This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.cer (raw, json) Hash identifier: zYtnV3nHy5Wa5kUuGKxqKI+D99cTzjt5Glulfjx8F6E= Subject key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775931E6FA17DF92CC2E82C25AF4931B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57521 IP: 45.10.39.0/24 IP: 2a13:bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:31:e6:fa:17:df:92:cc:2e:82:c2:5a:f4:93:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7eb1115130fac94091061e31462a565226885a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:b6:4c:92:b6:7f:85:72:e1:cf:08:b8:e0: 2e:53:97:59:83:d9:3a:d1:d1:ef:d6:88:4a:19:ca: 27:19:15:1e:b4:f5:ca:1c:ed:ee:79:d0:42:c1:cd: c1:5f:e6:da:7c:b8:f5:96:31:61:ed:4e:6e:6f:b9: 21:b7:4a:9a:09:c2:cc:6a:ac:61:4b:b0:ae:61:16: d1:b0:76:49:b8:90:ec:0b:ee:6f:14:01:83:0a:c0: 4b:3d:a8:32:a5:f5:4a:4b:ff:e5:70:57:cb:4c:39: d9:37:ea:0b:70:00:cc:ec:89:3b:dd:68:b5:11:b9: b7:d3:0d:b5:3d:6c:7e:f4:f3:79:4b:70:48:3f:79: b9:e9:dd:75:b6:a7:d0:0c:84:fc:9a:3f:eb:cc:f6: 95:9b:db:84:09:81:b0:2e:ab:d0:d3:d5:a5:87:b8: 8e:5e:35:07:a3:18:3f:db:47:44:f4:dd:f0:0e:8a: dc:1a:c3:8b:bb:62:56:1c:7e:f8:7e:36:7d:05:50: b9:2f:39:18:bf:4c:09:c8:a5:c5:5a:cd:76:56:2a: 61:9a:79:fc:98:66:93:6e:07:7a:85:9d:64:35:98: 97:93:8b:9c:f4:4d:83:92:66:97:e1:dd:b2:ac:d2: ac:40:d4:ff:58:fc:3d:ee:05:25:44:65:23:a5:92: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.39.0/24 IPv6: 2a13:bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57521 Signature Algorithm: sha256WithRSAEncryption 46:0c:20:65:48:9f:86:e5:80:fb:de:d1:57:21:a5:fe:2f:6b: c0:70:d8:c1:57:7b:b0:a3:45:7a:71:73:68:df:0b:2e:3c:2d: 4d:b4:b5:cc:4b:54:2e:98:53:2f:d6:78:73:e0:55:76:9d:c9: a4:9d:00:4b:c6:68:92:58:33:99:8b:b6:8a:95:5a:64:38:b6: a7:4d:50:d6:a6:ea:ac:87:b1:6a:18:bb:f8:f9:0b:64:57:b8: df:5b:d6:cc:ff:6f:b0:f5:27:02:c7:a0:a5:52:ab:b9:4e:41: bd:be:50:68:e4:e6:10:76:0f:fb:87:4e:df:23:5f:79:ae:f5: 8a:b8:5e:22:e3:b7:c7:3c:74:c1:46:2d:a2:3a:eb:44:01:dd: 87:cd:60:e7:db:e5:86:71:d6:74:98:f9:1c:75:50:78:83:d5: c1:4b:41:92:ba:6f:b4:8e:1f:f2:19:b2:fa:57:6d:4f:f5:c1: 94:c6:24:d1:ec:8d:26:f4:43:f1:3a:eb:c4:5d:34:18:e4:c1: 78:81:44:e7:a7:13:aa:b5:fb:8e:da:fb:8c:00:7f:62:83:32: e7:25:9c:73:12:3c:88:7d:e8:43:76:47:4c:42:29:2f:05:ef: c5:ac:c6:27:89:9f:f5:83:66:21:ed:30:8f:bf:62:be:a8:af: 2d:ad:5a:e6 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt3WTHm+hffkswugsJa9JMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdlYjExMTUxMzBmYWM5NDA5MTA2MWUzMTQ2MmE1NjUyMjY4ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCu2TJK2f4Vy4c8IuOAuU5dZg9k6 0dHv1ohKGconGRUetPXKHO3uedBCwc3BX+bafLj1ljFh7U5ub7kht0qaCcLMaqxh S7CuYRbRsHZJuJDsC+5vFAGDCsBLPagypfVKS//lcFfLTDnZN+oLcADM7Ik73Wi1 Ebm30w21PWx+9PN5S3BIP3m56d11tqfQDIT8mj/rzPaVm9uECYGwLqvQ09Wlh7iO XjUHoxg/20dE9N3wDorcGsOLu2JWHH74fjZ9BVC5LzkYv0wJyKXFWs12Viphmnn8 mGaTbgd6hZ1kNZiXk4uc9E2DkmaX4d2yrNKsQNT/WPw97gUlRGUjpZJMZwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPp+sRFRMPrJQJEGHjFGKlZSJohaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2MxNWU5 OS0yOTY1LTQ3NmYtOWFlZi04YTI3M2Y0YWQxNWQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYzE1ZTk5 LTI5NjUtNDc2Zi05YWVmLThhMjczZjRhZDE1ZC8xLzEtbjZ4RVZFdy1zbEFrUVll TVVZcVZsSW1pRm8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAC0KJzANBAIAAjAHAwUDKhMLwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA4LEwDQYJKoZIhvcNAQELBQADggEBAEYMIGVIn4bl gPve0Vchpf4va8Bw2MFXe7CjRXpxc2jfCy48LU20tcxLVC6YUy/WeHPgVXadyaSd AEvGaJJYM5mLtoqVWmQ4tqdNUNam6qyHsWoYu/j5C2RXuN9b1sz/b7D1JwLHoKVS q7lOQb2+UGjk5hB2D/uHTt8jX3mu9Yq4XiLjt8c8dMFGLaI660QB3YfNYOfb5YZx 1nSY+Rx1UHiD1cFLQZK6b7SOH/IZsvpXbU/1wZTGJNHsjSb0Q/E668RdNBjkwXiB ROenE6q1+47a+4wAf2KDMuclnHMSPIh96EN2R0xCKS8F78WsxieJn/WDZiHtMI+/ Yr6ory2tWuY= -----END CERTIFICATE-----Generated at Thu Jan 1 03:50:42 2026 by rpki-client