This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer File: 1nADQQTxv2WBRLSqRbQaP1d53A8.cer (raw, json) Hash identifier: Rx6syIE0hdyD4rlAi1HS7ZVSvq0/LjNPt7lJxuiZqQs= Subject key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DF0B0113382B1EA49950F7281FA22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210149 IP: 192.66.100.0 -- 192.66.115.255 IP: 193.163.56.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f0:b0:11:33:82:b1:ea:49:95:0f:72:81:fa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:74:c2:8a:77:63:9f:ac:e4:81:50:6e:20: 59:b8:17:2f:e7:87:e7:80:f5:3e:ec:99:52:40:83: 84:39:00:fd:7b:42:c1:70:2d:8e:1e:e2:a9:0c:93: df:c6:67:80:55:a9:a0:df:66:82:13:cd:7c:57:0c: 61:82:73:b2:05:df:87:01:d7:dc:be:35:86:1c:f3: 76:04:b5:ac:54:dd:83:64:20:66:8b:64:15:58:d3: 80:e2:99:a9:13:f7:66:1a:2b:92:51:00:54:9e:a8: 2a:cf:0a:6a:a4:cc:f3:f4:0a:a4:62:71:bf:f0:16: bb:ce:9d:f1:b7:a7:2a:5b:ed:33:6c:c9:96:fb:33: 61:91:5b:2f:ff:d4:d7:c4:43:d3:ce:41:ed:f4:d9: ca:29:18:fd:ea:3d:3f:85:c6:2f:0e:3d:ce:6e:34: 07:cc:1c:83:7e:24:67:83:7a:03:6f:f2:a7:b6:e5: 76:ae:d7:72:7f:1a:80:fc:76:e0:bd:31:b6:c1:6f: 25:eb:08:6e:30:12:43:06:4b:eb:98:99:e9:db:4c: c5:fe:ba:e9:a5:dc:c5:99:58:e2:cc:e4:e7:b7:e1: bb:20:14:c0:e4:04:34:a7:28:88:8b:76:c1:48:77: b1:ff:16:63:64:6f:b5:2b:14:2b:24:a5:7e:ec:03: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.66.100.0-192.66.115.255 193.163.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210149 Signature Algorithm: sha256WithRSAEncryption 97:de:d8:83:f9:b7:44:d3:ef:12:ea:b0:9c:8c:70:05:45:b5: 22:76:51:e7:11:90:8a:af:a3:15:c2:1b:bb:b6:64:8f:f2:a4: 80:72:0e:c6:f4:f2:7b:0e:bf:b3:ed:6d:12:31:4f:8e:e3:df: 15:cf:6e:5a:6b:5d:14:13:34:9d:bd:b2:84:9d:1b:05:fd:e9: 3c:7c:47:17:3d:e5:b5:8c:27:af:e6:14:68:a8:3e:3d:6f:79: 9a:83:7f:af:f5:66:30:67:11:dc:e0:9f:10:24:c0:f5:d5:bc: d5:d4:a8:0c:71:9d:d1:51:1e:3f:f2:e6:a3:87:cd:2d:25:64: a4:e7:6e:78:bb:aa:30:ee:44:33:f1:f5:74:0f:06:15:c0:1c: d4:50:62:e5:57:c6:fb:ba:82:15:47:c8:c2:19:c7:3a:70:b2: 0f:19:ec:83:74:a3:f5:51:39:73:27:37:72:b1:4e:90:27:e7: 1f:d2:c4:ea:3d:9f:fc:d2:c8:0e:a8:47:ff:3d:8e:a8:4b:1c: 87:34:f3:c8:eb:e7:b2:64:f6:ac:bc:d3:cd:56:92:22:1e:6c: 77:93:b3:02:15:7c:73:df:97:48:67:8d:3c:30:62:1c:17:8f: 8e:d6:16:31:2a:c2:79:ad:bc:20:a3:7a:cf:de:1f:e6:d9:46: d6:9e:ae:cc -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt5ffCwETOCsepJlQ9ygfoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjcwMDM0MTA0ZjFiZjY1ODE0NGI0YWE0NWI0MWEzZjU3NzlkYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC50wop3Y5+s5IFQbiBZuBcv54fn gPU+7JlSQIOEOQD9e0LBcC2OHuKpDJPfxmeAVamg32aCE818VwxhgnOyBd+HAdfc vjWGHPN2BLWsVN2DZCBmi2QVWNOA4pmpE/dmGiuSUQBUnqgqzwpqpMzz9AqkYnG/ 8Ba7zp3xt6cqW+0zbMmW+zNhkVsv/9TXxEPTzkHt9NnKKRj96j0/hcYvDj3ObjQH zByDfiRng3oDb/KntuV2rtdyfxqA/HbgvTG2wW8l6whuMBJDBkvrmJnp20zF/rrp pdzFmVjizOTnt+G7IBTA5AQ0pyiIi3bBSHex/xZjZG+1KxQrJKV+7AMbtwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFNZwA0EE8b9lgUS0qkW0Gj9XedwPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2UxY2Jj My0yOGExLTRlNTMtYTBhNC1mOTE3MmNjYmM1YWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvZTFjYmMz LTI4YTEtNGU1My1hMGE0LWY5MTcyY2NiYzVhZi8xLzFuQURRUVR4djJXQlJMU3FS YlFhUDFkNTNBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBALAQmQDBALAQnADBAPBozgwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAzTlMA0GCSqGSIb3DQEBCwUAA4IBAQCX3tiD+bdE0+8S 6rCcjHAFRbUidlHnEZCKr6MVwhu7tmSP8qSAcg7G9PJ7Dr+z7W0SMU+O498Vz25a a10UEzSdvbKEnRsF/ek8fEcXPeW1jCev5hRoqD49b3mag3+v9WYwZxHc4J8QJMD1 1bzV1KgMcZ3RUR4/8uajh80tJWSk5254u6ow7kQz8fV0DwYVwBzUUGLlV8b7uoIV R8jCGcc6cLIPGeyDdKP1UTlzJzdysU6QJ+cf0sTqPZ/80sgOqEf/PY6oSxyHNPPI 6+eyZPasvNPNVpIiHmx3k7MCFXxz35dIZ408MGIcF4+O1hYxKsJ5rbwgo3rP3h/m 2UbWnq7M -----END CERTIFICATE-----Generated at Mon Jan 26 07:16:27 2026 by rpki-client