This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer File: 1g9F98xLaR_UoxwfHAtPYF13pu8.cer (raw, json) Hash identifier: ly8+RAsuHa7juKsx6w0XXw1hf7lxcK/HQ1BXAGGOls8= Subject key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5BE4CE2028C523EF5756FEF073D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2027 AS: 57199 IP: 45.13.104.0/22 IP: 62.204.43.0/24 IP: 193.58.42.0/23 IP: 195.20.209.0/24 IP: 2a0e:e700::/29 IP: 2a0f:ce00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:e4:ce:20:28:c5:23:ef:57:56:fe:f0:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:e3:77:38:c2:bc:ab:a3:16:e1:18:c4:73: d5:6b:aa:4f:a7:09:db:a0:bf:c8:53:12:ae:bd:61: 42:dd:c3:2c:90:59:ac:03:3f:59:74:1e:80:90:36: db:66:0f:e1:7f:62:07:06:7c:1f:38:d7:a2:ab:31: 1d:a7:63:c1:b8:98:ed:72:61:d0:c2:28:3b:3e:24: 1f:94:3a:a2:fe:c2:e9:04:92:44:92:bf:01:cf:d1: bc:bb:5a:c0:48:0b:78:47:fd:be:7c:3c:56:82:78: 67:4f:3f:62:ac:42:0b:61:e3:10:89:d6:2b:94:2a: 39:2b:75:d7:0f:5b:2c:c1:da:8e:40:b6:d0:36:aa: 46:4a:cf:8a:49:75:44:0d:ce:bd:6b:2e:aa:7d:a8: 81:c4:4c:f3:35:b8:19:39:6f:ca:34:e6:55:22:00: 2a:5d:c2:e6:bf:31:ed:4f:63:91:90:99:93:06:64: 58:7e:ea:d8:e1:e0:2d:2a:a4:46:f5:8d:c5:af:ac: d7:d1:de:96:59:df:41:ef:09:30:3f:c0:87:c1:a9: bb:53:b1:96:23:03:0e:b4:71:88:a9:26:db:d2:24: 09:1d:34:27:c2:1d:7d:5d:96:94:f6:a3:53:33:cd: cf:35:15:86:96:84:1f:6e:80:26:97:55:20:be:e7: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.104.0/22 62.204.43.0/24 193.58.42.0/23 195.20.209.0/24 IPv6: 2a0e:e700::/29 2a0f:ce00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2027 57199 Signature Algorithm: sha256WithRSAEncryption 10:73:cb:2d:d3:9c:7f:41:95:32:8c:6f:73:ef:7b:78:6f:02: ed:0f:ba:64:85:bf:be:85:fe:49:05:9c:0c:b8:aa:04:80:0f: 68:c5:03:54:47:94:dc:f9:35:3b:b4:48:a0:d5:8b:f5:a2:51: 78:23:4a:af:13:f2:3a:f8:e1:be:14:02:a0:21:f2:93:75:db: 62:40:5e:bb:e1:6e:a7:e8:8d:f5:96:c5:6d:be:cd:dc:9c:6b: e1:81:da:3e:e0:d3:94:b5:46:c7:8f:ab:18:df:c3:67:b5:d1: 99:48:7a:ad:f0:e9:a1:6c:2e:fb:28:72:9c:ac:d8:a6:22:3e: c6:6d:52:88:15:89:4f:06:5b:e6:71:62:e8:69:af:28:31:e5: 13:67:cc:5f:4d:ed:6b:35:31:bb:1d:4e:3c:6f:97:e6:9c:10: 07:64:00:b4:92:9e:46:09:cd:19:e4:ff:6f:27:76:a9:b8:e4: 5d:a2:2a:51:14:1e:2d:a2:45:10:2b:28:53:07:92:b2:de:30: 10:0c:03:80:40:a3:68:b5:66:a5:8f:b6:d5:a7:44:93:8e:b2: 91:fe:64:a8:e9:34:25:fe:78:f5:6e:9d:86:12:36:ff:dc:76: a4:b2:ba:81:8e:cd:1e:de:d8:36:dd:24:4e:1f:ba:47:1d:ba: 40:7a:e2:54 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt57VvkziAoxSPvV1b+8HPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBmNDVmN2NjNGI2OTFmZDRhMzFjMWYxYzBiNGY2MDVkNzdhNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFjjdzjCvKujFuEYxHPVa6pPpwnb oL/IUxKuvWFC3cMskFmsAz9ZdB6AkDbbZg/hf2IHBnwfONeiqzEdp2PBuJjtcmHQ wig7PiQflDqi/sLpBJJEkr8Bz9G8u1rASAt4R/2+fDxWgnhnTz9irEILYeMQidYr lCo5K3XXD1sswdqOQLbQNqpGSs+KSXVEDc69ay6qfaiBxEzzNbgZOW/KNOZVIgAq XcLmvzHtT2ORkJmTBmRYfurY4eAtKqRG9Y3Fr6zX0d6WWd9B7wkwP8CHwam7U7GW IwMOtHGIqSbb0iQJHTQnwh19XZaU9qNTM83PNRWGloQfboAml1Ugvuf6OQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFNYPRffMS2kf1KMcHxwLT2Bdd6bvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2FkMzA0 NC1jZGNlLTQ2Y2YtOTJjOS1hOTU0ZDA1Mzk5NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYWQzMDQ0 LWNkY2UtNDZjZi05MmM5LWE5NTRkMDUzOTk0YS8xLzFnOUY5OHhMYVJfVW94d2ZI QXRQWUYxM3B1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCLQ1oAwQAPswrAwQBwToqAwQAwxTRMBQEAgAC MA4DBQMqDucAAwUDKg/OADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIH6wIDAN9v MA0GCSqGSIb3DQEBCwUAA4IBAQAQc8st05x/QZUyjG9z73t4bwLtD7pkhb++hf5J BZwMuKoEgA9oxQNUR5Tc+TU7tEig1Yv1olF4I0qvE/I6+OG+FAKgIfKTddtiQF67 4W6n6I31lsVtvs3cnGvhgdo+4NOUtUbHj6sY38NntdGZSHqt8OmhbC77KHKcrNim Ij7GbVKIFYlPBlvmcWLoaa8oMeUTZ8xfTe1rNTG7HU48b5fmnBAHZAC0kp5GCc0Z 5P9vJ3apuORdoipRFB4tokUQKyhTB5Ky3jAQDAOAQKNotWalj7bVp0STjrKR/mSo 6TQl/nj1bp2GEjb/3HaksrqBjs0e3tg23SROH7pHHbpAeuJU -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:10 2026 by rpki-client