This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer (raw, json) Hash identifier: M9liL+tco/PDDbSgMi2ZzbDqeHGvxt4B6uzb+b/eyQo= Subject key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35805B2F55ACBC1E6478F9A939A39A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201929 IP: 2a02:65a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:80:5b:2f:55:ac:bc:1e:64:78:f9:a9:39:a3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:e1:ac:f4:c7:d5:5c:83:13:a4:a8:f7:22: 2f:4e:99:21:9a:ad:48:76:ff:ff:28:97:f3:3a:7d: 4b:1a:d8:ba:60:78:ec:5d:0f:23:eb:91:a1:93:53: 10:81:11:7b:db:25:a3:4f:7c:cc:a5:4b:8d:69:a1: 52:05:1f:c1:3d:5d:74:26:0a:92:2a:e5:e4:f6:b7: 0a:ae:27:74:8e:1b:3e:61:b2:7d:51:c7:43:f6:cc: 7f:5d:09:e9:1a:53:40:c7:98:e5:33:f9:e4:01:3a: b4:1b:1f:18:51:2e:e9:fc:c4:9c:18:26:56:53:80: 1f:2b:83:a7:fc:87:ba:99:cf:fe:d3:76:ce:18:8f: ed:e9:25:92:8c:5a:15:24:1b:54:b9:53:9f:46:f9: b0:56:21:c4:dc:6b:ec:89:a1:c3:79:77:fe:ea:ab: 21:ae:dc:75:83:7b:e6:46:81:32:cf:97:30:88:d3: 5e:e6:d7:0f:09:f9:bd:56:0b:f4:43:f3:03:53:29: 03:2b:fc:da:ef:ea:3d:a9:aa:01:73:4c:0e:dc:f0: 29:5b:96:6a:15:da:96:de:2d:57:f2:84:8d:7e:fa: a5:f9:ea:bb:9c:db:4d:c4:cc:70:ef:c9:71:1b:60: e7:e0:f0:76:bd:d8:21:b8:7a:37:fb:c0:4a:a6:4f: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:65a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201929 Signature Algorithm: sha256WithRSAEncryption 09:84:7b:1c:a6:34:a5:58:32:90:ec:bd:2e:cf:35:8f:d9:d6: 90:b7:43:3e:50:fb:d3:c1:0e:5f:a0:7a:3a:a3:05:46:53:34: ad:1b:2a:f5:07:1e:d1:86:df:8d:01:32:87:88:86:62:86:34: b2:84:c1:a5:25:05:81:17:1e:46:7a:94:17:01:34:a1:63:33: ef:d1:39:76:09:f0:7d:35:74:13:3a:22:ab:3d:76:6c:46:b5: 03:b7:4d:27:eb:af:8c:37:6f:7f:5c:2c:e2:03:d8:fe:d0:d3: 75:7c:3b:c3:a8:26:4d:03:2b:93:26:5b:fc:5f:c0:7f:f1:c1: d5:fb:f1:7a:62:c2:87:5a:61:57:1f:ae:55:2c:a0:21:06:20: a6:c5:ad:53:f1:39:8f:7a:2d:f9:07:c3:e6:1f:d1:91:60:f3: e1:13:0e:02:49:2c:db:6d:a0:c9:2e:e0:39:fd:d7:57:1f:f3: 44:d4:6d:c6:7f:10:cf:79:49:4c:36:ec:b7:73:5b:cb:ae:e4: 16:5d:1e:07:8a:df:be:82:1b:09:13:07:c8:0e:af:0d:3f:65: 85:e6:d6:e7:4a:06:2a:e8:17:44:38:b0:d2:96:cf:31:13:c4: 0a:fa:2e:95:9e:1b:67:0f:23:d4:78:6c:c6:cc:35:b6:a2:dd: f4:aa:35:a4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt7NYBbL1WsvB5kePmpOaOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTFkMjBjOTJjNjUzOWFkNjZkYTg3YzdjZmU2NWE5ZmFhY2NhMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8PhrPTH1VyDE6So9yIvTpkhmq1I dv//KJfzOn1LGti6YHjsXQ8j65Ghk1MQgRF72yWjT3zMpUuNaaFSBR/BPV10JgqS KuXk9rcKrid0jhs+YbJ9UcdD9sx/XQnpGlNAx5jlM/nkATq0Gx8YUS7p/MScGCZW U4AfK4On/Ie6mc/+03bOGI/t6SWSjFoVJBtUuVOfRvmwViHE3GvsiaHDeXf+6qsh rtx1g3vmRoEyz5cwiNNe5tcPCfm9Vgv0Q/MDUykDK/za7+o9qaoBc0wO3PApW5Zq FdqW3i1X8oSNfvql+eq7nNtNxMxw78lxG2Dn4PB2vdghuHo3+8BKpk+rhQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFPkdIMksZTmtZtqHx8/mWp+qzKBjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2U2NTEz Zi03MTc1LTQ2M2ItYWU4NS1jMThlNDdiZDljNjQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTY1MTNm LTcxNzUtNDYzYi1hZTg1LWMxOGU0N2JkOWM2NC8xLzEtUjBneVN4bE9hMW0yb2ZI ei1aYW42ck1vR00ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACoCZaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAxTJMA0GCSqGSIb3DQEBCwUAA4IBAQAJhHscpjSlWDKQ7L0uzzWP2daQt0M+ UPvTwQ5foHo6owVGUzStGyr1Bx7Rht+NATKHiIZihjSyhMGlJQWBFx5GepQXATSh YzPv0Tl2CfB9NXQTOiKrPXZsRrUDt00n66+MN29/XCziA9j+0NN1fDvDqCZNAyuT Jlv8X8B/8cHV+/F6YsKHWmFXH65VLKAhBiCmxa1T8TmPei35B8PmH9GRYPPhEw4C SSzbbaDJLuA5/ddXH/NE1G3GfxDPeUlMNuy3c1vLruQWXR4Hit++ghsJEwfIDq8N P2WF5tbnSgYq6BdEOLDSls8xE8QK+i6VnhtnDyPUeGzGzDW2ot30qjWk -----END CERTIFICATE-----Generated at Sun Jan 11 20:36:52 2026 by rpki-client