This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer File: un1KwTROw43OmXaNeKEU6_fxfYU.cer (raw, json) Hash identifier: apdL1BdGboxlktPZwm+2xSTRhT+OhWoplV9M7B6e704= Subject key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C2584CD234E0B362B0E45546A279 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198851 IP: 91.239.254.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c2:58:4c:d2:34:e0:b3:62:b0:e4:55:46:a2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a6:c0:27:66:bb:c3:7f:ea:c1:b1:93:59:d2: 4f:9d:6f:64:95:60:49:92:67:c2:82:43:2f:31:80: 7c:6d:5e:36:ba:0b:e3:1b:75:70:6b:1d:a9:07:01: 22:71:2d:ba:58:9a:ea:e1:5d:55:98:82:ff:74:1d: 00:eb:af:5a:e3:d5:56:1d:cd:76:e4:db:e4:c9:15: 81:f3:e3:53:b7:06:2a:27:d5:b0:74:8d:de:bb:1e: d6:f3:c8:39:f0:34:ce:0e:65:ff:b8:ab:52:4a:3c: 5d:f3:c2:90:49:10:e1:e2:46:fc:5b:d9:c2:75:e0: 1d:b1:99:bc:e9:59:ea:38:06:2d:4d:c3:e7:0b:bc: 2b:3d:59:d6:de:76:d1:5d:9e:5e:c7:94:3d:52:5f: 5a:4e:60:14:5f:ed:19:40:31:41:58:9e:05:6b:3b: dd:4a:73:c8:0b:73:8c:ba:2c:d1:88:87:5a:b4:7c: e7:d3:ec:a4:a3:96:ba:cd:a3:bc:95:f1:ea:96:a5: 67:93:44:14:f3:d0:1d:70:f3:ff:97:47:e2:24:4c: 63:b3:b1:3f:db:12:ec:16:37:df:55:97:75:48:82: a3:87:f6:f1:98:01:e2:81:2b:9c:73:de:5c:36:89: 82:7a:3b:8e:e0:3c:dd:e1:bf:dc:b8:3a:12:13:2c: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.254.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198851 Signature Algorithm: sha256WithRSAEncryption a9:58:c0:83:0a:d0:1b:e0:0a:98:b5:c0:ec:32:ef:ab:44:1f: 2b:75:b1:1d:53:91:a2:8f:31:da:c1:24:d7:07:bc:81:0c:9d: 2c:4f:0e:a0:b9:34:6b:69:c2:d0:5e:58:6d:27:a9:b2:50:fc: 20:07:c4:92:48:ad:b7:81:6f:2a:ab:64:27:54:89:85:c4:57: 00:06:e8:8c:5a:63:35:1c:3e:f3:5a:42:79:38:82:ed:97:f5: 10:b8:a1:bb:3c:25:c2:f8:fa:78:76:83:30:af:00:51:9d:ad: e2:72:24:ae:90:1c:b6:10:bc:46:7f:65:e4:24:f4:4f:23:a4: b1:82:5a:08:0b:ce:4c:2d:b2:4d:b0:36:46:cf:a7:c2:d7:e9: 2d:d6:d9:af:e7:ee:4d:b6:92:58:2a:06:ca:42:98:8b:be:60: 8e:d3:3f:d1:08:da:96:fd:d9:e3:33:30:76:5f:84:04:c7:e4: 0b:15:f6:65:4f:29:77:39:cf:6e:df:74:40:31:2e:3a:a4:12: 31:e8:ef:6c:c3:d7:cb:b1:1e:78:66:ee:3e:c5:30:51:30:c2: b7:09:0e:f7:5c:6a:10:d7:9c:db:9a:c6:29:c3:00:44:47:c5: 45:6c:e2:75:a7:64:66:92:78:86:d9:10:3f:86:59:9d:1b:80: 42:8d:2f:e7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pMJYTNI04LNisORVRqJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTdkNGFjMTM0NGVjMzhkY2U5OTc2OGQ3OGExMTRlYmY3ZjE3ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3abAJ2a7w3/qwbGTWdJPnW9klWBJ kmfCgkMvMYB8bV42ugvjG3Vwax2pBwEicS26WJrq4V1VmIL/dB0A669a49VWHc12 5NvkyRWB8+NTtwYqJ9WwdI3eux7W88g58DTODmX/uKtSSjxd88KQSRDh4kb8W9nC deAdsZm86VnqOAYtTcPnC7wrPVnW3nbRXZ5ex5Q9Ul9aTmAUX+0ZQDFBWJ4Fazvd SnPIC3OMuizRiIdatHzn0+yko5a6zaO8lfHqlqVnk0QU89AdcPP/l0fiJExjs7E/ 2xLsFjffVZd1SIKjh/bxmAHigSucc95cNomCejuO4Dzd4b/cuDoSEyxnvwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLp9SsE0TsONzpl2jXihFOv38X2FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2I2NjEy NS02ODQ0LTRhODctOWJiNS1hZjQyNjIzZWE0MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvYjY2MTI1 LTY4NDQtNGE4Ny05YmI1LWFmNDI2MjNlYTQzMS8xL3VuMUt3VFJPdzQzT21YYU5l S0VVNl9meGZZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+/+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMIwzANBgkqhkiG9w0BAQsFAAOCAQEAqVjAgwrQG+AKmLXA7DLvq0QfK3WxHVOR oo8x2sEk1we8gQydLE8OoLk0a2nC0F5YbSepslD8IAfEkkitt4FvKqtkJ1SJhcRX AAbojFpjNRw+81pCeTiC7Zf1ELihuzwlwvj6eHaDMK8AUZ2t4nIkrpActhC8Rn9l 5CT0TyOksYJaCAvOTC2yTbA2Rs+nwtfpLdbZr+fuTbaSWCoGykKYi75gjtM/0Qja lv3Z4zMwdl+EBMfkCxX2ZU8pdznPbt90QDEuOqQSMejvbMPXy7EeeGbuPsUwUTDC twkO91xqENec25rGKcMAREfFRWzidadkZpJ4htkQP4ZZnRuAQo0v5w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:49 2026 by rpki-client