This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer (raw, json) Hash identifier: dnGl41+cP6ZaQXdxG3sfXyG5CUa2xCBdIbDFU1MDIsM= Subject key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B84961F822FAD88AC33C2D16F286 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.183.0.0/22 IP: 2a0a:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:49:61:f8:22:fa:d8:8a:c3:3c:2d:16:f2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:76:2a:07:39:cd:32:7c:db:c6:0c:85:dd: 73:32:b0:9d:fa:ed:b9:b4:51:19:ff:57:d5:28:8b: 92:69:7b:9a:fd:c4:ef:27:ba:08:03:9f:43:ac:1a: 43:91:40:e5:02:84:21:f6:eb:26:03:1a:76:84:77: 0d:da:cf:e7:7b:89:3c:61:4c:ba:f7:2b:04:99:9b: 76:a4:ec:33:8d:7e:bd:e3:af:81:15:a7:d6:2b:56: 2f:92:44:af:7d:b1:c4:ec:48:40:d6:5f:5f:a8:c5: e9:df:e3:5c:87:ea:87:b6:f4:0f:9b:a7:d8:a5:37: eb:db:1b:3c:78:f8:71:db:f8:6f:4a:2c:63:e5:a5: 99:19:03:23:74:16:cd:0a:d2:1e:7a:5d:18:ca:07: 42:38:da:4b:58:c4:87:c6:99:9d:69:6a:52:67:e0: 69:26:ae:69:e1:b3:a0:83:28:42:c1:b8:08:fc:3f: 32:e9:0f:cd:fd:29:ae:72:c5:ac:ac:46:48:4e:22: 7f:4d:96:6a:2b:dd:d5:91:35:37:6c:70:b3:b9:28: 63:1a:b0:48:67:49:13:c9:76:77:2f:dc:c1:f8:72: e0:90:35:de:a9:7f:fe:d5:0c:c7:a2:d6:35:20:5d: 05:43:4f:f4:f0:93:e2:19:d2:e6:f3:db:73:8c:e5: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.0.0/22 IPv6: 2a0a:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 77:ee:d0:2d:d8:a9:96:87:58:52:33:9b:a6:e9:60:77:9b:9c: 51:c3:46:4e:02:10:53:1c:c9:8f:86:fb:3e:d3:78:7c:8b:83: 4d:35:16:50:02:96:d3:01:14:14:1a:50:80:c5:9b:0f:5d:34: b9:7c:a8:a7:f0:9c:a1:ea:af:b4:8c:c6:ce:6d:7d:f9:f0:31: d2:b0:a8:fe:39:bd:ed:75:63:30:06:40:e5:8f:7d:c0:bc:f9: bf:c0:d1:28:a0:7d:18:da:29:85:cd:e9:fb:d7:c2:9e:f9:59: 0f:e5:1e:fc:3d:d3:31:81:7c:ec:c2:9e:60:42:59:9d:a0:75: 01:47:92:e9:e9:fe:5e:73:eb:ab:34:eb:52:44:c3:93:14:6c: d1:31:c3:a5:b4:92:f3:80:fd:62:98:1a:2b:a7:e1:61:53:44: 3f:3b:7f:b8:fe:53:f5:f9:62:3e:f0:03:23:fa:c7:6a:63:1a: 2d:bc:de:66:92:d3:8d:ae:6e:ce:1f:1c:a8:0f:10:1f:b9:9f: 96:f0:e4:a1:67:db:5f:76:fe:bb:fc:60:cd:90:cf:cb:97:47: 52:2b:91:30:79:b5:59:ca:84:ac:26:4a:b0:7d:fc:92:3b:14: 42:eb:d4:32:8b:52:e9:e6:3d:f5:90:78:5c:c8:24:b0:12:e1: cb:98:0a:3e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xrhJYfgi+tiKwzwtFvKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjU3YzVkZmY3MGViZmU2N2E0MDBkNTVmMjU5ZGIyYzM3MTkyMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ud2Kgc5zTJ828YMhd1zMrCd+u25 tFEZ/1fVKIuSaXua/cTvJ7oIA59DrBpDkUDlAoQh9usmAxp2hHcN2s/ne4k8YUy6 9ysEmZt2pOwzjX6946+BFafWK1YvkkSvfbHE7EhA1l9fqMXp3+Nch+qHtvQPm6fY pTfr2xs8ePhx2/hvSixj5aWZGQMjdBbNCtIeel0YygdCONpLWMSHxpmdaWpSZ+Bp Jq5p4bOggyhCwbgI/D8y6Q/N/SmucsWsrEZITiJ/TZZqK93VkTU3bHCzuShjGrBI Z0kTyXZ3L9zB+HLgkDXeqX/+1QzHotY1IF0FQ0/08JPiGdLm89tzjOVS9QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGtXxd/3Dr/mekANVfJZ2yw3GSGWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzZhZTU4 Yy03NjE4LTQxYmEtYTM0My1jNDZkN2JhYzAyZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNmFlNThj LTc2MTgtNDFiYS1hMzQzLWM0NmQ3YmFjMDJmYy8xL2ExZkYzX2NPdi1aNlFBMVY4 bG5iTERjWklaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubcAMA0EAgACMAcDBQMqCv6AMA0GCSqGSIb3 DQEBCwUAA4IBAQB37tAt2KmWh1hSM5um6WB3m5xRw0ZOAhBTHMmPhvs+03h8i4NN NRZQApbTARQUGlCAxZsPXTS5fKin8Jyh6q+0jMbObX358DHSsKj+Ob3tdWMwBkDl j33AvPm/wNEooH0Y2imFzen718Ke+VkP5R78PdMxgXzswp5gQlmdoHUBR5Lp6f5e c+urNOtSRMOTFGzRMcOltJLzgP1imBorp+FhU0Q/O3+4/lP1+WI+8AMj+sdqYxot vN5mktONrm7OHxyoDxAfuZ+W8OShZ9tfdv67/GDNkM/Ll0dSK5EwebVZyoSsJkqw ffySOxRC69Qyi1Lp5j31kHhcyCSwEuHLmAo+ -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:32 2026 by rpki-client