This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer File: 1lRDbtMkK925b98TmhJT3rmG39A.cer (raw, json) Hash identifier: thWC5mQ8VjE+IT3HqDZrfAGK80f+V19QVdikq+/lKwY= Subject key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E55C47248BEE5D1F92B27AD0248F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28753 IP: 37.58.48.0/20 IP: 46.165.192.0/18 IP: 78.159.96.0/19 IP: 84.16.224.0/19 IP: 91.109.16.0/20 IP: 178.162.192.0/18 IP: 185.17.144.0/22 IP: 212.95.32.0/19 IP: 217.20.112.0/20 IP: 2a00:c98::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:55:c4:72:48:be:e5:d1:f9:2b:27:ad:02:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:06:09:fc:b9:be:b4:c6:f7:5d:65:1c:b2: af:1d:62:97:57:ae:e9:ca:ca:08:a3:ca:ef:5f:17: c8:a8:f4:25:cd:8d:27:31:f9:0d:7b:a2:1d:89:80: 00:06:63:75:71:80:22:d3:5b:1c:4c:ae:3c:bd:a5: 8f:6c:2e:7d:23:a5:35:b0:c3:65:26:13:a0:24:81: e4:42:09:1d:02:4f:12:17:24:3e:72:aa:55:5e:9b: ee:4c:ec:fd:2a:c2:85:29:db:4c:2e:0f:d9:11:80: a3:58:bf:dc:eb:a2:e0:e1:01:89:0b:d4:40:1e:5b: e8:69:43:eb:9f:72:2f:1d:ae:49:72:83:5c:3c:71: 7d:9a:b2:58:2a:c0:90:94:3a:28:a9:ea:ed:90:4a: d4:7b:55:1f:f1:2a:0b:ce:cf:24:55:51:90:91:85: 76:ff:a6:aa:9b:03:5f:4e:ed:aa:54:37:6d:bb:91: 16:10:e8:61:28:34:9f:72:9a:a7:e0:3d:b9:3f:1c: 1c:4c:eb:53:d0:4a:2c:58:91:2a:6b:e3:8e:d5:a9: ee:ed:49:2a:81:91:ba:98:7d:5f:04:f8:30:64:43: 63:83:ba:18:23:d1:e8:2b:51:9a:d0:5f:7e:ff:20: 96:fc:c5:ef:7a:ae:53:2c:b1:45:33:a8:2b:fa:d7: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.58.48.0/20 46.165.192.0/18 78.159.96.0/19 84.16.224.0/19 91.109.16.0/20 178.162.192.0/18 185.17.144.0/22 212.95.32.0/19 217.20.112.0/20 IPv6: 2a00:c98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28753 Signature Algorithm: sha256WithRSAEncryption 10:6c:d5:e5:da:d8:71:fc:0a:c6:6b:05:97:cb:a2:48:e4:33: a6:6b:a5:ac:ed:fd:8e:51:29:4d:cc:5f:6c:db:44:75:58:37: c9:64:14:5a:1c:6a:34:48:ae:22:38:14:fa:08:bf:23:a3:63: 67:68:dc:44:ab:c3:6d:d0:01:b9:92:5c:72:5a:fe:b9:1f:cf: 22:82:c8:80:8b:b4:0a:88:28:40:52:5d:08:d6:0b:1c:6c:55: 68:2a:34:a7:31:f4:e5:1e:9a:1b:8f:ef:65:d1:b6:5e:ef:1f: 60:c2:c7:2d:50:bd:c1:c9:7c:fb:43:cc:62:33:8a:91:08:f6: 91:78:71:bf:2a:12:c2:bf:54:1f:7c:0a:29:17:09:ad:a8:fb: 43:a3:94:93:08:8e:57:8b:ef:df:8f:1f:c1:67:f7:b1:ae:5b: 1f:db:6e:03:9b:c0:20:fe:a7:f5:9b:a1:47:2c:e5:12:e8:e3: 3d:43:ed:d0:a7:08:5d:43:47:c2:9a:e6:b2:a9:a8:38:ef:77: cc:89:15:5b:88:7f:e4:51:62:7b:68:e0:e7:19:6c:d9:5e:0d: de:de:11:f1:af:c7:a6:ad:4b:c5:e4:20:75:df:d2:9b:f6:4f: 8d:4d:50:f7:ed:c4:f3:f2:0a:e9:e1:f1:d2:2e:85:bb:ed:8a: 98:7f:87:af -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt5flXEcki+5dH5KyetAkj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjU0NDM2ZWQzMjQyYmRkYjk2ZmRmMTM5YTEyNTNkZWI5ODZkZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPkGCfy5vrTG911lHLKvHWKXV67p ysoIo8rvXxfIqPQlzY0nMfkNe6IdiYAABmN1cYAi01scTK48vaWPbC59I6U1sMNl JhOgJIHkQgkdAk8SFyQ+cqpVXpvuTOz9KsKFKdtMLg/ZEYCjWL/c66Lg4QGJC9RA HlvoaUPrn3IvHa5JcoNcPHF9mrJYKsCQlDooqertkErUe1Uf8SoLzs8kVVGQkYV2 /6aqmwNfTu2qVDdtu5EWEOhhKDSfcpqn4D25PxwcTOtT0EosWJEqa+OO1anu7Ukq gZG6mH1fBPgwZENjg7oYI9HoK1Ga0F9+/yCW/MXveq5TLLFFM6gr+teRVwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFNZUQ27TJCvduW/fE5oSU965ht/QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzNkZTk0 YS0xZTYwLTRlYjgtOWE1ZS1hMTQyMDg3Y2U4OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvM2RlOTRh LTFlNjAtNGViOC05YTVlLWExNDIwODdjZTg5MC8xLzFsUkRidE1rSzkyNWI5OFRt aEpUM3JtRzM5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQEJTowAwQGLqXAAwQFTp9gAwQFVBDgAwQEW20Q AwQGsqLAAwQCuRGQAwQF1F8gAwQE2RRwMA0EAgACMAcDBQAqAAyYMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnBRMA0GCSqGSIb3DQEBCwUAA4IBAQAQbNXl2thx/ArG awWXy6JI5DOma6Ws7f2OUSlNzF9s20R1WDfJZBRaHGo0SK4iOBT6CL8jo2NnaNxE q8Nt0AG5klxyWv65H88igsiAi7QKiChAUl0I1gscbFVoKjSnMfTlHpobj+9l0bZe 7x9gwsctUL3ByXz7Q8xiM4qRCPaReHG/KhLCv1QffAopFwmtqPtDo5STCI5Xi+/f jx/BZ/exrlsf224Dm8Ag/qf1m6FHLOUS6OM9Q+3QpwhdQ0fCmuayqag473fMiRVb iH/kUWJ7aODnGWzZXg3e3hHxr8emrUvF5CB139Kb9k+NTVD37cTz8grp4fHSLoW7 7YqYf4ev -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:16 2026 by rpki-client