This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer (raw, json) Hash identifier: b3J9VMv6w4fcKFByw/ZHud8DhrII5l7+SDyFRbL6FWQ= Subject key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4FF42DA21AD3E32F1D6E14981F9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57122 IP: 91.230.231.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:f4:2d:a2:1a:d3:e3:2f:1d:6e:14:98:1f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:91:e3:09:5a:1b:5c:9d:3e:d1:e1:13:16: 06:3e:8b:6f:9a:b5:ef:bb:30:cb:59:4e:7a:4d:ff: ee:28:b8:08:18:83:c0:97:aa:99:68:ab:31:1a:b8: 78:d2:7a:78:61:9a:d0:ec:b6:64:df:68:e4:20:e1: d8:39:9e:c9:34:6d:28:f5:88:75:dd:20:23:ff:f5: 7d:65:9c:a7:3c:e8:5d:e6:d6:b6:e4:87:f5:57:38: 7e:31:a5:71:e3:2b:bd:6b:6a:31:ed:66:26:7e:cc: 85:db:43:61:b6:c2:e1:6e:f5:fb:8f:04:40:c1:49: 95:cf:6d:93:aa:4b:03:71:26:7c:fa:c9:d6:35:96: 59:92:35:87:aa:06:68:eb:f9:a3:6e:af:64:3b:98: 83:81:a3:68:94:5f:d6:58:bf:5d:9b:5a:cc:25:26: 9f:1c:84:0f:d4:8a:0d:cc:8c:73:88:c5:83:0c:4c: 3e:f1:fb:a5:c7:22:c1:c4:fe:47:aa:4f:70:25:02: d3:2d:95:1f:af:97:86:5d:cf:b6:b9:ad:15:5c:17: d5:be:af:e5:43:5b:4f:bf:94:f8:f2:a3:56:9d:23: c8:93:2e:15:1d:c2:12:be:95:4b:38:70:85:fc:2f: b4:c7:17:2b:ac:b3:ef:f9:a4:eb:d1:ab:22:45:3a: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.231.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57122 Signature Algorithm: sha256WithRSAEncryption 53:0d:21:2c:05:36:6d:42:25:2a:24:a2:82:16:c3:ac:93:f5: 00:7c:01:df:7d:2f:07:7b:5c:4b:cc:64:e8:00:7c:c3:95:54: 02:97:97:a7:b0:cc:ec:6a:cc:eb:5f:d0:b3:d6:a5:b1:73:09: d5:a1:06:2b:ea:3d:b3:de:83:b3:e3:05:d1:e4:0c:dd:13:82: 3c:a3:fb:cb:d5:a1:e6:5b:91:fd:22:3a:f0:2e:84:23:ac:79: 1f:a4:76:8f:3c:ed:9a:52:8b:28:e3:fd:fc:9d:9a:0e:2b:f1: 1b:4a:93:3e:bc:d1:85:f8:20:73:e7:e7:e3:c6:c7:c4:64:9f: 6a:1a:83:81:cc:a4:4d:88:5c:e1:cd:34:ce:6b:4e:ff:e1:4e: 04:81:32:78:ad:cd:a3:d9:45:cf:25:13:c4:e3:0e:e0:c7:c3: 0d:3d:38:15:01:d7:20:ba:3b:11:fa:05:9e:96:fb:e0:bd:5b: 55:21:b8:0d:35:05:7f:65:74:ce:37:41:f4:c8:b2:41:74:be: d0:89:8a:2f:35:d6:88:df:4a:81:36:c1:22:1f:0d:13:5f:67: 00:2f:45:b5:eb:cc:d9:c1:6e:46:d4:b0:58:79:29:70:5d:01: 1b:8d:9b:a4:d3:03:4b:05:cf:8d:d0:88:f3:d5:7b:9d:ab:10: e9:f7:ce:84 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt57U/0LaIa0+MvHW4UmB+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTYwYzdhYjNjNGJjYzNmY2E4M2U0OTMzMTY3N2I0NGJiN2E5NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLaR4wlaG1ydPtHhExYGPotvmrXv uzDLWU56Tf/uKLgIGIPAl6qZaKsxGrh40np4YZrQ7LZk32jkIOHYOZ7JNG0o9Yh1 3SAj//V9ZZynPOhd5ta25If1Vzh+MaVx4yu9a2ox7WYmfsyF20NhtsLhbvX7jwRA wUmVz22TqksDcSZ8+snWNZZZkjWHqgZo6/mjbq9kO5iDgaNolF/WWL9dm1rMJSaf HIQP1IoNzIxziMWDDEw+8fulxyLBxP5Hqk9wJQLTLZUfr5eGXc+2ua0VXBfVvq/l Q1tPv5T48qNWnSPIky4VHcISvpVLOHCF/C+0xxcrrLPv+aTr0asiRTqmewIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPlgx6s8S8w/yoPkkzFne0S7epRvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2VlNDdk ZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUwZmQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2Rl LTMzNWEtNDk5OS1iNjEzLTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNU TVdkN1JMdDZsRzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvm5zAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMA3yIwDQYJKoZIhvcNAQELBQADggEBAFMNISwFNm1CJSokooIWw6yT9QB8Ad99 Lwd7XEvMZOgAfMOVVAKXl6ewzOxqzOtf0LPWpbFzCdWhBivqPbPeg7PjBdHkDN0T gjyj+8vVoeZbkf0iOvAuhCOseR+kdo887ZpSiyjj/fydmg4r8RtKkz680YX4IHPn 5+PGx8Rkn2oag4HMpE2IXOHNNM5rTv/hTgSBMnitzaPZRc8lE8TjDuDHww09OBUB 1yC6OxH6BZ6W++C9W1UhuA01BX9ldM43QfTIskF0vtCJii811ojfSoE2wSIfDRNf ZwAvRbXrzNnBbkbUsFh5KXBdARuNm6TTA0sFz43QiPPVe52rEOn3zoQ= -----END CERTIFICATE-----Generated at Mon Jan 12 03:14:09 2026 by rpki-client