This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer (raw, json) Hash identifier: IiFhhYR2yXLYp6D6ZpfdCNa4vioeivppFP9XDVDtua4= Subject key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5F4CDB0FEC8D00B2958F6ED32FBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39335 AS: 42615 AS: 203729 IP: 185.186.8.0/22 IP: 2a0b:6b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5f:4c:db:0f:ec:8d:00:b2:95:8f:6e:d3:2f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:a4:6f:1d:cf:5a:cc:92:11:87:4d:ba:70: 89:76:8e:08:db:09:bf:18:cd:2a:bf:cc:1e:1a:51: 64:ac:c7:5c:99:19:21:84:c7:29:9d:d7:c9:63:e7: 9d:8d:92:2e:05:64:2d:3a:dc:e8:40:b9:48:a2:51: ff:ee:27:6c:d4:48:ac:2d:e6:cc:d6:ee:e8:56:39: e8:df:1c:fa:c6:f6:65:43:8c:18:0b:77:f7:46:5c: 16:7d:66:29:cc:dc:d6:9d:ea:38:ec:fd:67:c4:e7: 1e:96:96:bb:e5:b6:62:fd:64:f9:7a:88:5a:89:e2: 08:f6:3f:98:a8:de:ea:35:48:f0:ba:31:7f:5f:17: 04:7a:46:c0:72:18:c1:f4:b1:cc:3b:94:81:e6:b8: b2:bd:25:c4:e8:2d:35:3f:15:39:c7:11:11:37:8b: 96:3d:8e:e6:37:9d:cc:7d:68:67:42:e6:72:ef:45: ee:21:6b:20:e5:a2:d7:e9:7d:a6:3f:a4:d2:7f:c8: 23:2a:2f:a3:dc:0e:32:23:5c:2c:72:a4:17:85:a9: 93:88:95:d5:23:c9:24:6e:4e:07:12:76:24:12:cf: 9f:e5:f4:41:39:de:18:50:37:40:df:21:d6:e8:2f: 53:5f:f3:39:eb:99:bf:e4:cf:e1:70:46:a8:7b:dc: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.8.0/22 IPv6: 2a0b:6b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39335 42615 203729 Signature Algorithm: sha256WithRSAEncryption 78:ca:16:99:a8:ac:4c:ac:ac:15:af:8f:22:de:de:fc:a1:b9: 63:22:8d:e7:1c:64:ff:da:e0:27:ef:cc:6d:1f:e1:82:03:c3: 7d:2d:14:3f:a8:83:40:35:ab:6e:7c:bb:36:b2:10:22:d3:59: 40:80:9e:a2:99:bf:f4:32:2d:90:95:10:ec:d3:c3:69:c1:85: 32:b2:3f:eb:68:c4:f3:7c:51:a8:4b:9a:d1:df:a1:5d:bf:07: 7e:da:81:3e:83:50:7e:87:66:a0:29:16:80:0e:03:f3:64:9e: 11:5b:f4:35:6b:f3:21:b5:f9:d1:56:6e:4a:c7:26:a5:30:6a: 75:b0:5b:c0:80:3c:07:88:5f:18:6e:44:cd:07:91:14:1c:77: 00:dd:3d:64:1b:f2:3b:5f:35:23:2c:62:df:11:6e:2d:f3:a9: 0b:a3:d1:2a:ff:61:13:11:f4:ef:64:81:0f:35:dd:6a:4b:93: ea:f4:7d:69:f0:77:72:a0:40:ad:e5:b9:8f:71:b6:9b:e0:2a: e6:4e:fc:c2:06:79:27:d5:8d:5d:18:29:78:af:45:c7:05:fc: 69:ec:22:27:b2:ab:f0:6b:8c:f7:d0:18:c8:b8:2f:8c:e7:8e: d2:2b:42:6c:fe:1a:27:ae:55:8a:99:ff:a7:bf:24:26:88:26: 85:ff:89:b7 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt2619M2w/sjQCylY9u0y+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzViYzliYjU0N2UyNzc4OGQyMjFiYzhiYmQ1ZmIwMmUwMjQ0ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fSkbx3PWsySEYdNunCJdo4I2wm/ GM0qv8weGlFkrMdcmRkhhMcpndfJY+edjZIuBWQtOtzoQLlIolH/7ids1EisLebM 1u7oVjno3xz6xvZlQ4wYC3f3RlwWfWYpzNzWneo47P1nxOcelpa75bZi/WT5eoha ieII9j+YqN7qNUjwujF/XxcEekbAchjB9LHMO5SB5riyvSXE6C01PxU5xxERN4uW PY7mN53MfWhnQuZy70XuIWsg5aLX6X2mP6TSf8gjKi+j3A4yI1wscqQXhamTiJXV I8kkbk4HEnYkEs+f5fRBOd4YUDdA3yHW6C9TX/M565m/5M/hcEaoe9wBKwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFINbybtUfid4jSIbyLvV+wLgJEgPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0Lzk2MmZi MS0zZGYwLTRlYzItYjUwYS1iMzZhMjRkMzk0MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTYyZmIx LTNkZjAtNGVjMi1iNTBhLWIzNmEyNGQzOTQyNy8xL2cxdkp1MVItSjNpTklodkl1 OVg3QXVBa1NBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuboIMA0EAgACMAcDBQMqC2uAMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwCZpwIDAKZ3AgMDG9EwDQYJKoZIhvcNAQELBQADggEB AHjKFpmorEysrBWvjyLe3vyhuWMijeccZP/a4CfvzG0f4YIDw30tFD+og0A1q258 uzayECLTWUCAnqKZv/QyLZCVEOzTw2nBhTKyP+toxPN8UahLmtHfoV2/B37agT6D UH6HZqApFoAOA/NknhFb9DVr8yG1+dFWbkrHJqUwanWwW8CAPAeIXxhuRM0HkRQc dwDdPWQb8jtfNSMsYt8Rbi3zqQuj0Sr/YRMR9O9kgQ813WpLk+r0fWnwd3KgQK3l uY9xtpvgKuZO/MIGeSfVjV0YKXivRccF/GnsIieyq/BrjPfQGMi4L4znjtIrQmz+ GieuVYqZ/6e/JCaIJoX/ibc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:59 2026 by rpki-client