This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer (raw, json) Hash identifier: O7uGndSwM++S1OrXK2niRl9AKpWBAoQGErm/+t74IdU= Subject key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2C08B1B72433CBC46B59275B50CF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41346 IP: 195.114.28.0/23 IP: 2a04:28a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c0:8b:1b:72:43:3c:bc:46:b5:92:75:b5:0c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:64:45:11:66:61:49:52:9e:a2:75:46:b8: 66:10:2e:bc:0b:5c:37:56:f7:b4:9c:0c:4e:4d:5c: 9a:c5:c2:45:ff:15:b3:d0:d0:f1:53:f4:1e:30:59: e3:ef:0b:58:54:60:84:28:59:48:71:e8:5e:84:d4: 39:fa:18:aa:6c:6f:c3:1d:4f:4a:e0:18:44:ab:cc: 74:4a:fd:79:bb:1d:ae:66:dd:5b:bc:0b:ce:7f:55: 57:7a:77:b4:ba:70:de:fe:f9:2f:2c:7c:a9:b7:ba: 77:88:64:37:b0:a2:f9:2a:2a:d8:14:c3:5f:fc:af: 7f:86:6c:40:44:ed:b0:f6:de:6a:64:30:95:c1:58: 10:fe:8b:f7:b1:46:96:41:19:ff:8a:40:ae:fd:6b: 8d:6b:c3:41:32:6b:c4:ac:d6:68:a4:2c:eb:a1:10: d4:ad:ed:20:ca:82:26:ab:2c:c5:81:2e:62:0b:22: 6b:69:bd:ae:83:a3:ed:c7:b8:7e:bb:e0:fb:bc:f8: 40:08:9a:de:d6:cf:b3:c4:c2:fd:55:0d:59:52:bf: 7c:34:0f:4c:bd:c7:55:72:92:50:e9:a7:06:81:3a: 58:85:1c:60:11:91:20:57:5c:a5:2d:c8:29:e8:0e: 1d:47:35:92:f7:0b:0d:01:4f:0b:72:f8:a2:07:22: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.28.0/23 IPv6: 2a04:28a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41346 Signature Algorithm: sha256WithRSAEncryption 6f:6a:05:5b:b3:e4:19:e3:6d:e9:28:83:7c:e3:d3:03:7e:cb: 4e:68:ef:93:06:42:59:18:a9:1a:06:6e:cc:c8:08:0f:aa:d1: 13:7a:1d:c9:70:9f:41:ea:eb:34:0a:7c:3e:2f:2b:b7:26:08: ef:9e:8f:da:2c:c4:9c:72:39:49:c8:c5:cc:c3:23:e0:72:63: 3a:25:1a:65:63:67:4f:8a:3b:dd:df:da:7c:9f:2f:c6:f8:a2: 96:72:91:a5:62:72:26:de:4c:fe:3c:e5:fb:02:fb:36:37:27: 89:43:2e:40:a5:41:b1:4f:7e:6c:a7:3a:2d:35:02:70:e4:de: 80:82:34:67:7e:67:d0:c6:ec:b7:ef:86:41:ef:a9:f3:46:61: a2:b8:6d:47:2f:69:8c:89:5d:9b:54:90:90:fd:8b:f3:e2:7f: d0:57:0c:4e:03:24:c5:44:f2:09:2f:b0:8c:1a:90:bb:f7:ee: a0:62:c5:06:52:09:67:b0:09:e2:77:a7:27:bd:fa:20:11:15: 9a:87:c0:a1:47:0e:e8:9c:bb:78:74:a2:a8:c6:c8:6f:1f:5b: c1:c8:1e:35:c1:ab:73:81:31:66:b8:9a:82:3d:f1:3b:66:6d: 85:26:9a:b0:72:18:1f:f9:d5:41:a1:12:49:e0:41:7a:f8:48: a5:af:26:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4osCLG3JDPLxGtZJ1tQzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGM3YzRlYWI1YzA3OTQ4Y2JmNDRhOGEwMWM2YTgyN2ZkYWU5MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrVkRRFmYUlSnqJ1RrhmEC68C1w3 Vve0nAxOTVyaxcJF/xWz0NDxU/QeMFnj7wtYVGCEKFlIcehehNQ5+hiqbG/DHU9K 4BhEq8x0Sv15ux2uZt1bvAvOf1VXene0unDe/vkvLHypt7p3iGQ3sKL5KirYFMNf /K9/hmxARO2w9t5qZDCVwVgQ/ov3sUaWQRn/ikCu/WuNa8NBMmvErNZopCzroRDU re0gyoImqyzFgS5iCyJrab2ug6Ptx7h+u+D7vPhACJre1s+zxML9VQ1ZUr98NA9M vcdVcpJQ6acGgTpYhRxgEZEgV1ylLcgp6A4dRzWS9wsNAU8LcviiByJIvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNTHxOq1wHlIy/RKigHGqCf9rpNBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzU4NjNl YS00MTlhLTRjMjktOGUzZS04ZDUyNWE1NjNlNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNTg2M2Vh LTQxOWEtNGMyOS04ZTNlLThkNTI1YTU2M2U2MS8xLzFNZkU2clhBZVVqTDlFcUtB Y2FvSl8ydWswRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBw3IcMA0EAgACMAcDBQAqBCigMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwChgjANBgkqhkiG9w0BAQsFAAOCAQEAb2oFW7PkGeNt 6SiDfOPTA37LTmjvkwZCWRipGgZuzMgID6rRE3odyXCfQerrNAp8Pi8rtyYI756P 2izEnHI5ScjFzMMj4HJjOiUaZWNnT4o73d/afJ8vxviilnKRpWJyJt5M/jzl+wL7 NjcniUMuQKVBsU9+bKc6LTUCcOTegII0Z35n0Mbst++GQe+p80ZhorhtRy9pjIld m1SQkP2L8+J/0FcMTgMkxUTyCS+wjBqQu/fuoGLFBlIJZ7AJ4nenJ736IBEVmofA oUcO6Jy7eHSiqMbIbx9bwcgeNcGrc4ExZriagj3xO2ZthSaasHIYH/nVQaESSeBB evhIpa8mLw== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:30 2026 by rpki-client