This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer File: 1-xoI20YpW03oryufkNb_x2zKMZo.cer (raw, json) Hash identifier: 3Xmcyxjmt3BRugkLL6KCI8UOO7sdTlOvR+5W4DDpC1I= Subject key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911475119CDB9DB10076D76133B4780 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42096 IP: 91.194.128.0/23 IP: 194.62.234.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:47:51:19:cd:b9:db:10:07:6d:76:13:3b:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:75:f0:3a:d8:19:86:e1:94:97:ef:4a:9e: 94:35:ff:68:ae:5d:1b:90:03:2a:94:68:a1:08:4b: e6:72:43:42:a6:10:3c:60:d7:53:58:7c:b5:7d:a8: 7c:12:84:bd:b2:47:3d:91:5a:22:6a:b5:d8:13:6e: 73:f8:df:d8:14:12:70:88:18:23:c9:06:32:8f:e4: 07:60:84:8a:d1:76:79:ab:1c:c9:2d:8e:e3:56:c6: 25:27:ee:8e:f5:ff:02:a6:df:3f:99:0a:7f:33:02: 93:b4:03:dd:7e:1b:84:6e:95:df:79:d3:8f:ab:cc: f9:0d:cc:ee:98:48:09:97:78:84:43:01:12:45:ef: ad:a1:10:6f:6a:ea:df:63:36:3a:3a:fb:ad:59:19: 5c:2e:c2:57:4c:ce:58:58:99:42:1f:77:ee:0e:b0: b5:b3:6b:e4:01:75:cd:ec:be:d1:79:ab:0c:6c:0a: fd:49:42:33:80:7d:58:26:d5:ba:00:e8:25:b4:9d: f4:66:ab:fd:4c:39:24:04:82:32:8d:26:f8:95:45: e1:c4:f7:4a:8b:29:2b:a8:55:24:a0:3d:9a:12:b3: ba:32:a0:49:08:cb:d2:89:83:b8:b5:23:2e:98:f9: 9f:3c:41:f2:8f:1c:24:2b:58:b7:e2:47:16:76:bf: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.128.0/23 194.62.234.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42096 Signature Algorithm: sha256WithRSAEncryption a1:63:61:d9:a5:2f:9f:0e:cf:ea:67:9b:82:ab:26:d9:74:4c: b1:03:bf:99:99:ef:42:7b:3e:7e:69:68:85:b5:f8:9a:32:e5: a6:2b:3e:9f:2a:17:c3:4d:37:b3:91:76:a8:b3:27:1a:1b:d8: 86:80:77:6a:7c:fa:b1:1d:cf:99:3e:ff:68:29:92:a1:2a:60: 57:68:25:6b:da:ed:0c:4a:ad:fb:44:02:aa:7a:98:c4:db:8f: 8f:6d:ee:ee:eb:de:3d:0a:79:86:bf:f4:b0:b0:75:4c:01:9e: 9a:c3:76:4d:46:82:c5:b2:d9:20:d4:2d:28:4c:cb:b1:d2:9b: f4:d9:f3:b4:21:d1:61:05:cf:5a:24:c3:38:78:cd:4a:01:d8: ec:be:c6:89:67:01:e7:1f:d0:7f:9e:b9:50:64:92:dc:11:aa: 55:8b:7b:98:5e:96:45:0b:78:d0:25:51:8a:74:93:40:52:5f: 60:4b:b3:2d:78:98:f5:ae:8a:47:f2:da:5a:46:a4:ef:be:a6: 18:cb:2e:5b:28:2d:ac:13:9b:02:e4:d8:e2:6b:e8:94:33:aa: c8:d4:b9:b8:d6:fe:6c:43:cd:8a:f8:f8:95:05:dc:89:f7:a3: 97:b3:b0:1d:7a:0d:43:96:3c:e8:d7:33:16:b0:5d:fc:bf:3a: 93:99:bd:cc -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt5EUdRGc252xAHbXYTO0eAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjFhMDhkYjQ2Mjk1YjRkZThhZjJiOWY5MGQ2ZmZjNzZjY2EzMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob518DrYGYbhlJfvSp6UNf9orl0b kAMqlGihCEvmckNCphA8YNdTWHy1fah8EoS9skc9kVoiarXYE25z+N/YFBJwiBgj yQYyj+QHYISK0XZ5qxzJLY7jVsYlJ+6O9f8Cpt8/mQp/MwKTtAPdfhuEbpXfedOP q8z5DczumEgJl3iEQwESRe+toRBvaurfYzY6OvutWRlcLsJXTM5YWJlCH3fuDrC1 s2vkAXXN7L7ReasMbAr9SUIzgH1YJtW6AOgltJ30Zqv9TDkkBIIyjSb4lUXhxPdK iykrqFUkoD2aErO6MqBJCMvSiYO4tSMumPmfPEHyjxwkK1i34kcWdr9lVwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPsaCNtGKVtN6K8rn5DW/8dsyjGaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2I4ZGNm MS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIzZTMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2Yx LWJjOTMtNDU2ZC1hZDE2LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVm a05iX3gyektNWm8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAVvCgAMEAMI+6jAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMApHAwDQYJKoZIhvcNAQELBQADggEBAKFjYdmlL58Oz+pnm4KrJtl0 TLEDv5mZ70J7Pn5paIW1+Joy5aYrPp8qF8NNN7ORdqizJxob2IaAd2p8+rEdz5k+ /2gpkqEqYFdoJWva7QxKrftEAqp6mMTbj49t7u7r3j0KeYa/9LCwdUwBnprDdk1G gsWy2SDULShMy7HSm/TZ87Qh0WEFz1okwzh4zUoB2Oy+xolnAecf0H+euVBkktwR qlWLe5helkULeNAlUYp0k0BSX2BLsy14mPWuikfy2lpGpO++phjLLlsoLawTmwLk 2OJr6JQzqsjUubjW/mxDzYr4+JUF3In3o5ezsB16DUOWPOjXMxawXfy/OpOZvcw= -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:51 2026 by rpki-client