This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer File: 1FRz0ejN9J49mPjXcKrBSNLyiyM.cer (raw, json) Hash identifier: NLXA+nR1Anw1oUbD/pITKOIil6w/PgWBN5UgWGn/6Qw= Subject key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14FECF15045BEFB75A88EDF8C3D834 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48189 IP: 91.209.27.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fe:cf:15:04:5b:ef:b7:5a:88:ed:f8:c3:d8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:ec:91:ca:fe:0f:6a:7d:6b:26:37:38:94: 96:a5:91:42:6e:5d:bd:44:c3:c9:29:40:81:20:b2: 20:a8:fd:5a:92:b2:f0:b1:38:a0:39:e2:ae:27:38: 37:1e:14:bb:f6:1b:19:df:16:73:1a:8b:56:29:f5: 14:6b:91:f0:11:77:2e:d9:53:b7:da:e1:98:7b:a8: 2d:ae:2b:e5:fc:97:41:62:fd:48:2c:e2:24:a1:72: 6b:a0:f9:27:45:fb:31:85:6f:2e:db:11:83:0e:da: b4:7b:83:6c:d3:88:3c:0f:6b:b3:50:1b:9b:ec:cc: d3:b1:29:cf:ca:cc:1b:11:55:97:d2:1d:fd:e8:04: 2b:7e:dc:df:72:64:27:51:ce:9a:ec:66:63:b1:d8: 5a:78:fe:dc:39:d6:57:c5:b3:de:97:fe:59:17:d7: 3e:5f:9f:e2:2d:56:af:03:8c:8a:2a:d5:06:b2:64: 97:82:6c:a3:34:5a:2b:30:90:74:25:de:33:69:68: ca:8c:02:75:45:1c:25:ad:9d:51:66:d8:1e:81:c3: 90:05:63:f9:51:67:34:83:45:fb:9e:8f:fd:f8:39: fc:30:2e:06:26:31:ec:7f:a1:38:19:ae:fa:8a:84: 93:fa:d3:f7:af:7b:da:7a:54:05:a2:c8:46:b4:86: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.27.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48189 Signature Algorithm: sha256WithRSAEncryption 8b:43:30:b1:7f:2a:8f:10:91:f5:ae:2e:6b:30:db:34:4c:c5: 9c:d5:1f:33:2e:f6:a4:83:11:b5:13:a0:e1:22:be:94:55:01: 3a:00:92:ea:8a:1c:c7:d0:39:5f:89:e1:f5:1d:ce:99:3e:3a: 81:e2:e3:ff:68:60:df:6d:3a:94:c4:ba:b9:b5:ea:41:5d:29: 92:8d:38:5c:b6:85:35:26:0e:5b:be:b9:8e:af:ca:93:4d:63: 39:fb:7e:10:78:90:b7:38:06:c5:4f:76:3f:e6:d0:23:d5:74: 98:36:60:1c:91:1b:87:b6:ef:2d:72:ce:69:e4:04:84:8f:15: 71:2e:63:61:71:8c:3a:60:56:c2:c6:c5:b9:fa:5a:68:b9:15: 22:46:4c:04:13:ca:c2:26:2b:8a:7b:bd:ac:7c:de:2a:76:4a: 93:e6:e6:1c:dd:44:04:bd:d9:45:b9:78:50:2d:79:3f:0b:12: c4:8b:3c:e3:8a:8f:a7:2b:28:2f:a5:71:3d:0d:a0:2c:b8:54: 0c:62:5c:e1:fb:8b:cc:1a:aa:6c:c9:8e:13:c8:72:43:ce:9d: b7:2b:42:50:b2:a5:4a:06:46:fd:36:44:5d:67:62:ed:21:18: 98:0e:ad:54:88:a6:b2:5b:14:aa:7f:96:ff:c6:2b:44:50:72: 65:9c:8c:84 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FP7PFQRb77daiO34w9g0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU0NzNkMWU4Y2RmNDllM2Q5OGY4ZDc3MGFhYzE0OGQyZjI4YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzXskcr+D2p9ayY3OJSWpZFCbl29 RMPJKUCBILIgqP1akrLwsTigOeKuJzg3HhS79hsZ3xZzGotWKfUUa5HwEXcu2VO3 2uGYe6gtrivl/JdBYv1ILOIkoXJroPknRfsxhW8u2xGDDtq0e4Ns04g8D2uzUBub 7MzTsSnPyswbEVWX0h396AQrftzfcmQnUc6a7GZjsdhaeP7cOdZXxbPel/5ZF9c+ X5/iLVavA4yKKtUGsmSXgmyjNForMJB0Jd4zaWjKjAJ1RRwlrZ1RZtgegcOQBWP5 UWc0g0X7no/9+Dn8MC4GJjHsf6E4Ga76ioST+tP3r3vaelQFoshGtIZDIQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNRUc9HozfSePZj413CqwUjS8osjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzkxZDZj ZS0xYTZhLTRkMTMtYTJlMi1hN2ViNDZiMzdkNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTFkNmNl LTFhNmEtNGQxMy1hMmUyLWE3ZWI0NmIzN2Q3Mi8xLzFGUnowZWpOOUo0OW1Qalhj S3JCU05MeWl5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9EbMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC8PTANBgkqhkiG9w0BAQsFAAOCAQEAi0MwsX8qjxCR9a4uazDbNEzFnNUfMy72 pIMRtROg4SK+lFUBOgCS6oocx9A5X4nh9R3OmT46geLj/2hg3206lMS6ubXqQV0p ko04XLaFNSYOW765jq/Kk01jOft+EHiQtzgGxU92P+bQI9V0mDZgHJEbh7bvLXLO aeQEhI8VcS5jYXGMOmBWwsbFufpaaLkVIkZMBBPKwiYrinu9rHzeKnZKk+bmHN1E BL3ZRbl4UC15PwsSxIs844qPpysoL6VxPQ2gLLhUDGJc4fuLzBqqbMmOE8hyQ86d tytCULKlSgZG/TZEXWdi7SEYmA6tVIimslsUqn+W/8YrRFByZZyMhA== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:28 2026 by rpki-client