This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer (raw, json) Hash identifier: kIu6Z7Gu1hiwOpAsGoNRHUIwDK5KIVYXFcSvBScxhOI= Subject key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C809BE396798A9797659AB0F737CDED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207704 IP: 92.119.156.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9b:e3:96:79:8a:97:97:65:9a:b0:f7:37:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:6d:f5:0b:83:0a:5d:95:44:f3:80:38:f1: 11:3e:11:b8:ca:10:c8:e1:7f:61:31:85:28:ca:c8: 67:53:a9:a4:17:da:cd:02:9d:ed:3e:7f:7e:6a:03: 1d:18:09:24:3f:18:e2:03:29:85:41:f0:4f:4d:c1: 37:e1:86:b3:91:68:c7:01:30:3a:ce:93:19:83:b0: e8:ea:0c:7f:ac:54:af:d3:3d:9b:d3:d7:e4:f7:b5: 47:83:d6:9e:94:e2:cf:28:b4:f5:35:b1:56:52:16: b3:49:fc:89:73:9e:6e:2f:19:8e:4d:a5:19:62:35: 4b:a3:51:c7:e4:7f:a1:6c:26:d1:86:60:10:43:e3: af:5b:35:ea:e6:55:30:55:8d:cf:5d:dd:ed:d1:5e: f0:c2:c1:5f:fb:b0:01:bc:00:f2:39:24:c3:03:be: ff:da:ef:e7:cc:e9:1a:4f:9f:f4:33:3b:e2:56:40: ee:f1:7c:3d:46:cb:90:ed:66:a0:ee:d5:d1:d3:4b: 49:fd:f4:3d:bc:fc:9b:a5:24:19:26:5f:3e:dc:e6: 32:6b:62:26:21:db:3e:f7:df:84:e6:e4:ef:93:d6: 69:b1:04:ac:7c:73:09:2a:0f:e0:2a:ee:57:92:45: ef:48:8c:83:b5:e9:09:43:b5:b1:8e:b6:3d:4f:65: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207704 Signature Algorithm: sha256WithRSAEncryption 7b:16:38:46:78:a9:26:b8:f0:ff:ec:7f:28:ab:44:72:0a:51: c0:7f:36:c5:a9:19:32:d1:bf:fb:3f:9b:9c:9e:3a:79:f5:62: 79:04:6d:ae:49:5d:e5:86:0f:f8:8e:7a:dd:03:6b:c4:0a:9c: 83:7d:cb:b5:f0:3d:0f:0c:0f:77:55:24:28:f8:df:a6:30:ec: 43:d8:a4:be:4c:3c:f8:b4:d8:cd:e4:8a:1f:8a:f2:5b:29:0e: 15:9f:16:83:55:44:e3:27:83:f9:dc:9c:0e:6d:d6:9a:6d:8f: f4:25:bf:dc:6c:92:e0:42:73:69:0b:0f:b7:76:75:e5:cb:b8: 46:e6:c0:f1:0b:92:17:0b:bf:56:62:06:73:da:70:ab:c7:ee: 67:a4:57:43:51:6a:89:48:a3:b5:38:02:fc:e7:84:4d:70:0d: f1:c2:0c:d3:80:88:df:96:4b:b5:33:68:b0:eb:be:1a:db:1b: d8:f1:ce:75:1e:f3:50:f0:e9:4a:d4:41:44:62:7f:07:2e:b6: 3a:4e:eb:f4:2d:02:cd:f2:21:f6:07:1b:51:5d:30:7c:c7:f7: 87:88:1e:c4:9c:51:f3:8c:f1:e4:b7:76:72:1c:c5:78:c5:71: da:da:62:2c:f3:43:85:dc:88:db:b1:c5:2b:77:74:30:b8:5c: 01:5c:e3:5f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gJvjlnmKl5dlmrD3N83tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjUwM2U1YjgzNWYwYTgxMzgxZDFjNGMxMjMzZDM4ZmI3ZGRmMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0dt9QuDCl2VRPOAOPERPhG4yhDI 4X9hMYUoyshnU6mkF9rNAp3tPn9+agMdGAkkPxjiAymFQfBPTcE34YazkWjHATA6 zpMZg7Do6gx/rFSv0z2b09fk97VHg9aelOLPKLT1NbFWUhazSfyJc55uLxmOTaUZ YjVLo1HH5H+hbCbRhmAQQ+OvWzXq5lUwVY3PXd3t0V7wwsFf+7ABvADyOSTDA77/ 2u/nzOkaT5/0MzviVkDu8Xw9RsuQ7Wag7tXR00tJ/fQ9vPybpSQZJl8+3OYya2Im Ids+99+E5uTvk9ZpsQSsfHMJKg/gKu5XkkXvSIyDtekJQ7WxjrY9T2U5XQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK9QPluDXwqBOB0cTBIz04+33fI9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzA2MDBm OC0yOTU4LTQ0MTctYmI2Ny0zYzVlMTc0NGFjZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMDYwMGY4 LTI5NTgtNDQxNy1iYjY3LTNjNWUxNzQ0YWNkZC8xL3IxQS1XNE5mQ29FNEhSeE1F alBUajdmZDhqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCXHecMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMrWDANBgkqhkiG9w0BAQsFAAOCAQEAexY4RnipJrjw/+x/KKtEcgpRwH82xakZ MtG/+z+bnJ46efVieQRtrkld5YYP+I563QNrxAqcg33LtfA9DwwPd1UkKPjfpjDs Q9ikvkw8+LTYzeSKH4ryWykOFZ8Wg1VE4yeD+dycDm3Wmm2P9CW/3GyS4EJzaQsP t3Z15cu4RubA8QuSFwu/VmIGc9pwq8fuZ6RXQ1FqiUijtTgC/OeETXAN8cIM04CI 35ZLtTNosOu+Gtsb2PHOdR7zUPDpStRBRGJ/By62Ok7r9C0CzfIh9gcbUV0wfMf3 h4gexJxR84zx5Ld2chzFeMVx2tpiLPNDhdyI27HFK3d0MLhcAVzjXw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:04 2026 by rpki-client