This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.cer (raw, json) Hash identifier: OMj1ojr00/Gdg4PQHcXOmLUgcDFmP/HXAqqKpeza9L4= Subject key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38810126FB5ED3E07F089243EC8A24 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50921 IP: 195.170.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:81:01:26:fb:5e:d3:e0:7f:08:92:43:ec:8a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:a4:91:d5:e8:4e:de:f0:61:91:45:7d:81: 90:ae:b2:c6:8e:b3:40:e5:bf:db:a8:d7:8d:7b:47: 69:b9:1f:1c:f9:33:83:38:22:6c:a0:2b:e8:77:9a: 76:df:e8:bd:59:64:e0:3a:ce:e6:12:2f:2f:6c:bc: 60:13:97:d3:d8:b2:6c:81:5b:25:3e:15:b1:21:35: 8e:0a:aa:e1:eb:73:ed:57:7d:cf:3f:83:ef:f3:dd: 11:ef:48:c4:f8:97:da:b4:a7:c3:35:f4:ae:03:4f: 2f:47:ff:1c:0a:da:0e:9a:65:3e:da:5d:f3:a0:f1: ea:28:7b:97:0c:dd:f6:d6:3c:e7:8c:37:84:8d:a0: 77:79:aa:2e:f9:52:f4:be:7c:d9:aa:37:20:64:54: 94:79:19:1c:8e:68:02:a9:f6:1a:cd:d1:63:6a:ad: 2b:64:80:48:94:97:0a:e4:29:1a:5c:21:ae:61:b3: cf:bc:e3:ce:7e:1b:43:e3:be:56:2c:6d:4a:73:ef: b0:58:b3:23:0f:8e:ec:3c:e9:0c:3c:71:d3:d4:59: 4c:65:30:cf:02:f8:29:e0:d4:52:a8:8e:f7:d5:58: 43:f3:52:ae:ce:19:aa:c6:ef:bb:9b:49:45:7e:c3: cb:dd:3f:34:24:30:d1:b2:81:2c:62:e4:16:40:ef: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.171.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50921 Signature Algorithm: sha256WithRSAEncryption 80:dd:4e:a0:73:f3:e7:37:68:65:cc:20:66:28:62:90:cb:25: 9e:70:50:d6:d9:5c:c8:4f:0c:c3:ba:33:33:75:90:5e:fb:94: 6b:79:3c:e2:03:bd:42:53:f7:aa:ef:bb:ca:b5:11:e7:14:77: 9b:23:19:74:09:5e:f5:5c:7e:8f:ce:8c:20:32:ee:5c:e0:37: 1b:c2:c1:fc:b4:19:40:2d:09:75:9f:8e:4f:cf:1b:60:ba:8c: 8b:88:3e:4f:f7:d1:a2:b1:ab:9e:86:6a:a2:7c:4a:e2:e1:c2: 6f:7c:1b:eb:ec:35:c1:f7:34:11:29:02:7e:e7:d3:62:8f:e7: 38:44:05:c3:cd:37:84:47:65:8b:86:52:fa:8e:ad:09:ac:22: c9:87:08:60:71:ff:be:18:02:3f:6e:ab:c1:23:06:e1:ef:f7: 0b:d2:21:4e:82:7c:dc:b9:73:90:07:ae:a6:96:eb:1d:1a:47: 3a:0f:0b:bf:9c:50:5e:ea:bc:e1:ba:1d:ba:aa:21:5b:5e:c3: 55:0e:3f:79:0e:4d:83:3d:93:c1:ec:41:a5:64:af:90:a1:b9: d9:da:e5:77:df:7b:9e:b4:29:74:c1:37:58:3a:96:6d:21:bb: 34:b5:ad:14:d3:90:93:a9:a6:0a:28:5c:dd:4d:1f:62:df:fd: 5a:bb:4b:bb -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt+OIEBJvte0+B/CJJD7IokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjM2NDZmYmE2OTA0NWVkZTVlZjhlNWMzOWEyZmMxN2Y5ZjBkMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqkkdXoTt7wYZFFfYGQrrLGjrNA 5b/bqNeNe0dpuR8c+TODOCJsoCvod5p23+i9WWTgOs7mEi8vbLxgE5fT2LJsgVsl PhWxITWOCqrh63PtV33PP4Pv890R70jE+JfatKfDNfSuA08vR/8cCtoOmmU+2l3z oPHqKHuXDN321jznjDeEjaB3eaou+VL0vnzZqjcgZFSUeRkcjmgCqfYazdFjaq0r ZIBIlJcK5CkaXCGuYbPPvOPOfhtD475WLG1Kc++wWLMjD47sPOkMPHHT1FlMZTDP Avgp4NRSqI731VhD81Kuzhmqxu+7m0lFfsPL3T80JDDRsoEsYuQWQO/UVQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPs2RvumkEXt5e+OXDmi/Bf58NLcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzcwNmY1 NC04N2E1LTQ1ZTctYmYyMi04YTZiNTQ3NjY2YWEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzA2ZjU0 LTg3YTUtNDVlNy1iZjIyLThhNmI1NDc2NjZhYS8xLzEtelpHLTZhUVJlM2w3NDVj T2FMOEZfbncwdHcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOqqzAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAxukwDQYJKoZIhvcNAQELBQADggEBAIDdTqBz8+c3aGXMIGYoYpDLJZ5wUNbZ XMhPDMO6MzN1kF77lGt5POIDvUJT96rvu8q1EecUd5sjGXQJXvVcfo/OjCAy7lzg NxvCwfy0GUAtCXWfjk/PG2C6jIuIPk/30aKxq56GaqJ8SuLhwm98G+vsNcH3NBEp An7n02KP5zhEBcPNN4RHZYuGUvqOrQmsIsmHCGBx/74YAj9uq8EjBuHv9wvSIU6C fNy5c5AHrqaW6x0aRzoPC7+cUF7qvOG6HbqqIVtew1UOP3kOTYM9k8HsQaVkr5Ch udna5Xffe560KXTBN1g6lm0huzS1rRTTkJOppgooXN1NH2Lf/Vq7S7s= -----END CERTIFICATE-----Generated at Mon Jan 12 06:56:39 2026 by rpki-client