This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.cer (raw, json) Hash identifier: krsWCn1z871T3d3Q9m4LnhRVNJLGJdKjCB3uzi1ZxNA= Subject key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126286819B6CB989C47DD280FF51F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42478 IP: 77.233.0.0/19 IP: 94.127.136.0/21 IP: 185.138.88.0/22 IP: 2a0d:300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:62:86:81:9b:6c:b9:89:c4:7d:d2:80:ff:51:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:21:0b:6f:de:4b:9f:7f:b6:fe:fd:41:9d: 60:9c:5a:d9:c2:d0:d5:fb:59:c7:d6:e9:06:37:f4: 95:05:63:16:fe:6b:e9:a3:c9:75:3d:1f:82:fc:2b: f1:82:60:24:de:6c:06:85:34:cc:57:6b:dc:da:ac: 45:46:bc:bf:3a:dd:c7:81:2b:28:60:19:0e:1e:ca: c0:81:4b:46:4e:e9:fe:ec:17:24:cd:5a:45:14:3e: 2b:16:63:82:e3:7c:43:b3:f6:44:c7:84:59:d3:d5: 75:43:43:85:bf:47:49:1e:d2:8d:7b:e6:9a:f8:90: 06:54:30:d7:77:c5:a6:37:6f:d4:1c:9b:89:51:23: a4:d9:7a:9c:d6:12:1a:a4:96:db:b9:5f:1c:b2:0a: fd:ff:7a:46:78:d0:c5:26:00:79:1b:7e:2c:c8:f8: 65:90:fe:83:5b:84:5d:8e:8d:66:a7:f3:f7:ea:b6: ed:b7:02:10:5a:6e:b8:94:41:88:4e:29:4a:ab:e8: a7:78:2a:b0:5a:4e:fe:a0:b7:6e:50:89:c0:8e:f8: b1:d8:86:d6:cb:af:ce:3d:57:b5:4d:f0:fb:5f:9e: 31:df:f4:b5:ac:53:37:20:2b:15:5d:82:08:8f:16: a3:b7:3d:e0:02:2b:f0:10:92:22:46:03:b7:22:12: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.233.0.0/19 94.127.136.0/21 185.138.88.0/22 IPv6: 2a0d:300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42478 Signature Algorithm: sha256WithRSAEncryption 95:f8:32:44:c6:05:8f:cc:d9:6f:08:1e:82:68:9a:2e:e7:ad: 7c:32:96:8f:0b:82:44:a3:b8:89:77:cb:d6:c1:06:ce:22:5a: 2e:5d:c4:49:65:82:cf:bf:52:87:ec:e7:1d:ec:89:99:ab:11: 0f:d4:60:a8:03:64:ae:ea:0b:51:2a:24:1b:a4:d7:59:9a:62: d9:61:9e:0a:3f:8e:24:42:57:c4:02:d6:8c:0e:27:05:17:24: cf:f2:a7:b9:c4:a2:68:e7:92:a3:7d:83:3d:70:a5:ff:ac:d3: 0a:1e:68:61:52:bd:00:fd:d9:d6:78:2c:17:7b:99:ef:e1:e0: fc:0f:ae:b1:57:63:6f:79:aa:0c:6c:44:d9:eb:c6:3e:eb:c3: 15:96:40:ce:ed:8c:52:47:df:5e:17:3e:5f:ef:bd:2f:ce:ed: ba:57:0a:d4:96:73:6b:6d:01:ea:eb:be:1c:da:7e:ad:b7:fe: 2c:5c:3d:2d:17:e5:65:18:47:f5:45:88:b4:ec:f2:04:05:e7: 40:28:5e:98:ba:dc:ec:b5:86:9d:5b:db:77:84:09:29:70:00: c2:5a:7f:3d:d3:2f:7d:d0:29:29:ed:5e:f1:92:01:b5:53:0d: 3d:97:a2:11:4a:36:d2:d0:2c:e4:90:49:93:94:f0:32:43:1d: ca:b9:bc:13 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8EmKGgZtsuYnEfdKA/1HzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjE1NDlmNTc1YjA0N2JjYmRjMzNlN2QyZDM2ZWRhODQ3MWZkZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvohC2/eS59/tv79QZ1gnFrZwtDV +1nH1ukGN/SVBWMW/mvpo8l1PR+C/CvxgmAk3mwGhTTMV2vc2qxFRry/Ot3HgSso YBkOHsrAgUtGTun+7BckzVpFFD4rFmOC43xDs/ZEx4RZ09V1Q0OFv0dJHtKNe+aa +JAGVDDXd8WmN2/UHJuJUSOk2Xqc1hIapJbbuV8csgr9/3pGeNDFJgB5G34syPhl kP6DW4Rdjo1mp/P36rbttwIQWm64lEGITilKq+ineCqwWk7+oLduUInAjvix2IbW y6/OPVe1TfD7X54x3/S1rFM3ICsVXYIIjxajtz3gAivwEJIiRgO3IhK71wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNYVSfV1sEe8vcM+fS027ahHH97KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2Y2ZDI1 Yi1kNTQzLTQyMmQtOGI0My01ZmQwOThmMzQ1OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZjZkMjVi LWQ1NDMtNDIyZC04YjQzLTVmZDA5OGYzNDU5ZC8xLzFoVko5WFd3Ujd5OXd6NTlM VGJ0cUVjZjNzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFTekAAwQDXn+IAwQCuYpYMA0EAgACMAcDBQMq DQMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCl7jANBgkqhkiG9w0BAQsFAAOC AQEAlfgyRMYFj8zZbwgegmiaLuetfDKWjwuCRKO4iXfL1sEGziJaLl3ESWWCz79S h+znHeyJmasRD9RgqANkruoLUSokG6TXWZpi2WGeCj+OJEJXxALWjA4nBRckz/Kn ucSiaOeSo32DPXCl/6zTCh5oYVK9AP3Z1ngsF3uZ7+Hg/A+usVdjb3mqDGxE2evG PuvDFZZAzu2MUkffXhc+X++9L87tulcK1JZza20B6uu+HNp+rbf+LFw9LRflZRhH 9UWItOzyBAXnQChemLrc7LWGnVvbd4QJKXAAwlp/PdMvfdApKe1e8ZIBtVMNPZei EUo20tAs5JBJk5TwMkMdyrm8Ew== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:34 2026 by rpki-client