This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer File: 1YghK_XazhCA3EXixVuS_4XGwZI.cer (raw, json) Hash identifier: 0WnQyzakto45PBQz2MfMBxpIx8gP2lF1lwzyiTe4QYE= Subject key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB64CCE8B6572B21EC94ABD02410D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198260 AS: 207266 IP: 185.62.164.0/22 IP: 2a01:8840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:64:cc:e8:b6:57:2b:21:ec:94:ab:d0:24:10:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:03:2d:c3:89:12:6a:12:a4:5b:b5:cb:f7:cc: c5:2a:7d:04:4b:0c:58:70:97:5a:f2:69:07:e7:87: 48:31:77:2b:9c:2a:18:4b:82:06:d0:ae:83:77:b3: c6:e2:98:24:1c:3d:81:d4:40:93:b0:34:04:ab:ad: c9:43:a5:1d:f2:0b:64:3b:ae:e2:b1:4a:b3:c5:d0: 6f:c4:d3:ca:c3:26:d4:38:14:52:c6:2f:0e:99:e0: 2c:56:55:bd:b9:4e:3b:03:54:45:27:c5:29:2a:f4: 5d:b2:4f:78:cc:c7:4d:fc:1e:d4:f7:ff:de:de:ba: fb:94:f5:fa:11:ce:b0:f5:54:95:44:2c:88:e9:2a: a6:fb:6b:a9:62:27:81:0e:9f:c5:31:b6:44:75:71: a9:43:60:88:9d:66:eb:f7:68:11:f6:8c:b3:dd:b8: 52:d7:11:da:7d:df:6f:1d:f5:79:44:61:65:3c:71: 49:86:c9:ed:a5:db:c9:6f:a6:00:b5:34:d7:dc:9d: db:2d:12:c8:90:0e:9d:cf:23:91:70:83:58:10:6d: ef:d9:1a:f5:1b:92:6e:79:ea:c1:69:cc:c5:62:f3: fd:86:f7:e7:da:bd:2f:eb:ef:13:cd:7f:b5:95:49: 33:9b:d3:e3:7f:b4:61:b3:13:d7:7e:93:f5:6b:55: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.164.0/22 IPv6: 2a01:8840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198260 207266 Signature Algorithm: sha256WithRSAEncryption 42:b0:39:05:9b:2f:85:2d:0a:53:a9:b8:80:ae:ae:fd:9d:83: 8b:2b:f6:06:f2:f3:2b:61:49:3d:0f:cf:fa:ba:aa:98:49:60: 6f:e3:74:7a:2d:6d:3c:23:9e:4b:79:4a:67:b5:b2:1a:20:c3: 12:d4:91:52:ee:f8:21:0c:53:12:0f:ef:b0:46:2b:8f:07:57: 6c:1b:27:88:09:1b:c9:d7:80:82:6f:98:c5:2b:12:4b:6e:ae: 74:e2:4a:c7:87:f0:8a:61:b9:41:47:64:a8:3f:92:84:c0:9a: 56:a4:8c:a0:35:bc:66:77:d2:3a:e3:6b:32:a1:ac:84:cb:f1: 04:10:5a:92:1e:9e:9a:69:d6:97:60:65:ea:4c:7b:8a:5c:bc: 4c:d8:e1:48:c9:30:39:f5:e3:61:ec:20:84:3c:8e:f0:f9:fd: 7b:3c:10:29:c4:a8:93:b9:2d:d1:9e:78:75:96:ab:b4:57:be: 0a:c9:ed:be:6a:92:79:58:cf:f5:44:fe:86:86:e1:1a:1e:a9: 33:0a:d0:46:35:47:53:f2:a9:b9:ab:5b:22:75:96:8c:4e:0d: 79:38:2f:8a:bf:db:5d:57:5e:4b:dd:94:41:da:7e:d6:9d:89: 2d:f4:7e:c9:8b:17:14:3a:11:f3:18:dd:7b:5c:06:cd:ae:72: b3:93:ac:b9 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt262TM6LZXKyHslKvQJBDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTg4MjEyYmY1ZGFjZTEwODBkYzQ1ZTJjNTViOTJmZjg1YzZjMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QMtw4kSahKkW7XL98zFKn0ESwxY cJda8mkH54dIMXcrnCoYS4IG0K6Dd7PG4pgkHD2B1ECTsDQEq63JQ6Ud8gtkO67i sUqzxdBvxNPKwybUOBRSxi8OmeAsVlW9uU47A1RFJ8UpKvRdsk94zMdN/B7U9//e 3rr7lPX6Ec6w9VSVRCyI6Sqm+2upYieBDp/FMbZEdXGpQ2CInWbr92gR9oyz3bhS 1xHafd9vHfV5RGFlPHFJhsntpdvJb6YAtTTX3J3bLRLIkA6dzyORcINYEG3v2Rr1 G5JueerBaczFYvP9hvfn2r0v6+8TzX+1lUkzm9Pjf7RhsxPXfpP1a1U5fQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNWIISv12s4QgNxF4sVbkv+FxsGSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzIxMTM1 NC1lYmU0LTQ3OTctOThmMy0xYjJhYzM1YzA5YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMjExMzU0 LWViZTQtNDc5Ny05OGYzLTFiMmFjMzVjMDlhYS8xLzFZZ2hLX1hhemhDQTNFWGl4 VnVTXzRYR3daSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT6kMA0EAgACMAcDBQAqAYhAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMGdAIDAymiMA0GCSqGSIb3DQEBCwUAA4IBAQBCsDkF my+FLQpTqbiArq79nYOLK/YG8vMrYUk9D8/6uqqYSWBv43R6LW08I55LeUpntbIa IMMS1JFS7vghDFMSD++wRiuPB1dsGyeICRvJ14CCb5jFKxJLbq504krHh/CKYblB R2SoP5KEwJpWpIygNbxmd9I642syoayEy/EEEFqSHp6aadaXYGXqTHuKXLxM2OFI yTA59eNh7CCEPI7w+f17PBApxKiTuS3Rnnh1lqu0V74Kye2+apJ5WM/1RP6GhuEa HqkzCtBGNUdT8qm5q1sidZaMTg15OC+Kv9tdV15L3ZRB2n7WnYkt9H7JixcUOhHz GN17XAbNrnKzk6y5 -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:04 2026 by rpki-client