This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer File: 1zCimUHvvHp5J_ApSB4scloaZxE.cer (raw, json) Hash identifier: jEt9JOCGb13PvehVIDsmNHOZWWJcJ8ZeoxF+LWfNAy8= Subject key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E014CF46880B02EC729E412712D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.250.236.0/22 IP: 2a0c:12c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:14:cf:46:88:0b:02:ec:72:9e:41:27:12:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d730a29941efbc7a7927f029481e2c725a1a6711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:fc:8e:39:96:6c:08:87:84:78:d9:e8:21: cb:bb:e4:af:74:72:33:c9:d5:f7:ff:b6:db:bb:7f: 98:6e:20:b2:7b:e9:d6:ca:5c:68:a1:c6:da:82:6a: 7a:c8:10:e6:ae:27:e5:60:b6:c0:90:70:2e:6a:64: b2:e1:f0:3a:79:18:af:16:33:93:83:e7:37:71:30: ce:e9:85:15:cd:30:54:e5:44:32:5c:7d:6e:f4:f1: 35:65:00:f9:d5:1d:df:3e:53:18:cb:30:92:31:f0: ff:06:5f:9d:08:30:9c:f6:1b:39:a6:f4:bb:15:e1: ab:ba:79:33:46:dd:64:e8:4a:8e:1c:49:85:0e:45: 23:b3:ba:70:00:3c:4f:88:e9:43:0e:48:03:e7:89: c1:56:ba:e8:9b:94:e0:bb:ed:15:cc:1a:cf:86:68: d7:bf:b2:58:c7:1e:01:9b:aa:f3:e7:bb:47:9c:69: 54:a9:73:24:1c:2e:c5:1d:ea:82:df:1f:36:0d:53: 1a:92:c3:8c:81:d0:42:fd:92:ff:16:e2:0c:7a:7a: e1:b5:c2:77:cd:ef:55:f2:de:cd:d5:f0:35:b5:95: 3e:d1:9c:d3:97:01:cb:68:fd:a3:c6:5e:2d:27:42: 5a:af:f1:3f:ba:41:30:68:ea:14:69:2c:49:f7:13: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.236.0/22 IPv6: 2a0c:12c0::/29 Signature Algorithm: sha256WithRSAEncryption 56:37:ef:6b:11:65:0f:44:bd:9d:4e:c2:b2:dd:c4:b1:01:0d: dd:20:05:f7:24:a3:d3:86:e9:3e:b4:8b:dc:33:d3:17:2e:d9: 86:8b:18:7c:52:db:71:1a:f9:9f:73:2e:e2:47:5d:b8:21:ad: ec:ab:96:86:1f:ee:17:92:2f:c9:57:ba:69:f9:cd:e9:dd:88: e1:53:f4:3e:b0:87:49:28:1d:20:29:db:f3:7f:69:51:d7:e0: 68:ee:12:55:44:30:46:00:ba:48:e2:18:5a:71:31:22:c8:ae: 0d:d7:aa:21:a5:60:66:4c:bd:cd:74:66:0c:e1:8a:e6:38:84: 4c:8b:b4:31:f9:38:85:32:1b:89:7e:a6:5c:0f:dd:47:ba:b1: 3e:99:1a:e9:ca:83:34:ef:de:fc:cf:9b:e6:36:8f:30:fe:30: 00:c4:25:c0:db:aa:c4:02:02:6a:32:41:fb:9f:c0:03:0a:93: fa:b3:db:52:76:6e:00:bc:02:ee:5b:dc:21:04:be:e2:97:28: f8:94:f0:7d:bf:5a:54:02:b2:8f:0d:81:0d:31:01:66:29:49: 9f:ac:e5:24:84:71:69:79:f4:5d:14:bb:d0:d5:c7:82:66:7c: 0c:12:5f:b8:5c:77:27:0f:fd:86:ef:ad:4c:71:59:92:74:51: 6b:38:c2:79 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WOAUz0aICwLscp5BJxLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzMwYTI5OTQxZWZiYzdhNzkyN2YwMjk0ODFlMmM3MjVhMWE2NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v/8jjmWbAiHhHjZ6CHLu+SvdHIz ydX3/7bbu3+YbiCye+nWylxoocbagmp6yBDmriflYLbAkHAuamSy4fA6eRivFjOT g+c3cTDO6YUVzTBU5UQyXH1u9PE1ZQD51R3fPlMYyzCSMfD/Bl+dCDCc9hs5pvS7 FeGrunkzRt1k6EqOHEmFDkUjs7pwADxPiOlDDkgD54nBVrrom5Tgu+0VzBrPhmjX v7JYxx4Bm6rz57tHnGlUqXMkHC7FHeqC3x82DVMaksOMgdBC/ZL/FuIMenrhtcJ3 ze9V8t7N1fA1tZU+0ZzTlwHLaP2jxl4tJ0Jar/E/ukEwaOoUaSxJ9xNyVQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNcwoplB77x6eSfwKUgeLHJaGmcRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzY0YzVh OS1iMzc5LTQ5OTktYWY3YS0zYzBmYTE4YzU4Y2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNjRjNWE5 LWIzNzktNDk5OS1hZjdhLTNjMGZhMThjNThjYi8xLzF6Q2ltVUh2dkhwNUpfQXBT QjRzY2xvYVp4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufrsMA0EAgACMAcDBQMqDBLAMA0GCSqGSIb3 DQEBCwUAA4IBAQBWN+9rEWUPRL2dTsKy3cSxAQ3dIAX3JKPThuk+tIvcM9MXLtmG ixh8UttxGvmfcy7iR124Ia3sq5aGH+4Xki/JV7pp+c3p3YjhU/Q+sIdJKB0gKdvz f2lR1+Bo7hJVRDBGALpI4hhacTEiyK4N16ohpWBmTL3NdGYM4YrmOIRMi7Qx+TiF MhuJfqZcD91HurE+mRrpyoM07978z5vmNo8w/jAAxCXA26rEAgJqMkH7n8ADCpP6 s9tSdm4AvALuW9whBL7ilyj4lPB9v1pUArKPDYENMQFmKUmfrOUkhHFpefRdFLvQ 1ceCZnwMEl+4XHcnD/2G761McVmSdFFrOMJ5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:44 2026 by rpki-client