This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer File: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer (raw, json) Hash identifier: uM0NZnGP0qA9bU63jgh2gMgCCb6ne5DXyES63QboMo4= Subject key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153B19CEDCD91ABE7F18B7D6971126 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216318 IP: 185.167.79.0/24 IP: 2a13:180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:19:ce:dc:d9:1a:be:7f:18:b7:d6:97:11:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:d6:6b:9b:64:1f:d8:cd:d7:d3:37:67:d9: 6b:40:79:bb:5f:25:59:61:d2:30:23:96:d0:22:78: 49:e4:d0:e3:7a:af:51:99:7d:12:e9:40:e2:ac:39: 27:9f:8f:14:6a:a5:17:88:55:6a:e8:ac:e7:0f:ca: 1b:99:36:fe:27:fd:30:de:78:bf:05:81:76:e1:86: 9e:c4:4d:db:51:ca:c7:6e:b3:bf:4c:18:9b:fc:2e: e5:4b:52:ab:51:6d:8e:99:3c:17:cb:d2:5a:ca:97: 66:9a:fd:15:7e:2d:ec:01:79:19:f4:66:12:44:b1: 0f:87:bd:b7:30:cc:5d:21:5a:a6:cd:22:97:0f:0e: 62:7f:1e:8f:38:e7:94:e6:2f:e7:b2:01:85:c4:08: 7f:35:1f:d6:f5:06:9b:ec:1b:2d:f8:7b:44:65:7b: 6c:0e:32:f2:3d:b8:b6:0e:62:90:b3:b7:39:9f:27: 34:8e:87:af:5d:ee:14:33:0d:2f:29:3a:4b:e7:5c: 1b:47:c6:5b:75:79:1f:47:ae:c5:48:ef:d7:7c:58: f7:a7:96:38:a7:b3:8f:25:a9:19:b3:47:cd:b0:04: 5a:39:56:f2:30:eb:dd:b8:0c:cb:e9:68:06:d4:a9: 8e:2c:c1:28:7a:2c:f0:7b:f2:93:bb:7b:7e:d4:0a: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.79.0/24 IPv6: 2a13:180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216318 Signature Algorithm: sha256WithRSAEncryption 23:54:aa:59:8f:45:3f:57:ed:5f:62:8b:15:9c:c6:25:bb:5a: d9:3a:b2:f0:df:f2:86:22:c7:ba:08:f0:f0:b2:e8:cb:0e:82: a1:61:1d:de:cf:bc:a8:46:5d:88:e8:10:7c:68:e5:9d:23:33: 11:0a:bc:d8:53:b6:79:5f:5f:18:2a:1e:00:69:c8:c6:fc:17: e3:58:7a:0a:63:9f:0b:8f:16:1f:87:78:00:26:77:41:cb:e2: 5d:63:1f:a3:61:8b:f4:b7:ff:ca:f5:fb:8c:a9:98:ca:d5:e9: 36:69:83:5b:21:f7:d1:34:18:67:6d:14:11:1e:00:42:2a:22: da:01:c0:ee:ee:bd:f0:96:f1:05:ef:cf:bb:48:83:54:e9:53: fc:07:47:fb:b9:38:c8:a2:66:0e:27:81:44:79:85:96:9d:a6: db:24:e5:f9:9d:de:54:43:0e:64:0a:6e:75:21:8e:45:84:2b: 8d:3e:b5:89:68:f2:77:53:de:ee:bb:67:4f:77:02:71:09:38: d5:9a:4d:48:7e:55:66:c2:b8:b6:d7:f5:22:82:3f:12:30:83: 14:a0:c0:47:7c:a6:83:c5:86:e9:e4:64:e5:9f:42:d2:b0:67: 46:f7:3e:a3:16:58:ee:1b:f7:e1:84:d9:57:d1:a7:66:a8:8b: b0:bf:38:93 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt/FTsZztzZGr5/GLfWlxEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTc1OGZiZDYyYzZlYWJhYTNjOTg3NTMwNWYyMDc4MDVlMzdjZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyHWa5tkH9jN19M3Z9lrQHm7XyVZ YdIwI5bQInhJ5NDjeq9RmX0S6UDirDknn48UaqUXiFVq6KznD8obmTb+J/0w3ni/ BYF24YaexE3bUcrHbrO/TBib/C7lS1KrUW2OmTwXy9Jaypdmmv0Vfi3sAXkZ9GYS RLEPh723MMxdIVqmzSKXDw5ifx6POOeU5i/nsgGFxAh/NR/W9Qab7Bst+HtEZXts DjLyPbi2DmKQs7c5nyc0joevXe4UMw0vKTpL51wbR8ZbdXkfR67FSO/XfFj3p5Y4 p7OPJakZs0fNsARaOVbyMOvduAzL6WgG1KmOLMEoeizwe/KTu3t+1ApRcwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPp1j71ixuq6o8mHUwXyB4BeN83LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzQ2YTRj Zi1iZTZmLTQwNzctOGQ0Yy1iY2E0Y2I1MWE3MzkvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNDZhNGNm LWJlNmYtNDA3Ny04ZDRjLWJjYTRjYjUxYTczOS8xLzEtbldQdldMRzZycWp5WWRU QmZJSGdGNDN6Y3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEALmnTzANBAIAAjAHAwUDKhMBgDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDTP4wDQYJKoZIhvcNAQELBQADggEBACNUqlmPRT9X 7V9iixWcxiW7Wtk6svDf8oYix7oI8PCy6MsOgqFhHd7PvKhGXYjoEHxo5Z0jMxEK vNhTtnlfXxgqHgBpyMb8F+NYegpjnwuPFh+HeAAmd0HL4l1jH6Nhi/S3/8r1+4yp mMrV6TZpg1sh99E0GGdtFBEeAEIqItoBwO7uvfCW8QXvz7tIg1TpU/wHR/u5OMii Zg4ngUR5hZadptsk5fmd3lRDDmQKbnUhjkWEK40+tYlo8ndT3u67Z093AnEJONWa TUh+VWbCuLbX9SKCPxIwgxSgwEd8poPFhunkZOWfQtKwZ0b3PqMWWO4b9+GE2VfR p2aoi7C/OJM= -----END CERTIFICATE-----Generated at Mon Jan 12 14:58:03 2026 by rpki-client