This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer (raw, json) Hash identifier: yks/P/ooSPy6MQCxWboWRZWdOVYCgRRt31XlMDgTGk8= Subject key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910EF72A9AEB73AE20CD4F297B1E365 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42147 IP: 158.172.0.0/16 IP: 185.207.40.0/22 IP: 193.148.128.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ef:72:a9:ae:b7:3a:e2:0c:d4:f2:97:b1:e3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5753c06290a371994d7577318685f5bc4a538d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:4c:e3:7a:46:37:e7:6d:9f:7c:9e:62:49: c7:13:bb:fb:4f:9e:86:9e:ff:f5:87:b6:5c:ba:76: fd:02:35:41:42:6a:52:ed:11:f2:f3:09:14:7d:2b: 8d:20:69:72:eb:ce:16:66:e2:4c:1f:20:5e:84:80: af:00:1f:97:12:6e:1f:d7:88:74:21:74:c4:60:f7: d1:29:94:5e:e8:34:f9:c5:1f:a5:10:96:d5:d7:02: df:40:6b:d9:80:fd:41:f3:1d:5c:88:2b:0e:49:8d: 69:c6:9c:c2:c4:ef:0f:cb:8b:34:72:a8:5d:5a:0a: 68:d4:a3:e7:1e:d1:22:f7:0a:cb:24:95:6a:93:15: 8a:f3:86:2c:3d:04:13:51:6a:bc:11:d2:64:7a:9d: d6:40:a6:61:92:ae:f1:d2:c7:8c:ef:d9:3b:7e:64: 4c:5c:da:46:13:9b:bf:9c:bb:35:44:74:a6:31:3c: e4:8a:76:35:fb:d2:d7:e8:c4:32:8c:a0:1a:c5:32: 24:df:0c:77:93:cf:b9:f0:9a:6b:9d:cd:c5:96:2f: 4c:e6:9e:d5:be:a0:da:ef:1a:2f:53:0a:20:f7:a4: 78:92:83:5d:67:d5:a8:76:97:e5:00:17:e5:0f:04: 13:b5:2c:9b:63:3e:47:89:46:2f:94:4f:cc:0b:f7: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.0.0/16 185.207.40.0/22 193.148.128.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42147 Signature Algorithm: sha256WithRSAEncryption a9:1e:c6:72:e2:4c:f0:ac:8b:af:1e:70:1d:c2:ad:57:3e:47: 55:9b:77:e7:0e:01:de:77:99:29:20:e4:cd:e4:38:7a:48:c4: 3a:0e:79:b7:f6:91:18:a7:01:d0:76:91:56:c9:c7:84:f8:1e: 37:68:c6:df:ae:09:5a:a7:c9:84:5a:a1:3e:7e:fa:59:eb:d1: 39:25:43:eb:0d:27:90:7d:24:b0:35:0c:f1:6c:2e:80:be:e2: d9:d1:80:a3:32:28:05:4c:93:73:f8:1a:88:e1:57:89:c6:0a: e0:89:9f:2f:cf:b5:47:7d:e8:95:05:9f:dd:b0:33:9c:12:18: 68:d5:6c:0e:44:49:00:05:1b:9d:42:02:63:eb:84:b3:1a:55: ae:0d:8b:af:70:22:2b:60:e8:e2:25:14:86:5c:41:0e:14:2e: 94:de:26:fb:5a:53:59:ef:da:63:e0:e8:b5:5e:d9:17:42:9b: e7:7e:29:ce:b5:dc:93:60:1a:4b:b4:f3:1a:ff:0c:01:1a:c7: 85:15:b9:b6:05:3a:8b:d4:dd:3e:8d:4b:f0:f9:39:2a:25:05: 62:67:07:3d:62:9e:88:cc:8b:91:cf:7a:a1:1d:ea:56:cb:ba: a4:02:01:52:86:76:23:f1:b3:15:b1:ea:bf:3e:58:1e:4d:d7: f9:4f:e5:7c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5EO9yqa63OuIM1PKXseNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzUzYzA2MjkwYTM3MTk5NGQ3NTc3MzE4Njg1ZjViYzRhNTM4ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu29M43pGN+dtn3yeYknHE7v7T56G nv/1h7Zcunb9AjVBQmpS7RHy8wkUfSuNIGly684WZuJMHyBehICvAB+XEm4f14h0 IXTEYPfRKZRe6DT5xR+lEJbV1wLfQGvZgP1B8x1ciCsOSY1pxpzCxO8Py4s0cqhd Wgpo1KPnHtEi9wrLJJVqkxWK84YsPQQTUWq8EdJkep3WQKZhkq7x0seM79k7fmRM XNpGE5u/nLs1RHSmMTzkinY1+9LX6MQyjKAaxTIk3wx3k8+58Jprnc3Fli9M5p7V vqDa7xovUwog96R4koNdZ9WodpflABflDwQTtSybYz5HiUYvlE/MC/fqfwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFFdTwGKQo3GZTXV3MYaF9bxKU41HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2I0MWFi Ni1iOWYzLTRiNGEtOWI3Yi0xZWQxMDk1NGJkOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYjQxYWI2 LWI5ZjMtNGI0YS05YjdiLTFlZDEwOTU0YmQ5Ni8xL1YxUEFZcENqY1psTmRYY3ho b1gxdkVwVGpVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUF BwEHAQH/BBswGTAXBAIAATARAwMAnqwDBAK5zygDBAXBlIAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAKSjMA0GCSqGSIb3DQEBCwUAA4IBAQCpHsZy4kzwrIuvHnAd wq1XPkdVm3fnDgHed5kpIOTN5Dh6SMQ6Dnm39pEYpwHQdpFWyceE+B43aMbfrgla p8mEWqE+fvpZ69E5JUPrDSeQfSSwNQzxbC6AvuLZ0YCjMigFTJNz+BqI4VeJxgrg iZ8vz7VHfeiVBZ/dsDOcEhho1WwOREkABRudQgJj64SzGlWuDYuvcCIrYOjiJRSG XEEOFC6U3ib7WlNZ79pj4Oi1XtkXQpvnfinOtdyTYBpLtPMa/wwBGseFFbm2BTqL 1N0+jUvw+TkqJQViZwc9Yp6IzIuRz3qhHepWy7qkAgFShnYj8bMVseq/PlgeTdf5 T+V8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:25 2026 by rpki-client