This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer File: 1QliA1xelRATygZwylaeefjWPBU.cer (raw, json) Hash identifier: NBN5h96/OHrUAX6fht/pyinC+wdEI4IuobsEUGlg8z0= Subject key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B210DF2C447A4C7CC20951428D030 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42363 IP: 46.255.160.0/21 IP: 91.207.254.0/23 IP: 185.100.4.0/22 IP: 194.110.192.0/24 IP: 195.144.11.0/24 IP: 2a05:de80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:21:0d:f2:c4:47:a4:c7:cc:20:95:14:28:d0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d50962035c5e951013ca0670ca569e79f8d63c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:53:f1:ca:ee:40:7d:56:ac:12:72:ef:55: 0c:5f:da:70:e7:bd:37:b6:21:a8:83:a3:44:a5:3f: c5:b1:29:fa:c0:14:95:8a:08:18:e3:2a:ee:a3:e9: 07:c7:86:93:ff:ed:37:53:9b:28:67:31:82:1a:88: b8:00:c2:9e:15:6e:f4:57:7a:94:2e:72:d7:1b:31: 3e:58:dc:55:32:ce:36:83:3a:fa:29:7c:e9:ff:89: 93:bb:a4:55:a9:17:cf:c1:d2:48:b9:63:cb:4f:d9: 2f:b4:28:9b:2e:73:fa:29:cb:d8:50:b4:23:d0:22: e0:a5:68:ea:14:9c:c3:ef:fe:a2:1a:eb:2e:22:e1: 21:6f:b5:13:6b:ff:e0:6d:a0:98:f2:e3:73:9e:d8: 24:87:32:75:66:a5:2c:27:bc:0a:e6:13:c8:1a:78: b0:5e:40:f4:69:4c:50:37:3d:7e:35:93:72:7c:a6: d2:57:03:02:a2:99:47:d8:4f:19:fe:97:08:a2:9a: 9c:86:37:9a:0b:89:a3:51:c2:64:33:54:5a:c4:23: 9f:90:f9:28:cf:db:e7:a6:ae:3b:79:3c:ff:e0:29: 89:f1:81:ef:79:4c:44:8b:15:63:ae:aa:f2:7e:ff: db:22:23:e3:af:5d:ed:b3:d6:76:0e:a5:ab:f7:59: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.160.0/21 91.207.254.0/23 185.100.4.0/22 194.110.192.0/24 195.144.11.0/24 IPv6: 2a05:de80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42363 Signature Algorithm: sha256WithRSAEncryption 9a:42:f3:54:00:8b:27:df:21:a8:93:46:52:75:af:ec:67:60: c0:fd:c0:60:c0:66:c4:c7:fc:d0:b4:99:4a:dc:a9:40:05:7f: ce:63:dd:54:9b:2f:e3:12:95:a6:de:3d:20:83:51:ee:35:7b: 34:ab:32:15:c5:66:65:d8:37:f8:d0:74:e0:26:04:88:ea:e4: 78:15:8f:3f:ce:22:50:06:ff:44:ff:b2:fd:3e:e1:f2:13:e4: 03:3f:df:33:16:da:dd:e3:9a:85:ff:4f:96:4d:f6:b6:50:80: 3c:df:df:6c:79:bc:51:03:9b:87:69:ac:c2:87:1f:fa:65:e7: b4:c4:8b:be:dd:12:e2:c9:82:dc:32:57:e8:e8:9d:ff:18:14: ee:af:e3:cf:f6:7b:b1:ad:36:40:a8:69:dc:71:ec:e7:a4:13: e0:b0:ba:f9:ca:c2:af:46:95:b8:18:44:58:9a:77:5c:94:39: 60:dd:76:ea:89:76:c8:75:8e:e8:0f:c5:f4:4b:1b:51:92:4a: 33:be:9a:e8:a0:8b:1b:ce:a3:92:23:d8:1c:80:08:6c:d0:18: bf:fd:f0:0d:82:3c:14:dd:2e:04:83:09:90:5c:8c:18:49:f8: e2:d6:14:52:b7:9d:98:e1:09:f0:ea:7a:4c:22:2f:9e:39:3d: f9:13:da:50 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6WyEN8sRHpMfMIJUUKNAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTA5NjIwMzVjNWU5NTEwMTNjYTA2NzBjYTU2OWU3OWY4ZDYzYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqENT8cruQH1WrBJy71UMX9pw5703 tiGog6NEpT/FsSn6wBSViggY4yruo+kHx4aT/+03U5soZzGCGoi4AMKeFW70V3qU LnLXGzE+WNxVMs42gzr6KXzp/4mTu6RVqRfPwdJIuWPLT9kvtCibLnP6KcvYULQj 0CLgpWjqFJzD7/6iGusuIuEhb7UTa//gbaCY8uNzntgkhzJ1ZqUsJ7wK5hPIGniw XkD0aUxQNz1+NZNyfKbSVwMCoplH2E8Z/pcIopqchjeaC4mjUcJkM1RaxCOfkPko z9vnpq47eTz/4CmJ8YHveUxEixVjrqryfv/bIiPjr13ts9Z2DqWr91n2SwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFNUJYgNcXpUQE8oGcMpWnnn41jwVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2Q0ZThl OS0wZDQ3LTQxOWItYjNlMi0wNTRhMzYzMTE1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvZDRlOGU5 LTBkNDctNDE5Yi1iM2UyLTA1NGEzNjMxMTVmNS8xLzFRbGlBMXhlbFJBVHlnWnd5 bGFlZWZqV1BCVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDLv+gAwQBW8/+AwQCuWQEAwQAwm7AAwQAw5AL MA0EAgACMAcDBQMqBd6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClezANBgkq hkiG9w0BAQsFAAOCAQEAmkLzVACLJ98hqJNGUnWv7GdgwP3AYMBmxMf80LSZStyp QAV/zmPdVJsv4xKVpt49IINR7jV7NKsyFcVmZdg3+NB04CYEiOrkeBWPP84iUAb/ RP+y/T7h8hPkAz/fMxba3eOahf9Plk32tlCAPN/fbHm8UQObh2mswocf+mXntMSL vt0S4smC3DJX6Oid/xgU7q/jz/Z7sa02QKhp3HHs56QT4LC6+crCr0aVuBhEWJp3 XJQ5YN126ol2yHWO6A/F9EsbUZJKM76a6KCLG86jkiPYHIAIbNAYv/3wDYI8FN0u BIMJkFyMGEn44tYUUredmOEJ8Op6TCIvnjk9+RPaUA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:42:01 2026 by rpki-client