This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer File: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer (raw, json) Hash identifier: Vg5FWUqevK7BSVlUZnAhTRoqWcHGekqnHj8SeAsGVHY= Subject key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A327C1F4A747BEC6867B1A6692776D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210953 AS: 212339 IP: 2.56.8.0/23 IP: 5.183.76.0 -- 5.183.78.255 IP: 45.14.112.0/22 IP: 45.95.184.0/22 IP: 147.189.128.0/20 IP: 176.111.216.0/21 IP: 185.127.92.0/22 IP: 185.215.224.0/22 IP: 193.8.172.0/23 IP: 193.8.194.0/23 IP: 2a0b:ae40::/29 IP: 2a0e:c80::/29 IP: 2a0e:3840::/29 IP: 2a0f:9980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:27:c1:f4:a7:47:be:c6:86:7b:1a:66:92:77:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:6f:ef:db:19:0b:b1:df:95:6b:ce:e0:e1: de:23:63:f8:2c:4a:d2:ed:6b:67:ca:6f:f4:1c:06: ba:6d:88:30:17:a5:f6:7f:f3:42:a3:0c:63:5d:4e: 8c:49:c5:bf:d8:e6:37:51:b8:a0:f1:26:74:d0:fe: f9:7a:5e:3d:92:5e:9e:ed:7d:72:ec:80:a4:4c:6d: 88:e5:d3:58:33:2f:92:a7:dc:2e:b9:c9:8f:63:80: 6c:b3:73:91:62:53:c0:b2:eb:fb:c1:18:f4:54:9e: d2:8b:2a:01:07:c9:bb:f1:cb:af:30:22:ab:e4:bb: c9:a2:ef:9c:fc:fb:31:15:fc:4a:15:12:0b:ef:3b: 00:b3:70:36:81:14:8d:bb:fc:4a:56:6f:43:e4:58: d7:76:27:6a:83:2b:fc:1f:2d:38:c5:2e:62:25:20: 72:95:30:94:93:66:7c:8b:d6:e0:32:5c:e5:1c:0d: 16:d9:37:ce:4d:24:34:aa:9b:6e:f0:b0:c3:82:9a: 3c:75:ba:35:94:a1:af:bb:81:88:43:72:f7:bc:26: 34:4d:65:d4:89:37:74:cc:05:7d:31:ef:1a:54:1b: 34:1b:fa:62:76:3f:d1:73:cd:53:d4:63:4d:65:8b: cb:1c:fa:8b:62:cb:1f:ab:1c:db:ee:23:93:92:d4: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.8.0/23 5.183.76.0-5.183.78.255 45.14.112.0/22 45.95.184.0/22 147.189.128.0/20 176.111.216.0/21 185.127.92.0/22 185.215.224.0/22 193.8.172.0/23 193.8.194.0/23 IPv6: 2a0b:ae40::/29 2a0e:c80::/29 2a0e:3840::/29 2a0f:9980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210953 212339 Signature Algorithm: sha256WithRSAEncryption 32:2f:d9:ec:92:25:e8:d6:32:94:12:98:7b:60:31:79:d0:c4: 19:bd:83:c6:98:66:5b:24:12:96:45:7a:12:00:e4:b8:c2:27: 77:04:fd:93:a9:c8:5c:3c:06:e4:8b:aa:a3:8e:41:8f:8a:05: ad:85:62:02:66:d8:95:36:d0:ec:0c:f6:01:a2:1e:17:fb:38: f9:ec:a8:cc:e7:eb:63:0b:0c:bf:01:73:44:81:67:42:80:f6: 65:af:81:7f:51:7e:c3:12:21:80:64:be:ef:19:2f:34:07:3b: 83:19:8f:a1:70:24:96:cb:b8:31:9f:66:4a:81:e8:6e:08:27: c0:74:37:21:43:c4:0b:27:e3:ac:1b:00:8a:4e:be:29:40:0b: 47:7a:d1:67:d5:e5:c6:b0:a1:11:23:62:d6:f0:30:0d:a7:c5: 96:11:f2:67:d6:71:73:74:3c:a4:5c:17:e7:d6:ed:b5:f0:26: 0e:bc:87:5e:2a:3b:c5:17:25:ca:13:fa:e9:ac:ac:23:36:00: 1e:d5:5d:8e:c7:1d:41:af:fd:e3:a6:f9:d2:c2:14:55:ee:c2: 8e:92:79:f1:10:46:91:c8:93:27:d7:21:a0:70:af:73:ce:ab: a5:61:ef:e6:bc:50:a5:c6:2e:00:eb:41:fe:6e:df:0d:2d:ae: e5:6c:1e:9a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt4oyfB9KdHvsaGexpmkndtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTNhYzZjZDIyNDAyNDliYmE2MDE3MWYwODZlOTEwMWNjODdjYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMNv79sZC7HflWvO4OHeI2P4LErS 7Wtnym/0HAa6bYgwF6X2f/NCowxjXU6MScW/2OY3Ubig8SZ00P75el49kl6e7X1y 7ICkTG2I5dNYMy+Sp9wuucmPY4Bss3ORYlPAsuv7wRj0VJ7SiyoBB8m78cuvMCKr 5LvJou+c/PsxFfxKFRIL7zsAs3A2gRSNu/xKVm9D5FjXdidqgyv8Hy04xS5iJSBy lTCUk2Z8i9bgMlzlHA0W2TfOTSQ0qptu8LDDgpo8dbo1lKGvu4GIQ3L3vCY0TWXU iTd0zAV9Me8aVBs0G/pidj/Rc81T1GNNZYvLHPqLYssfqxzb7iOTktS/SQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFPk6xs0iQCSbumAXHwhukQHMh8okMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2IwMzIx My01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1ZmIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEz LTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNm Q0c2UkFjeUh5aVEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBgQYIKwYB BQUHAQcBAf8EcjBwMEoEAgABMEQDBAECOAgwDAMEAgW3TAMEAAW3TgMEAi0OcAME Ai1fuAMEBJO9gAMEA7Bv2AMEArl/XAMEArnX4AMEAcEIrAMEAcEIwjAiBAIAAjAc AwUDKguuQAMFAyoODIADBQMqDjhAAwUDKg+ZgDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMDOAkCAwM9czANBgkqhkiG9w0BAQsFAAOCAQEAMi/Z7JIl6NYylBKYe2Ax edDEGb2DxphmWyQSlkV6EgDkuMIndwT9k6nIXDwG5Iuqo45Bj4oFrYViAmbYlTbQ 7Az2AaIeF/s4+eyozOfrYwsMvwFzRIFnQoD2Za+Bf1F+wxIhgGS+7xkvNAc7gxmP oXAklsu4MZ9mSoHobggnwHQ3IUPECyfjrBsAik6+KUALR3rRZ9XlxrChESNi1vAw DafFlhHyZ9Zxc3Q8pFwX59bttfAmDryHXio7xRclyhP66aysIzYAHtVdjscdQa/9 46b50sIUVe7CjpJ58RBGkciTJ9choHCvc86rpWHv5rxQpcYuAOtB/m7fDS2u5Wwe mg== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:10 2026 by rpki-client