This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer (raw, json) Hash identifier: iUxTfNmPWTWiwqjV5u2fhDKUTbR+MyRY5WmbvjcWWK8= Subject key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D7A8482AF047752A04FCC950F5D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31350 IP: 193.151.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d7:a8:48:2a:f0:47:75:2a:04:fc:c9:50:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:18:cf:87:f2:93:7e:a6:29:de:e5:a6:6a: 24:76:fc:21:3d:e5:08:4c:23:aa:66:12:96:a9:56: 83:36:13:23:2e:aa:a4:f6:64:dc:a2:ea:2f:3c:14: 3f:ee:84:67:8c:cd:c0:7d:45:e3:c7:20:ef:5d:2a: de:a5:64:bf:20:6e:39:8e:31:5f:67:2b:8a:fd:55: f9:e2:56:79:64:a9:db:e8:c9:11:10:3d:24:f3:8b: 09:73:54:e2:24:25:58:49:86:b1:d3:30:0c:06:e4: 40:c6:3b:82:ae:64:e7:d9:01:30:cf:d9:52:66:b3: 48:c1:47:e4:78:0f:d4:95:26:8d:82:54:98:64:30: 0e:36:29:61:52:1a:6a:77:94:12:5e:89:ac:20:5b: 81:1b:41:54:5c:d4:70:67:8e:4e:74:9b:36:9d:7e: 96:50:0d:fe:7c:aa:92:84:f8:2e:b3:bc:c5:23:93: 67:1c:a8:7a:ca:3e:ef:85:fe:86:b0:80:a6:fe:ab: 98:82:5a:27:5c:d0:23:6e:8b:c2:43:b1:65:e7:61: d0:e1:c5:ea:85:4f:37:79:f7:bf:63:1d:83:ca:87: cb:66:3d:a5:7a:95:d2:30:77:39:fd:94:69:36:57: 76:1a:66:5b:90:0d:f3:c7:6d:1c:70:9f:d5:2c:9c: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31350 Signature Algorithm: sha256WithRSAEncryption 68:90:1d:6e:4c:99:3a:50:49:ac:89:0d:3d:c7:3e:f0:ee:f6: b2:d4:b1:3f:9d:8c:c8:66:f1:67:58:5c:5e:74:06:ef:ef:5b: 53:e7:fb:95:cd:fc:45:57:fe:02:ac:6b:4d:eb:fe:0a:e7:24: e7:4b:47:85:cc:64:ee:ea:09:9f:1e:9b:20:3c:94:a4:ab:6f: e6:5a:2b:64:7b:45:96:f7:04:5b:a3:fe:e2:84:6d:90:66:89: 97:2c:5e:73:d7:f6:d2:05:3b:33:17:a4:40:b4:21:a0:07:67: 86:48:f7:9a:90:2a:4f:56:9c:9f:01:d4:3b:98:df:86:13:19: ed:50:1e:6c:c7:d2:b4:88:3f:53:bc:3c:24:5e:2e:64:89:70: 11:21:60:84:34:8e:9f:8b:6e:48:6d:7a:76:94:e1:7f:71:7f: f8:b6:2a:7f:6d:2c:51:9a:44:3d:fe:05:65:39:fd:68:0a:94: 92:65:4f:af:e6:e2:23:09:21:3c:66:f2:2b:c8:7b:24:54:ac: 27:c1:9d:75:e3:bf:40:91:e5:dd:f6:63:87:1a:fb:8b:7f:0d: d2:8c:16:e6:0e:af:46:fd:46:7d:0a:34:15:45:0e:ee:5b:a4: 57:33:51:e8:b7:17:d6:99:6b:97:83:2f:95:09:f6:69:0f:da: f7:98:c6:20 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NdeoSCrwR3UqBPzJUPXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTA4OTZjZjE4MjNjNzRiZmNiN2Q2MjNlMmM0Mzg3ODdiOWYxNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoYYz4fyk36mKd7lpmokdvwhPeUI TCOqZhKWqVaDNhMjLqqk9mTcouovPBQ/7oRnjM3AfUXjxyDvXSrepWS/IG45jjFf ZyuK/VX54lZ5ZKnb6MkRED0k84sJc1TiJCVYSYax0zAMBuRAxjuCrmTn2QEwz9lS ZrNIwUfkeA/UlSaNglSYZDAONilhUhpqd5QSXomsIFuBG0FUXNRwZ45OdJs2nX6W UA3+fKqShPgus7zFI5NnHKh6yj7vhf6GsICm/quYglonXNAjbovCQ7Fl52HQ4cXq hU83efe/Yx2DyofLZj2lepXSMHc5/ZRpNld2GmZbkA3zx20ccJ/VLJw5QwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPoIls8YI8dL/LfWI+LEOHh7nxZ7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2EyNzYy MC1kMzJkLTRlOTgtYWVjNC1iZjZhOTdhNTZmMTAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYTI3NjIw LWQzMmQtNGU5OC1hZWM0LWJmNmE5N2E1NmYxMC8xLzEtZ2lXenhnangwdjh0OVlq NHNRNGVIdWZGbnMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsGXODAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJ6djANBgkqhkiG9w0BAQsFAAOCAQEAaJAdbkyZOlBJrIkNPcc+8O72stSxP52M yGbxZ1hcXnQG7+9bU+f7lc38RVf+AqxrTev+Cuck50tHhcxk7uoJnx6bIDyUpKtv 5lorZHtFlvcEW6P+4oRtkGaJlyxec9f20gU7MxekQLQhoAdnhkj3mpAqT1acnwHU O5jfhhMZ7VAebMfStIg/U7w8JF4uZIlwESFghDSOn4tuSG16dpThf3F/+LYqf20s UZpEPf4FZTn9aAqUkmVPr+biIwkhPGbyK8h7JFSsJ8GddeO/QJHl3fZjhxr7i38N 0owW5g6vRv1GfQo0FUUO7lukVzNR6LcX1plrl4MvlQn2aQ/a95jGIA== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:34 2026 by rpki-client