This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer File: V1TRlSf9hdDURKyt1EoBZV_cdAA.cer (raw, json) Hash identifier: AnieIhVLyRY8rWNdeDa/4U0iijEoOk7CPhSnSratPFg= Subject key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA528901697F302F01B7241E6735B70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199196 AS: 211267 IP: 62.69.136.0/21 IP: 62.109.192.0/18 IP: 185.29.44.0/22 IP: 193.219.115.0/24 IP: 2a00:a640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:28:90:16:97:f3:02:f0:1b:72:41:e6:73:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5754d19527fd85d0d444acadd44a01655fdc7400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:0b:fa:e6:64:06:b6:2e:79:be:ae:f2:b1: f0:c3:b9:29:e3:72:9b:6d:cd:62:ad:42:f6:b6:19: 89:c7:e1:ef:24:4a:81:28:d7:6e:ce:ae:78:83:e9: d4:ba:9d:c7:7c:0b:50:ca:7c:46:38:1d:93:f2:9b: 93:5d:05:03:8b:22:d4:78:8b:c7:c1:8c:d8:40:24: 33:f9:45:a7:82:8f:21:c8:b0:a4:e8:0a:0a:c3:82: b4:3d:b0:52:a1:9a:37:fd:a4:bd:a8:37:1f:1e:a9: 43:11:7e:85:39:ec:3d:6b:03:6c:3a:60:ef:75:24: cb:cb:2f:95:19:b2:22:c7:07:56:d1:4f:3c:06:dc: 36:2b:91:8d:1a:f9:1a:3f:c9:b4:43:9a:45:80:a8: 2c:18:dd:c8:74:82:9b:53:86:42:82:f7:fa:ed:61: a3:84:97:b1:04:cc:fc:52:f0:d7:47:47:30:a1:1a: f3:7f:fd:e8:75:37:80:37:68:09:2a:a2:70:6e:b5: 18:c2:84:0b:77:3f:4b:49:51:be:28:f9:64:5a:d0: a4:20:d2:6f:4b:2e:19:a3:0f:75:d3:eb:0a:aa:b6: ed:5c:79:77:3b:ae:ad:68:22:f4:70:0c:69:d3:b2: be:41:e0:bf:89:d6:03:37:4b:01:ea:50:52:6f:1d: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.69.136.0/21 62.109.192.0/18 185.29.44.0/22 193.219.115.0/24 IPv6: 2a00:a640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199196 211267 Signature Algorithm: sha256WithRSAEncryption 6d:70:14:41:df:3e:c6:b9:2d:f6:50:8b:27:90:85:ba:9a:bb: ac:51:4a:3a:e1:79:37:26:86:33:bd:f5:19:0a:f4:1e:9b:c7: 59:36:a0:45:a9:18:8d:ea:bf:82:ec:9b:35:5d:97:bb:ae:fc: a1:8a:9b:03:1b:d2:bf:d2:5b:17:c3:06:53:bd:57:bb:39:8c: a4:7b:e1:a3:13:18:96:13:8f:21:87:a5:07:67:d9:4d:20:4c: 2d:03:3c:9d:99:97:6d:17:67:08:cd:38:d2:47:78:96:98:f8: 2c:88:3d:54:5f:dc:76:d6:66:8a:cf:99:fa:6f:37:95:35:ab: 7d:1a:82:57:17:6a:81:ce:96:d7:76:52:db:92:07:51:cc:cc: 14:19:9a:0d:ee:04:6c:52:fb:f6:22:c0:20:91:2a:30:ed:df: cb:ca:f6:41:f9:33:2e:87:cc:c4:6e:93:97:b8:dd:b5:f1:cc: af:48:67:6b:c8:e9:20:81:ab:59:d1:ff:12:2b:b5:5b:07:8b: 38:32:70:15:c6:17:a2:f0:8d:6d:44:ff:4a:3d:4f:f4:1d:6c: 45:15:7d:61:35:76:d0:25:fa:3b:ad:45:85:c3:68:89:d5:a0: 43:c1:f2:d5:eb:bf:ec:54:c7:9a:18:44:fb:0b:3e:03:23:79: b7:ae:ce:f6 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt7pSiQFpfzAvAbckHmc1twMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU0ZDE5NTI3ZmQ4NWQwZDQ0NGFjYWRkNDRhMDE2NTVmZGM3NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KwL+uZkBrYueb6u8rHww7kp43Kb bc1irUL2thmJx+HvJEqBKNduzq54g+nUup3HfAtQynxGOB2T8puTXQUDiyLUeIvH wYzYQCQz+UWngo8hyLCk6AoKw4K0PbBSoZo3/aS9qDcfHqlDEX6FOew9awNsOmDv dSTLyy+VGbIixwdW0U88Btw2K5GNGvkaP8m0Q5pFgKgsGN3IdIKbU4ZCgvf67WGj hJexBMz8UvDXR0cwoRrzf/3odTeAN2gJKqJwbrUYwoQLdz9LSVG+KPlkWtCkINJv Sy4Zow910+sKqrbtXHl3O66taCL0cAxp07K+QeC/idYDN0sB6lBSbx0Z9QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzdjOWZj Yy04ZmNlLTQ0YjctYjZiZi0xMTc3NjAzMTQxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvN2M5ZmNj LThmY2UtNDRiNy1iNmJmLTExNzc2MDMxNDE1Zi8xL1YxVFJsU2Y5aGREVVJLeXQx RW9CWlZfY2RBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDPkWIAwQGPm3AAwQCuR0sAwQAwdtzMA0EAgAC MAcDBQAqAKZAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMKHAIDAzlDMA0GCSqG SIb3DQEBCwUAA4IBAQBtcBRB3z7GuS32UIsnkIW6mrusUUo64Xk3JoYzvfUZCvQe m8dZNqBFqRiN6r+C7Js1XZe7rvyhipsDG9K/0lsXwwZTvVe7OYyke+GjExiWE48h h6UHZ9lNIEwtAzydmZdtF2cIzTjSR3iWmPgsiD1UX9x21maKz5n6bzeVNat9GoJX F2qBzpbXdlLbkgdRzMwUGZoN7gRsUvv2IsAgkSow7d/LyvZB+TMuh8zEbpOXuN21 8cyvSGdryOkggatZ0f8SK7VbB4s4MnAVxhei8I1tRP9KPU/0HWxFFX1hNXbQJfo7 rUWFw2iJ1aBDwfLV67/sVMeaGET7Cz4DI3m3rs72 -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:04 2026 by rpki-client