This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer File: 1s5JJV9AanJVk8YuHECHeVhtVu8.cer (raw, json) Hash identifier: d13B2/zEwGAqIod0FcN9SgHAhNI7PU4ORTTtiPO4YEc= Subject key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3051A059D06008C0ADEC1C96E3C92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43372 IP: 45.158.4.0/22 IP: 91.209.177.0/24 IP: 185.186.152.0/22 IP: 185.236.96.0/22 IP: 185.236.108.0/22 IP: 193.200.232.0/24 IP: 2a0b:7e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:05:1a:05:9d:06:00:8c:0a:de:c1:c9:6e:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6ce49255f406a725593c62e1c408779586d56ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:5e:80:62:03:0f:50:7a:d6:0c:55:7b:7f: 3b:67:35:ac:03:b3:c1:93:64:e9:fc:b1:d7:98:47: ba:30:e4:d8:02:2e:bf:77:c8:90:0b:1d:d6:6c:5a: 9c:c5:5d:46:19:a6:17:da:1f:46:2b:b7:88:f2:76: fc:98:56:9f:17:7d:f8:19:c3:c5:ef:f1:68:b1:1f: 67:68:47:64:01:5e:7b:6a:ec:5f:3d:69:38:ad:81: 86:c2:23:15:05:5b:93:08:f1:5b:9e:4c:ec:bc:b7: 65:b1:eb:4a:c9:86:62:cd:ac:c8:47:4e:62:b6:9a: 70:cd:22:2b:5e:e0:4f:f1:8d:9b:a0:29:52:e8:16: bc:e9:76:3c:14:d1:31:58:04:ad:16:a2:6c:af:47: 12:24:fe:6d:01:87:60:4c:ff:47:32:ea:eb:f1:6f: dc:62:c7:7e:dd:bd:2b:bd:c0:4f:03:55:33:95:25: a9:63:95:d7:49:31:3e:f9:87:87:bb:fd:e9:12:9d: 29:fc:ed:a4:8a:bf:f7:0f:58:c0:7f:b7:92:11:80: 84:0f:25:8c:58:42:c2:22:09:53:b5:24:51:50:04: e1:11:34:e7:aa:a5:dd:06:2c:cf:6d:ea:ec:89:61: d0:28:df:2e:d7:3c:18:85:fb:9b:0d:62:20:56:dc: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.4.0/22 91.209.177.0/24 185.186.152.0/22 185.236.96.0/22 185.236.108.0/22 193.200.232.0/24 IPv6: 2a0b:7e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43372 Signature Algorithm: sha256WithRSAEncryption 3b:ea:32:0c:6b:df:b6:c7:a3:33:61:9e:ab:f7:40:46:5e:5b: d9:dd:66:f3:84:1f:ba:e1:b4:a8:77:55:bd:20:69:51:c9:84: 1c:43:28:c5:13:ac:56:67:36:39:fc:3c:7c:b8:71:09:01:c5: 5b:fe:90:7b:77:66:52:4c:a1:75:c7:07:b9:14:17:09:29:9c: 24:e6:2e:4b:68:97:4b:15:cf:a0:e4:2d:a5:9a:29:c1:a4:79: 9d:b4:bb:53:dc:54:a6:38:a7:ea:e5:aa:ae:10:fe:24:97:06: db:e8:22:53:f8:99:d0:36:bf:0f:85:44:68:55:ff:e6:9d:72: 69:8a:e0:60:32:aa:69:1d:39:9b:84:67:b5:f5:ac:2b:53:8b: 9d:72:8f:ec:13:c9:8d:04:ac:06:a9:1f:40:94:ac:9b:1c:7d: d0:ac:b7:00:16:fa:60:c2:86:2b:74:0c:a0:48:1d:11:b1:44: 5c:63:67:67:89:60:11:78:19:e7:1c:7d:39:a5:88:67:d4:25: db:cd:3b:1d:10:9f:32:5b:71:96:8c:16:2c:7c:fb:a5:fb:64: 36:14:7d:81:c8:25:30:1c:b1:99:e5:4e:97:88:ac:ba:77:c6: ae:48:bc:f7:1e:73:48:d4:92:ac:06:14:be:7e:64:81:2f:47: fe:06:a7:e7 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt4owUaBZ0GAIwK3sHJbjySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmNlNDkyNTVmNDA2YTcyNTU5M2M2MmUxYzQwODc3OTU4NmQ1NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPdegGIDD1B61gxVe387ZzWsA7PB k2Tp/LHXmEe6MOTYAi6/d8iQCx3WbFqcxV1GGaYX2h9GK7eI8nb8mFafF334GcPF 7/FosR9naEdkAV57auxfPWk4rYGGwiMVBVuTCPFbnkzsvLdlsetKyYZizazIR05i tppwzSIrXuBP8Y2boClS6Ba86XY8FNExWAStFqJsr0cSJP5tAYdgTP9HMurr8W/c Ysd+3b0rvcBPA1UzlSWpY5XXSTE++YeHu/3pEp0p/O2kir/3D1jAf7eSEYCEDyWM WELCIglTtSRRUAThETTnqqXdBizPbersiWHQKN8u1zwYhfubDWIgVtw6fQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFNbOSSVfQGpyVZPGLhxAh3lYbVbvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzhiNTMy Zi02NzgyLTQwNDQtOWVmYi02NzI1ZDk4MTk2YzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvOGI1MzJm LTY3ODItNDA0NC05ZWZiLTY3MjVkOTgxOTZjNi8xLzFzNUpKVjlBYW5KVms4WXVI RUNIZVZodFZ1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLZ4EAwQAW9GxAwQCubqYAwQCuexgAwQCuexs AwQAwcjoMA0EAgACMAcDBQMqC36AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCp bDANBgkqhkiG9w0BAQsFAAOCAQEAO+oyDGvftsejM2Geq/dARl5b2d1m84QfuuG0 qHdVvSBpUcmEHEMoxROsVmc2Ofw8fLhxCQHFW/6Qe3dmUkyhdccHuRQXCSmcJOYu S2iXSxXPoOQtpZopwaR5nbS7U9xUpjin6uWqrhD+JJcG2+giU/iZ0Da/D4VEaFX/ 5p1yaYrgYDKqaR05m4RntfWsK1OLnXKP7BPJjQSsBqkfQJSsmxx90Ky3ABb6YMKG K3QMoEgdEbFEXGNnZ4lgEXgZ5xx9OaWIZ9Ql2807HRCfMltxlowWLHz7pftkNhR9 gcglMByxmeVOl4isunfGrki89x5zSNSSrAYUvn5kgS9H/gan5w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:52 2026 by rpki-client