This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer (raw, json) Hash identifier: vSU5C6syCSu7uQx+YLZ6qVYA/o1dd1BcbPqTWIIyIUI= Subject key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC588828E5799190C125DF95039A38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.17.8.0/21 IP: 194.53.139.0/24 IP: 213.239.138.0/23 IP: 2a02:2870::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:58:88:28:e5:79:91:90:c1:25:df:95:03:9a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:66:1b:51:a4:6c:fc:d8:63:fb:b6:85:dc: 14:fe:8b:8d:75:45:49:f1:f5:8e:fd:4b:05:f3:23: b9:2b:03:d2:35:e4:25:61:e7:d7:19:e8:f7:56:c1: 0e:a2:05:32:56:bb:1b:5a:f0:7d:ae:2f:d9:5e:d7: 9a:c9:a7:f3:ad:eb:15:d3:25:73:1d:13:d7:b6:d8: dc:d9:fa:fe:1b:ce:45:2c:80:d3:c6:d4:2a:fe:93: 20:f7:0e:08:5d:7b:94:ea:de:38:ba:cb:20:f3:b1: c4:b4:d5:0f:ed:b0:c1:04:63:ed:4c:4e:d8:b9:0d: ba:9b:66:93:84:5f:c0:25:ab:83:f6:5e:37:3c:87: 14:88:7a:59:ac:37:61:41:b4:41:70:b0:98:36:3f: 28:9f:9c:18:17:de:1b:c0:77:bf:c7:83:3b:6b:3a: e8:6c:af:4e:19:d1:71:50:96:70:96:5e:67:88:c7: f8:74:78:1e:ff:5f:a5:7a:20:27:e9:e0:3e:6d:54: e4:9d:62:14:93:c7:53:59:f7:08:5d:2d:25:8b:94: 89:77:22:7f:7e:cc:06:b9:be:8a:f6:a8:83:42:f5: b5:7e:9b:0a:55:43:5c:c1:28:82:de:28:76:11:13: 76:90:7a:2f:75:e5:86:c3:89:aa:ee:49:e0:df:08: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.8.0/21 194.53.139.0/24 213.239.138.0/23 IPv6: 2a02:2870::/29 Signature Algorithm: sha256WithRSAEncryption 37:d6:18:a6:f2:bb:5d:bd:51:4b:e4:3f:0b:2a:3e:5b:f3:bd: bc:9f:58:41:c7:46:ac:81:09:07:9d:f2:f7:11:ab:93:37:0c: c1:5d:77:d8:f2:32:0c:b9:b0:3f:82:54:2b:62:cf:04:ac:0d: ba:42:73:cb:03:66:9f:cd:a7:09:65:66:12:9c:0a:14:07:14: 7f:6f:b2:67:23:2c:7d:71:be:cc:d5:d6:14:84:dc:3f:43:b1: 73:6b:5a:04:00:ca:a3:30:e1:15:1d:dd:6f:f9:2b:44:ea:9a: d6:3b:e3:69:03:b7:ac:10:6e:3d:13:59:11:e5:20:9a:1a:3d: a3:3b:e9:19:16:cd:28:42:a6:c6:94:b3:32:5c:cf:7f:ba:fe: 91:5e:99:27:06:12:33:4e:6f:d9:32:be:82:0b:d9:3f:54:00: 3a:3e:e6:d6:56:32:7c:b3:fd:6d:f9:c9:da:cd:28:dd:ed:7a: 5f:5e:52:f8:96:ea:3c:5f:98:28:f1:6e:fe:28:52:aa:89:ef: 39:a3:7a:23:e3:63:76:0a:99:c0:6a:f3:04:c2:c6:15:2f:49: e2:0d:a4:de:b1:77:0d:de:39:56:88:ca:1f:73:bd:ad:48:60: ab:01:d8:e7:29:08:4b:b2:e4:f8:8d:07:f5:a2:6d:df:31:79: 1b:3e:b9:a5 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt57FiIKOV5kZDBJd+VA5o4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFmZTNmMGM5ZTU1NWU1MmQzNTA1ZDYxNjMyNzhkZjNkYTE4Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDlmG1GkbPzYY/u2hdwU/ouNdUVJ 8fWO/UsF8yO5KwPSNeQlYefXGej3VsEOogUyVrsbWvB9ri/ZXteayafzresV0yVz HRPXttjc2fr+G85FLIDTxtQq/pMg9w4IXXuU6t44ussg87HEtNUP7bDBBGPtTE7Y uQ26m2aThF/AJauD9l43PIcUiHpZrDdhQbRBcLCYNj8on5wYF94bwHe/x4M7azro bK9OGdFxUJZwll5niMf4dHge/1+leiAn6eA+bVTknWIUk8dTWfcIXS0li5SJdyJ/ fswGub6K9qiDQvW1fpsKVUNcwSiC3ih2ERN2kHovdeWGw4mq7kng3wjVIwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNSv4/DJ5VXlLTUF1hYyeN89oYzuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzFjNjdl Zi1lODNkLTQ0MjctODY0Yi1jNTk4MjViYmNiMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMWM2N2Vm LWU4M2QtNDQyNy04NjRiLWM1OTgyNWJiY2IzMi8xLzFLX2o4TW5sVmVVdE5RWFdG ako0M3oyaGpPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDLhEIAwQAwjWLAwQB1e+KMA0EAgACMAcDBQMq AihwMA0GCSqGSIb3DQEBCwUAA4IBAQA31him8rtdvVFL5D8LKj5b8728n1hBx0as gQkHnfL3EauTNwzBXXfY8jIMubA/glQrYs8ErA26QnPLA2afzacJZWYSnAoUBxR/ b7JnIyx9cb7M1dYUhNw/Q7Fza1oEAMqjMOEVHd1v+StE6prWO+NpA7esEG49E1kR 5SCaGj2jO+kZFs0oQqbGlLMyXM9/uv6RXpknBhIzTm/ZMr6CC9k/VAA6PubWVjJ8 s/1t+cnazSjd7XpfXlL4luo8X5go8W7+KFKqie85o3oj42N2CpnAavMEwsYVL0ni DaTesXcN3jlWiMofc72tSGCrAdjnKQhLsuT4jQf1om3fMXkbPrml -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:59 2026 by rpki-client