This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer File: 1fJk44BaPRBFNzV6FP-SasApWZw.cer (raw, json) Hash identifier: 0r46jBM0NxhvP9Dk2sA8bvw95AwCot5KomEgeR/+rGE= Subject key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5A5519D94144C564F85E4EDBAE3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207336 IP: 185.36.102.0/24 IP: 2a05:4cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5a:55:19:d9:41:44:c5:64:f8:5e:4e:db:ae:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f264e3805a3d104537357a14ff926ac029599c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:86:b0:9a:87:4a:05:19:25:a3:30:59:50: bf:d8:00:57:8f:2a:77:6e:6b:c6:ad:b8:fb:0e:42: b3:d7:13:c7:60:6e:f9:67:98:b1:14:49:dc:1f:8a: 9e:8e:fe:19:a1:e2:6e:70:f9:80:c5:77:ce:e1:fe: 5d:98:53:ed:78:15:b6:b9:9d:00:f9:c5:1b:6b:30: 16:23:5c:5e:09:08:4b:e2:b9:7c:f6:5d:c5:f7:a2: ba:7b:3f:75:ca:31:e9:2c:9d:5b:d0:23:83:7a:5a: 01:df:75:2c:bb:9d:fa:fb:53:ba:67:41:0f:23:1b: 72:64:a2:b9:28:3e:63:1f:8a:37:98:47:79:00:94: da:f7:5a:fd:3e:65:c6:06:97:2d:ab:de:94:33:9f: 13:4e:37:31:5b:fb:02:97:c0:90:20:6a:d0:91:f3: 6c:e1:b8:ee:8d:1e:03:2e:62:40:34:84:b6:4d:31: 9c:2a:78:80:dd:13:9d:40:ea:91:a0:a9:e2:77:73: dc:7e:94:f5:45:c6:da:9b:c4:98:45:93:8f:58:15: af:bc:ae:6d:7d:51:b4:11:41:b4:20:c7:63:73:14: aa:c4:13:62:52:f8:f0:4e:ea:71:fe:ff:61:f6:82: 38:3d:36:7f:ac:73:bc:10:38:62:c1:8c:06:ad:77: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.102.0/24 IPv6: 2a05:4cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207336 Signature Algorithm: sha256WithRSAEncryption 2f:ea:df:97:45:57:96:53:63:31:3f:fd:9f:53:ab:e5:ba:f4: 50:63:9d:c3:84:f2:e8:7f:41:7a:ab:b4:c6:12:c5:4f:c2:a0: c6:6e:75:6a:97:e4:40:9e:6e:00:af:80:2c:03:71:87:6c:63: 3d:40:f8:cc:17:70:f7:a0:58:39:f6:23:e9:29:42:16:0e:9b: 56:7e:1e:b1:f8:71:c3:a2:ed:27:86:84:a3:eb:a0:89:a8:ff: 13:2a:b8:f0:cf:1b:8b:dd:46:5e:ab:ca:d1:84:47:71:7b:af: c0:76:61:f1:ac:e0:1d:7a:f4:2b:91:14:0d:d7:51:6e:73:e0: 02:29:74:7d:6f:14:e9:83:d4:c4:e4:84:71:97:7e:fd:26:4b: af:77:25:77:f6:d6:2c:21:d6:e2:7f:6f:5d:48:9e:f7:f1:cc: c4:44:2a:a6:dd:95:b6:9f:d2:43:c4:19:f2:74:15:44:7a:e2: 7f:e6:9f:6a:a5:fc:0e:3f:05:e5:13:05:4b:05:ef:16:bf:9f: c0:45:55:22:59:ad:87:d7:82:94:18:26:6e:29:07:6b:6b:0b: e9:b9:d2:ee:5c:fd:b8:07:fc:72:f5:33:52:00:eb:3f:cf:95: 41:25:f9:9c:f9:aa:e4:ce:57:a0:ba:a0:67:ab:c5:9b:d8:69: b5:cf:e8:49 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57VpVGdlBRMVk+F5O2646MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWYyNjRlMzgwNWEzZDEwNDUzNzM1N2ExNGZmOTI2YWMwMjk1OTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbKGsJqHSgUZJaMwWVC/2ABXjyp3 bmvGrbj7DkKz1xPHYG75Z5ixFEncH4qejv4ZoeJucPmAxXfO4f5dmFPteBW2uZ0A +cUbazAWI1xeCQhL4rl89l3F96K6ez91yjHpLJ1b0CODeloB33Usu536+1O6Z0EP IxtyZKK5KD5jH4o3mEd5AJTa91r9PmXGBpctq96UM58TTjcxW/sCl8CQIGrQkfNs 4bjujR4DLmJANIS2TTGcKniA3ROdQOqRoKnid3PcfpT1Rcbam8SYRZOPWBWvvK5t fVG0EUG0IMdjcxSqxBNiUvjwTupx/v9h9oI4PTZ/rHO8EDhiwYwGrXfwwQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNXyZOOAWj0QRTc1ehT/kmrAKVmcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzVkNjMy YS1lNDUzLTQyYTUtODA1Zi0zZGNlY2JjYTM3MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvNWQ2MzJh LWU0NTMtNDJhNS04MDVmLTNkY2VjYmNhMzcwMi8xLzFmSms0NEJhUFJCRk56VjZG UC1TYXNBcFdady5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuSRmMA0EAgACMAcDBQMqBUzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMp6DANBgkqhkiG9w0BAQsFAAOCAQEAL+rfl0VXllNj MT/9n1Or5br0UGOdw4Ty6H9Bequ0xhLFT8Kgxm51apfkQJ5uAK+ALANxh2xjPUD4 zBdw96BYOfYj6SlCFg6bVn4esfhxw6LtJ4aEo+ugiaj/Eyq48M8bi91GXqvK0YRH cXuvwHZh8azgHXr0K5EUDddRbnPgAil0fW8U6YPUxOSEcZd+/SZLr3cld/bWLCHW 4n9vXUie9/HMxEQqpt2Vtp/SQ8QZ8nQVRHrif+afaqX8Dj8F5RMFSwXvFr+fwEVV Ilmth9eClBgmbikHa2sL6bnS7lz9uAf8cvUzUgDrP8+VQSX5nPmq5M5XoLqgZ6vF m9hptc/oSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:35 2026 by rpki-client