23:9c:47:74:92:b7:ac:87:43: 58:69:cb:ae:3d:5c:be:cd:e1:44:c1:fb:32:e3:cb:c7:19:2b: f0:76:c2:19:28:c6:e9:10:fe:44:04:2f:21:43:58:31:07:f0: a8:5b:06:b8:89:e7:29:d9:c1:60:b2:49:60:31:98:af:0e:a9: ad:67:f5:b9:26:d9:31:d8:e9:7e:c5:54:80:41:63:64:de:dd: 9c:36:9c:7f:04:00:5a:4c:66:b8:68:02:22:7f:ce:ac:10:91: af:0a:24:39:15:e4:00:3d:95:38:07:fb:07:b9:35:64:6a:4f: 6a:49:a0:94:29:41:f7:48:31:73:b3:55:b7:e2:ff:6f:d1:68: 25:1e:d3:49 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ouuWJduE7VZLkRIP2Vc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDk5MjJjYThkMTM5YTRkMDNkNmQ1N2NiYzgxNzdkYzA1ZmViOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJBndGvfXt2gdSol4JH2qs8ea0dj T4Xp7xJmfvuFe1AMh3DX5gUegC8yrVzldxbnizrxaSVeiOwLfQ31Jjfc4i0FfbDj PGLRIyBkz1bh/P/5N7HApkVR/zzsLRZDZ+yN6DbTibyfC4Q2JkrhAybwNCRtyJ3j MMFWw3qQrLsN2y1WZIdBYrYdqJPKWSQnjHnKSmP8buFGfIR7koR+CMElhse76IQ/ yFNpTQe3zupKORuygup3GXs18S6M9hkPP7J8Ldq3B2vAFmh8+OHfThZcMUEFlWA/ Dxlq5pEFlCOOaB8sjXEwqZ4A30+IvPknqhVx9LqidC0kKBas0pPUDwVHXQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNSZIsqNE5pNA9bVfLyBd9wF/rnsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzVjZWNj MC0yYTUzLTQ1MDAtODVhZS1lOGI2MGEyZGQ2YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNWNlY2Mw LTJhNTMtNDUwMC04NWFlLWU4YjYwYTJkZDZiNC8xLzFKa2l5bzBUbWswRDF0Vjh2 SUYzM0FYLXVldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEsu3AMA0EAgACMAcDBQMqBH4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJ0TANBgkqhkiG9w0BAQsFAAOCAQEALNbDEpyttyqq tpbBkpYHulVHt3xBvoh5ZVES2HrnowPDtb5QQB/5X8h07BV6/MEwXF8WpCqqAX55 CW57c4fpyJAsjKuqU3AhJegQuDcpcYSoGUzFK9Fm+UufXclWyKDNf+py9ryBhMPm glnFGXXIHgo2UKC5I5xHdJK3rIdDWGnLrj1cvs3hRMH7MuPLxxkr8HbCGSjG6RD+ RAQvIUNYMQfwqFsGuInnKdnBYLJJYDGYrw6prWf1uSbZMdjpfsVUgEFjZN7dnDac fwQAWkxmuGgCIn/OrBCRrwokORXkAD2VOAf7B7k1ZGpPakmglClB90gxc7NVt+L/ b9FoJR7TSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:57 2026 by rpki-client