This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer File: 1V5WEXiBQrMVQorlH2fLus-At-g.cer (raw, json) Hash identifier: W/87403sFbw1q+85DORcRJ0tm36/PKrfZkfUGJkxbMs= Subject key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8370C3A1146CB4DEF028D2D64DBDDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43673 IP: 91.198.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:70:c3:a1:14:6c:b4:de:f0:28:d2:d6:4d:bd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:98:db:be:e0:f2:3d:1c:5b:fc:a2:4a:f0: 07:b3:df:44:d8:3b:04:b0:2d:a6:ee:8f:32:c0:7f: 2b:71:bb:ad:94:9a:77:d9:53:0d:f2:f0:46:6d:f3: b7:34:63:3b:a6:0d:ad:fa:58:9d:5a:98:a4:d4:4b: 1f:9d:5f:ae:34:48:07:ad:ef:74:56:82:08:dd:a2: 60:a3:ca:1f:4c:df:8c:7c:9d:ef:9a:62:b7:a1:5a: 2f:2e:32:70:bf:01:7a:d9:58:df:bd:1f:ee:76:2e: 2c:77:f9:b2:b2:94:ac:82:10:92:29:e5:d0:a6:da: fd:da:d2:2b:24:95:1f:72:7f:49:ba:74:ae:59:10: 5f:f0:81:39:ef:89:ed:06:3d:35:45:ea:28:18:af: 51:9d:7b:81:06:04:62:4c:54:81:12:3f:9c:21:b8: e5:2b:78:0c:3a:ba:72:64:82:4c:e0:c3:b9:9c:5a: f9:42:94:63:37:e2:88:6f:f3:94:d0:56:17:f2:b7: e4:a8:1b:f7:f6:14:7f:84:24:44:61:ca:02:1c:e3: a5:77:d3:6d:bf:37:e9:65:67:8c:aa:6c:86:c4:39: 4f:01:b6:1b:4c:d4:42:e7:66:1c:00:68:77:89:f3: 02:d6:a1:9d:d7:51:1e:d7:dc:af:85:a8:17:36:1a: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.98.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43673 Signature Algorithm: sha256WithRSAEncryption 32:42:15:0e:71:7c:87:ed:5d:cf:79:b3:91:ba:36:fb:b2:f8: 13:09:d9:ea:6b:c4:e0:eb:50:c4:1c:38:e2:39:69:f0:8e:ed: bb:22:52:93:c3:f3:69:66:a4:3e:2d:d6:0e:a8:36:f3:09:43: 91:91:05:33:1c:93:d6:d2:aa:6e:11:71:c1:f4:d8:df:58:a7: c2:ea:c9:1d:df:6c:4d:4a:7f:f1:28:2e:22:b3:cc:5d:3d:09: a3:26:d5:9d:6d:8b:e7:3a:e9:78:44:55:23:83:61:df:12:2c: 0d:65:0b:81:60:5c:15:a7:16:78:1e:be:68:56:af:a6:91:be: fc:c9:3d:d1:ef:db:a0:da:f0:ba:5c:0c:ea:68:65:d3:0a:c2: bf:4c:e9:26:a6:39:2a:29:85:0f:17:13:43:2e:c0:d9:0c:dd: d3:a8:cd:16:be:d7:e6:67:7f:d3:82:8d:08:01:ab:88:03:56: ae:3a:00:2f:4e:1f:75:fc:33:fd:9e:f7:26:59:25:f9:54:1e: 32:6f:4e:b8:86:6c:ce:d3:64:f8:9a:ed:9a:c2:5d:cc:f2:65: 3c:ad:87:a7:30:cc:c3:b6:a1:d2:ad:d4:74:a7:c4:12:a2:2e: 57:65:a9:2d:fe:d9:70:d2:45:84:c2:fb:d3:72:32:6b:15:3b: ca:8d:cc:e2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/g3DDoRRstN7wKNLWTb3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTVlNTYxMTc4ODE0MmIzMTU0MjhhZTUxZjY3Y2JiYWNmODBiN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9+Y277g8j0cW/yiSvAHs99E2DsE sC2m7o8ywH8rcbutlJp32VMN8vBGbfO3NGM7pg2t+lidWpik1EsfnV+uNEgHre90 VoII3aJgo8ofTN+MfJ3vmmK3oVovLjJwvwF62VjfvR/udi4sd/myspSsghCSKeXQ ptr92tIrJJUfcn9JunSuWRBf8IE574ntBj01ReooGK9RnXuBBgRiTFSBEj+cIbjl K3gMOrpyZIJM4MO5nFr5QpRjN+KIb/OU0FYX8rfkqBv39hR/hCREYcoCHOOld9Nt vzfpZWeMqmyGxDlPAbYbTNRC52YcAGh3ifMC1qGd11Ee19yvhagXNhpcuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNVeVhF4gUKzFUKK5R9ny7rPgLfoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzIzZGZi Mi03NDlkLTQ3MWQtYjExNC04M2M3ZGI3NTk2ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMjNkZmIy LTc0OWQtNDcxZC1iMTE0LTgzYzdkYjc1OTZmZS8xLzFWNVdFWGlCUXJNVlFvcmxI MmZMdXMtQXQtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCqmTANBgkqhkiG9w0BAQsFAAOCAQEAMkIVDnF8h+1dz3mzkbo2+7L4EwnZ6mvE 4OtQxBw44jlp8I7tuyJSk8PzaWakPi3WDqg28wlDkZEFMxyT1tKqbhFxwfTY31in wurJHd9sTUp/8SguIrPMXT0JoybVnW2L5zrpeERVI4Nh3xIsDWULgWBcFacWeB6+ aFavppG+/Mk90e/boNrwulwM6mhl0wrCv0zpJqY5KimFDxcTQy7A2Qzd06jNFr7X 5md/04KNCAGriANWrjoAL04fdfwz/Z73Jlkl+VQeMm9OuIZsztNk+JrtmsJdzPJl PK2HpzDMw7ah0q3UdKfEEqIuV2WpLf7ZcNJFhML703IyaxU7yo3M4g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:52 2026 by rpki-client