This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer File: RK1W7mAdrD36Yd_lLL9bALe3opA.cer (raw, json) Hash identifier: RSxfuGbC8rX+N+WxQ1YmhDLsmxWHAR4J1S1uqDy43zM= Subject key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E71E88DFD708C0D333CAE00F77C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60133 IP: 91.198.135.0/24 IP: 2001:67c:578::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e7:1e:88:df:d7:08:c0:d3:33:ca:e0:0f:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:7c:09:f3:3a:e7:cf:81:e0:22:8b:11:87: ee:91:78:da:f6:e5:8a:fd:98:f4:82:88:9f:24:1e: c8:8a:c5:dd:aa:89:c8:9a:4b:7f:d3:83:bd:fb:f7: 2f:d8:0f:15:88:f4:cc:16:b0:8f:ed:cf:cc:ec:63: 77:9e:02:ec:2f:cc:bd:66:2c:b7:4d:94:88:4f:e3: 29:71:35:a6:cd:1b:9e:99:b6:d2:f9:30:e0:b8:64: d0:42:fa:5f:23:37:68:e4:e3:95:a4:a2:ca:73:20: 25:f5:99:6b:dc:69:36:79:b1:e0:60:11:f1:ce:d6: fd:4f:e4:e8:80:51:97:84:69:c2:99:5d:6c:58:7b: 59:10:9d:73:50:ab:06:30:9a:45:3e:01:42:57:21: 7b:e6:da:2d:91:b4:f9:73:65:0a:61:7b:b0:fe:27: 8b:df:18:ea:a0:a3:a1:24:7b:87:2c:b4:fb:93:53: fc:cc:18:8b:61:a4:8b:e1:3f:eb:1e:ee:37:eb:23: cf:8d:19:97:1f:06:6d:19:55:54:2f:f4:c3:c5:26: 60:7c:5b:96:35:05:a3:f3:b2:dc:21:63:02:07:26: 02:bf:2f:f7:7a:1d:f2:c6:9c:d7:dc:1b:d4:36:01: 2c:81:10:5b:80:d4:06:a2:de:34:f5:2b:c1:89:62: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.135.0/24 IPv6: 2001:67c:578::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60133 Signature Algorithm: sha256WithRSAEncryption a3:09:b8:de:de:94:f8:49:bd:d1:e0:59:8e:3d:1f:e3:55:14: 2e:98:0e:6f:9e:47:e1:fc:6b:c3:ec:15:fe:2a:b6:36:0e:b5: 84:83:f0:73:6d:d8:c9:f9:26:0b:5c:37:d0:e4:ef:d8:09:d1: 8e:ca:f8:4b:25:bf:3f:69:19:c0:52:4f:ea:03:9c:c9:73:ed: 76:1f:98:12:93:6b:73:a9:cf:0a:4e:a2:64:df:6b:25:a5:e9: d7:d6:e4:d9:9c:17:aa:07:7f:05:af:f7:bc:e8:ad:50:15:d3: 43:43:fd:3d:55:9a:b6:4d:51:fe:3a:2b:c4:b5:81:33:0c:f5: 03:5c:7c:f2:ed:74:fc:e5:70:78:7f:9c:5b:88:d3:d8:89:ee: d2:e7:bb:4c:a7:81:f7:b7:4d:0c:4a:53:ed:f2:17:a4:c0:26: 41:68:5b:c7:02:c6:ce:6b:e2:b7:16:9c:ad:93:bd:19:a4:53: 61:47:83:07:e2:fa:a3:24:1b:fb:03:20:1c:bf:39:22:b8:94: 32:b0:85:66:00:74:05:f6:0a:b0:af:f6:e2:b7:24:55:e0:68: 06:6b:b4:88:0a:b1:cd:5d:19:28:b5:a9:51:ff:4b:70:83:a8: 48:3e:b9:4f:e8:03:3f:0e:7a:71:9a:b1:c0:0c:e5:ad:b4:e1: 89:05:49:47 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7NuceiN/XCMDTM8rgD3fDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGFkNTZlZTYwMWRhYzNkZmE2MWRmZTUyY2JmNWIwMGI3YjdhMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGR8CfM658+B4CKLEYfukXja9uWK /Zj0goifJB7IisXdqonImkt/04O9+/cv2A8ViPTMFrCP7c/M7GN3ngLsL8y9Ziy3 TZSIT+MpcTWmzRuembbS+TDguGTQQvpfIzdo5OOVpKLKcyAl9Zlr3Gk2ebHgYBHx ztb9T+TogFGXhGnCmV1sWHtZEJ1zUKsGMJpFPgFCVyF75totkbT5c2UKYXuw/ieL 3xjqoKOhJHuHLLT7k1P8zBiLYaSL4T/rHu436yPPjRmXHwZtGVVUL/TDxSZgfFuW NQWj87LcIWMCByYCvy/3eh3yxpzX3BvUNgEsgRBbgNQGot409SvBiWJSSwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEStVu5gHaw9+mHf5Sy/WwC3t6KQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2NmYTVi MC03OTg4LTRmZTktOWRkNS1lZWQyMDRlZDk3ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvY2ZhNWIw LTc5ODgtNGZlOS05ZGQ1LWVlZDIwNGVkOTc4MC8xL1JLMVc3bUFkckQzNllkX2xM TDliQUxlM29wQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW8aHMA8EAgACMAkDBwAgAQZ8BXgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOrlMA0GCSqGSIb3DQEBCwUAA4IBAQCjCbje3pT4 Sb3R4FmOPR/jVRQumA5vnkfh/GvD7BX+KrY2DrWEg/BzbdjJ+SYLXDfQ5O/YCdGO yvhLJb8/aRnAUk/qA5zJc+12H5gSk2tzqc8KTqJk32slpenX1uTZnBeqB38Fr/e8 6K1QFdNDQ/09VZq2TVH+OivEtYEzDPUDXHzy7XT85XB4f5xbiNPYie7S57tMp4H3 t00MSlPt8hekwCZBaFvHAsbOa+K3Fpytk70ZpFNhR4MH4vqjJBv7AyAcvzkiuJQy sIVmAHQF9gqwr/bityRV4GgGa7SICrHNXRkotalR/0twg6hIPrlP6AM/DnpxmrHA DOWttOGJBUlH -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:19 2026 by rpki-client