This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer File: 1-KMdLu62epN-LofXatn50Xzal_A.cer (raw, json) Hash identifier: k0nLhYJfF+Gm0dPBLKx1TOlbO/7JFA6hSnY6kVLXuoo= Subject key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DC803A38C5B24B78439FDDD33C7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.245.215.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:80:3a:38:c5:b2:4b:78:43:9f:dd:d3:3c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:fc:1d:d1:99:ae:e1:33:40:31:54:89:fd: 93:4c:bc:25:18:b2:27:c5:4e:2c:fd:57:5a:6b:28: aa:d8:b6:cf:0a:39:55:6a:8b:e5:cd:68:ce:5b:62: 9e:e6:d9:af:73:d5:0c:ce:56:6e:42:cb:04:0f:ae: a2:da:3c:b5:72:76:6e:a3:41:4d:0b:4f:12:bf:44: 8b:5f:25:5d:3e:e4:00:3f:7a:30:a9:0b:07:f2:39: ff:56:3b:98:8a:94:1e:bc:5a:f0:99:31:86:3f:f1: 43:b3:c9:f2:47:cd:c3:86:2b:e6:bd:63:8b:47:91: 23:0a:f8:32:07:05:a9:aa:04:99:e1:d8:42:22:cf: 03:6d:03:66:9a:2a:09:2d:70:09:2e:02:ce:9f:15: 63:95:01:68:c9:19:3f:49:56:81:70:88:c8:fe:11: c6:e5:60:ab:08:5a:ff:fa:eb:be:88:1e:a1:3c:f8: 53:3b:98:d3:54:3e:5a:b0:09:b1:89:f9:a3:34:89: ef:88:9e:f9:80:1b:e0:ec:a8:ff:6d:56:e4:ba:aa: 30:05:0e:24:1f:86:1f:07:14:56:52:41:aa:54:50: c9:6b:35:b9:20:26:44:09:7f:1f:d8:6a:4a:0c:2b: 45:c0:5a:25:14:bc:34:5d:13:c0:55:87:ea:17:0c: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.215.0/24 Signature Algorithm: sha256WithRSAEncryption 13:b9:a9:e2:8c:62:6f:27:68:2d:a5:48:24:7c:33:88:62:00: 5d:c3:9d:65:b2:7d:70:8b:c1:fa:46:a3:d9:76:72:3a:35:b2: f5:bd:aa:ad:c6:1e:52:7b:f7:e4:90:6c:f8:89:67:a5:03:99: d7:b6:e6:67:bc:c2:ed:3a:a0:c1:a7:7c:fa:55:bc:97:27:d5: c3:99:20:38:e1:7c:30:f6:0c:6c:f8:a2:97:63:f6:71:6b:47: 49:9a:2d:cc:d4:37:57:47:61:b5:e3:a0:9c:d8:09:da:91:0f: 11:64:80:99:70:c5:3d:d3:25:ec:34:c6:97:82:eb:c2:4e:16: 98:3f:8b:97:2a:b6:23:21:1d:5a:19:b0:fd:fe:b5:dc:b7:17: ec:81:93:a8:96:4e:5b:c1:4c:83:3e:58:6d:9b:34:81:38:6b: b4:af:dc:e7:66:fa:8f:78:af:ba:50:08:c1:dc:37:9d:9a:a5: 70:44:67:c2:b2:ab:ba:43:1f:d1:14:95:fa:3a:af:01:0d:18: 35:8a:26:84:86:4b:90:c1:22:5f:52:55:a8:03:b2:f6:a6:d0: 21:b6:ff:74:4e:ce:2f:03:5b:79:ef:ca:e7:1f:48:65:24:0f: 96:ea:e1:bd:97:6d:fa:85:69:e2:7e:b0:8f:3c:8c:01:14:85: a6:0d:32:b0 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt3WNyAOjjFskt4Q5/d0zx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGEzMWQyZWVlYjY3YTkzN2UyZTg3ZDc2YWQ5ZjlkMTdjZGE5N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL38HdGZruEzQDFUif2TTLwlGLIn xU4s/Vdaayiq2LbPCjlVaovlzWjOW2Ke5tmvc9UMzlZuQssED66i2jy1cnZuo0FN C08Sv0SLXyVdPuQAP3owqQsH8jn/VjuYipQevFrwmTGGP/FDs8nyR83DhivmvWOL R5EjCvgyBwWpqgSZ4dhCIs8DbQNmmioJLXAJLgLOnxVjlQFoyRk/SVaBcIjI/hHG 5WCrCFr/+uu+iB6hPPhTO5jTVD5asAmxifmjNInviJ75gBvg7Kj/bVbkuqowBQ4k H4YfBxRWUkGqVFDJazW5ICZECX8f2GpKDCtFwFolFLw0XRPAVYfqFwwKuQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPijHS7utnqTfi6H12rZ+dF82pfwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzg4NjY0 Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2NmIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2 LWZmYWEtNDAwZS04ZGY2LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZY YXRuNTBYemFsX0EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv11zANBgkqhkiG9w0BAQsFAAOCAQEAE7mp 4oxibydoLaVIJHwziGIAXcOdZbJ9cIvB+kaj2XZyOjWy9b2qrcYeUnv35JBs+Iln pQOZ17bmZ7zC7Tqgwad8+lW8lyfVw5kgOOF8MPYMbPiil2P2cWtHSZotzNQ3V0dh teOgnNgJ2pEPEWSAmXDFPdMl7DTGl4Lrwk4WmD+Llyq2IyEdWhmw/f613LcX7IGT qJZOW8FMgz5YbZs0gThrtK/c52b6j3ivulAIwdw3nZqlcERnwrKrukMf0RSV+jqv AQ0YNYomhIZLkMEiX1JVqAOy9qbQIbb/dE7OLwNbee/K5x9IZSQPlurhvZdt+oVp 4n6wjzyMARSFpg0ysA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:44 2026 by rpki-client