This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer (raw, json) Hash identifier: Xdxns7u68r+8cKx76HG/qZhCurTsbdlLvoCdCZikeK8= Subject key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F42E07A1486B2CBF0928C616865EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208897 IP: 45.15.132.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:42:e0:7a:14:86:b2:cb:f0:92:8c:61:68:65:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:30:15:22:87:9c:a5:04:f7:39:22:59:1f: 2d:20:fb:cb:58:11:50:8c:16:60:f4:e1:0b:6a:19: 41:2f:95:fc:be:ae:ab:79:2a:69:64:18:2c:bf:4f: 95:ab:e5:95:d6:3d:38:93:11:97:96:7c:02:a4:7b: ae:6b:60:cb:d2:90:80:4b:d4:09:87:d7:75:85:21: 40:4b:6c:61:5a:8d:af:f5:2c:9a:6f:94:a7:b4:d8: 35:d2:d3:16:16:19:10:2a:34:60:72:00:88:11:b7: ce:89:b5:be:33:6b:9b:24:85:0b:40:5c:fa:e6:10: 0b:16:af:bc:ef:c3:ed:0d:41:70:c7:e8:7e:68:cb: 96:9d:39:1a:05:1d:c8:33:d9:48:c1:a8:0f:5f:99: b1:1d:31:6f:1e:e6:0e:e3:8b:64:a5:42:86:c0:31: 65:51:f3:86:53:e6:0a:7f:77:fb:dd:2c:14:62:24: 2e:d1:8b:72:ea:7b:6c:8d:40:d4:60:f5:90:05:82: 9d:ec:e7:23:f6:c5:2f:c2:ba:c8:29:13:9d:05:54: 9e:d8:24:0a:50:91:89:eb:25:23:9f:ec:39:a4:c1: 21:e0:6b:6d:04:c4:b3:39:6f:68:78:ca:09:25:b1: 6d:88:c9:12:b7:81:a4:13:43:e5:aa:76:93:c7:cd: 58:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208897 Signature Algorithm: sha256WithRSAEncryption 5e:a6:e8:58:70:6d:5e:ae:bd:87:ce:73:92:f2:03:74:2a:e8: b0:75:15:65:15:b5:34:18:27:e1:78:cc:5b:90:b8:26:a8:63: ff:b3:1a:dc:9f:71:28:4b:6e:58:a5:cd:f6:bf:e3:6e:8c:45: 4f:ba:d2:45:cd:47:e8:ff:d2:2b:97:dd:6c:07:31:4a:39:7b: bf:77:0f:5c:98:23:13:82:fb:ac:ce:58:9a:a4:dd:98:7c:ce: eb:25:74:17:b6:30:2b:5f:20:3b:5c:99:11:26:66:7c:43:5f: 2f:6d:13:a2:ed:87:7b:b4:a1:82:23:41:45:ee:71:42:aa:ea: b2:a2:53:10:90:b0:ea:be:06:97:30:8f:a0:a3:67:64:f1:04: bb:22:f5:3d:b8:d2:4b:82:f0:de:a3:3c:a7:36:48:2c:99:b4: 60:51:81:71:e0:ee:76:ca:d2:60:be:42:2e:95:df:29:63:ab: 4a:08:47:af:0c:54:4e:b8:d7:6f:3d:d5:85:e8:c5:b0:f8:83: a6:75:49:9a:4e:d2:6f:a5:f0:0a:d4:5a:7a:44:41:62:9e:da: f7:55:28:55:3f:c3:ca:68:d1:1f:62:bc:43:60:e9:98:f2:40: f6:f8:1b:aa:c6:b4:19:b5:f6:f7:ad:93:3b:93:cd:70:6e:d2: 82:79:7e:f6 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8f0LgehSGssvwkoxhaGXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTEwMzg5M2ZjMzFlOWQ5NGQyNjVhYmE5MGNjN2RkNTdiYzIzNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xYwFSKHnKUE9zkiWR8tIPvLWBFQ jBZg9OELahlBL5X8vq6reSppZBgsv0+Vq+WV1j04kxGXlnwCpHuua2DL0pCAS9QJ h9d1hSFAS2xhWo2v9Syab5SntNg10tMWFhkQKjRgcgCIEbfOibW+M2ubJIULQFz6 5hALFq+878PtDUFwx+h+aMuWnTkaBR3IM9lIwagPX5mxHTFvHuYO44tkpUKGwDFl UfOGU+YKf3f73SwUYiQu0Yty6ntsjUDUYPWQBYKd7Ocj9sUvwrrIKROdBVSe2CQK UJGJ6yUjn+w5pMEh4GttBMSzOW9oeMoJJbFtiMkSt4GkE0PlqnaTx81YuwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPkQOJP8MenZTSZaupDMfdV7wjdnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2NkYzk5 NS05YTkxLTRlYzEtYWVkZS1mNmUwZjdkMTc0NDAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1 LTlhOTEtNGVjMS1hZWRlLWY2ZTBmN2QxNzQ0MC8xLzEtUkE0a193eDZkbE5KbHE2 a014OTFYdkNOMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0PhDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMAEwDQYJKoZIhvcNAQELBQADggEBAF6m6FhwbV6uvYfOc5LyA3Qq6LB1FWUV tTQYJ+F4zFuQuCaoY/+zGtyfcShLblilzfa/426MRU+60kXNR+j/0iuX3WwHMUo5 e793D1yYIxOC+6zOWJqk3Zh8zusldBe2MCtfIDtcmREmZnxDXy9tE6Lth3u0oYIj QUXucUKq6rKiUxCQsOq+Bpcwj6CjZ2TxBLsi9T240kuC8N6jPKc2SCyZtGBRgXHg 7nbK0mC+Qi6V3yljq0oIR68MVE6412891YXoxbD4g6Z1SZpO0m+l8ArUWnpEQWKe 2vdVKFU/w8po0R9ivENg6ZjyQPb4G6rGtBm19vetkzuTzXBu0oJ5fvY= -----END CERTIFICATE-----Generated at Mon Jan 12 22:56:46 2026 by rpki-client