This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer File: rs1kyXg317-sBmN92VK97eDCXYU.cer (raw, json) Hash identifier: aeaoErr+Lp3uSry2TrZ5bLAsHcroXyS1YvgsWYma/ZY= Subject key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7104887584DCF0C002B441E9D6476 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39010 IP: 5.57.1.0 -- 5.57.7.255 IP: 78.108.160.0/20 IP: 85.112.64.0/19 IP: 146.185.32.0/21 IP: 185.54.60.0/22 IP: 212.98.128.0 -- 212.98.133.255 IP: 212.98.135.0 -- 212.98.159.255 IP: 213.204.64.0/19 IP: 213.204.97.0 -- 213.204.127.255 IP: 2a00:1580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:48:87:58:4d:cf:0c:00:2b:44:1e:9d:64:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:cd:56:cf:c0:26:99:e9:b6:52:9f:f9:0a: a3:57:f6:f4:4b:2c:1f:55:b6:ea:33:f2:5e:80:33: 3f:b3:cb:e2:88:f7:21:08:7b:75:bc:44:c3:e6:0b: ed:0c:d0:c3:42:e7:6e:71:b7:9c:97:76:7a:c2:e9: 41:e6:0e:81:40:4b:71:42:02:b7:2f:c9:16:d2:07: 61:0e:52:21:45:30:5c:26:84:a0:26:b2:56:de:03: ab:dc:51:32:ac:47:09:1b:8d:41:09:f1:38:a3:fa: b5:35:94:67:c2:17:26:b7:9e:94:a9:e9:15:b9:6e: ab:ed:d6:e9:6a:e7:2c:6a:db:18:bb:3e:7f:60:8c: a5:86:1a:4f:fe:9d:10:8b:67:30:ee:f1:16:57:f8: cc:eb:16:3c:af:e6:61:f3:39:10:07:3a:d1:e1:70: aa:f6:3b:0c:55:91:bc:d7:87:76:c8:37:60:4d:74: b4:ea:37:ff:58:b9:6a:02:da:93:6b:48:0b:0f:81: 84:30:07:25:58:df:17:36:2a:aa:2a:89:94:4a:a0: 3a:82:e8:60:0d:ec:c6:c8:ff:e9:b0:b9:7e:de:c7: 51:8d:9c:f4:d6:b6:27:44:6e:ea:a6:6c:cf:5e:7e: c7:4b:e7:b3:0d:50:50:32:83:f9:e4:91:ab:5d:65: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.1.0-5.57.7.255 78.108.160.0/20 85.112.64.0/19 146.185.32.0/21 185.54.60.0/22 212.98.128.0-212.98.133.255 212.98.135.0-212.98.159.255 213.204.64.0/19 213.204.97.0-213.204.127.255 IPv6: 2a00:1580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39010 Signature Algorithm: sha256WithRSAEncryption 18:c5:aa:8a:15:de:e0:01:f0:e7:f9:bc:92:1d:bb:31:2b:62: c3:47:9b:4e:d6:6b:38:f8:9a:cb:b2:41:f0:62:3b:a3:db:4a: ac:2c:c7:31:89:5e:66:58:93:57:7f:c7:1e:26:ab:19:59:93: f9:0d:24:a7:60:68:0f:7b:86:cc:48:a3:22:18:46:9e:70:e0: bb:42:cc:6c:ad:6a:74:1e:39:63:d8:80:df:77:4f:cc:21:2f: 43:9f:62:8e:ee:f6:f7:6d:d3:aa:85:f1:b3:e2:12:3a:4d:08: 46:0c:91:39:d5:81:b4:5c:c3:47:99:56:a7:29:e6:f1:ca:fa: 77:49:bb:bf:fe:d6:b4:11:e0:17:a9:b8:22:91:f9:9b:28:56: f3:80:24:df:ff:e7:8d:33:0a:8a:55:fc:d8:66:d2:87:0a:2e: 18:13:90:d4:c4:1a:7d:c2:03:24:e9:ef:15:92:67:2e:d6:07: c4:79:de:e7:01:46:83:61:52:77:cd:75:38:9f:5c:9b:86:16: 9a:dc:45:22:09:58:d9:41:90:1c:c3:fd:6a:c2:c5:6c:b7:4a: 38:43:11:ae:af:86:a6:35:00:63:c7:81:d4:c9:19:6f:54:d6: 8d:94:78:45:4b:dc:88:c2:47:d2:37:fc:59:2f:d6:2d:7d:49: 47:a6:37:49 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAZt3xxBIh1hNzwwAK0QenWR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWNkNjRjOTc4MzdkN2JmYWMwNjYzN2RkOTUyYmRlZGUwYzI1ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt7NVs/AJpnptlKf+QqjV/b0Sywf VbbqM/JegDM/s8viiPchCHt1vETD5gvtDNDDQuducbecl3Z6wulB5g6BQEtxQgK3 L8kW0gdhDlIhRTBcJoSgJrJW3gOr3FEyrEcJG41BCfE4o/q1NZRnwhcmt56UqekV uW6r7dbpaucsatsYuz5/YIylhhpP/p0Qi2cw7vEWV/jM6xY8r+Zh8zkQBzrR4XCq 9jsMVZG814d2yDdgTXS06jf/WLlqAtqTa0gLD4GEMAclWN8XNiqqKomUSqA6guhg DezGyP/psLl+3sdRjZz01rYnRG7qpmzPXn7HS+ezDVBQMoP55JGrXWXjjwIDAQAB o4IC/zCCAvswHQYDVR0OBBYEFK7NZMl4N9e/rAZjfdlSve3gwl2FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzU5MmQ0 Zi1kNzFlLTRlOGItYTYzMi0xZWNkZTE3OTE1MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNTkyZDRm LWQ3MWUtNGU4Yi1hNjMyLTFlY2RlMTc5MTUxMS8xL3JzMWt5WGczMTctc0JtTjky Vks5N2VEQ1hZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBcBAIAATBWMAwDBAAFOQEDBAMFOQADBARObKADBAVVcEADBAOS uSADBAK5NjwwDAMEB9RigAMEAdRihDAMAwQA1GKHAwQF1GKAAwQF1cxAMAwDBADV zGEDBAfVzAAwDQQCAAIwBwMFAyoAFYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJhiMA0GCSqGSIb3DQEBCwUAA4IBAQAYxaqKFd7gAfDn+bySHbsxK2LDR5tO1ms4 +JrLskHwYjuj20qsLMcxiV5mWJNXf8ceJqsZWZP5DSSnYGgPe4bMSKMiGEaecOC7 QsxsrWp0Hjlj2IDfd0/MIS9Dn2KO7vb3bdOqhfGz4hI6TQhGDJE51YG0XMNHmVan Kebxyvp3Sbu//ta0EeAXqbgikfmbKFbzgCTf/+eNMwqKVfzYZtKHCi4YE5DUxBp9 wgMk6e8Vkmcu1gfEed7nAUaDYVJ3zXU4n1ybhhaa3EUiCVjZQZAcw/1qwsVst0o4 QxGur4amNQBjx4HUyRlvVNaNlHhFS9yIwkfSN/xZL9YtfUlHpjdJ -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:14 2026 by rpki-client