This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer (raw, json) Hash identifier: KU+LUW1B9iuXrmxmXpHk+JsXRNFyMEpSh6ELvmimoxE= Subject key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA53D8B9B8137D7B662B9763FA51D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49081 IP: 188.92.32.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a5:3d:8b:9b:81:37:d7:b6:62:b9:76:3f:a5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a2196ef119221155e1683f8967d254625dae71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:13:18:9e:12:c6:1e:3a:6c:fa:a9:57:1b: ee:72:43:93:da:2b:6b:ce:ee:63:10:8c:d7:d8:bb: 89:9a:cc:e5:e9:49:11:33:09:3f:24:8b:62:29:c3: 69:89:99:06:2d:db:83:34:77:36:3f:cb:ae:94:d3: 39:fc:fe:2f:0e:62:74:cc:fc:7e:e5:41:aa:fd:8d: b9:78:23:aa:2e:61:b9:f1:1f:6b:81:80:0a:01:f5: b4:ae:e9:b9:32:2c:da:99:b1:a3:a7:bb:a8:62:92: 90:3a:2c:e0:32:91:4f:11:53:82:c0:e8:48:e8:29: ef:23:79:b0:81:0e:32:54:20:3e:e0:49:86:6f:39: 96:88:6a:8d:e9:68:f8:b4:ef:88:af:63:8d:49:a2: e4:6a:88:e7:3e:62:ac:a7:63:4c:d7:67:c1:f9:8d: 0d:3d:19:32:ff:6c:89:e7:ca:dd:fe:38:97:4b:39: 45:90:eb:ef:3f:f7:2b:df:f0:6e:d5:88:e3:61:c6: 7e:f7:91:a7:72:4a:78:3e:73:c1:cd:61:60:ec:a6: a6:9b:84:e6:92:dd:bb:aa:29:c0:66:3c:e2:4f:7d: fc:3d:3e:e5:ad:8a:b7:f9:2d:84:c3:97:e2:6b:91: 53:8d:e4:32:8f:25:2c:20:bf:ec:7d:9a:25:6e:33: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.32.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49081 Signature Algorithm: sha256WithRSAEncryption 6e:12:b2:88:72:fa:07:03:1a:67:62:55:04:db:f2:b7:e2:7f: b1:ab:18:7a:b0:2e:9a:8b:c5:ac:20:cb:35:78:bd:81:cd:13: 4a:aa:1e:b8:eb:95:fe:c5:99:9e:9e:23:b7:38:ef:af:c5:24: b8:2d:ed:b6:7c:26:79:0d:7f:08:80:45:50:fe:f0:f2:61:ca: 28:6e:94:68:75:39:c9:81:9a:6b:f1:22:eb:61:4b:52:76:03: e1:ce:4e:99:d3:99:cd:ee:c7:d9:3a:cc:77:12:ab:27:9e:f1: b4:ba:3a:39:bc:51:81:53:c9:c0:95:a7:e2:ca:86:37:21:d4: 54:52:7e:ce:b4:79:b7:73:cd:e7:15:82:6e:ff:95:3f:21:b8: 11:7a:52:d4:e2:26:3b:61:12:65:bd:c3:d0:b7:26:a3:5f:85: 13:8b:fc:51:10:09:70:0f:04:cd:67:db:13:d1:d4:cf:ec:04: 9d:e9:19:ee:41:33:68:fb:90:1f:a3:a8:7f:54:06:38:bd:c0: 78:5a:c2:7c:29:8b:5a:cf:a6:f6:a1:12:37:d8:14:b3:b4:2c: 87:7b:4a:f2:e3:8e:17:5f:b8:54:e1:29:94:03:a6:5f:8a:88: 21:f6:d9:da:87:56:ca:bd:88:d8:e7:53:32:13:49:25:17:70: e0:08:2c:42 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yqU9i5uBN9e2Yrl2P6UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWEyMTk2ZWYxMTkyMjExNTVlMTY4M2Y4OTY3ZDI1NDYyNWRhZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0QTGJ4Sxh46bPqpVxvuckOT2itr zu5jEIzX2LuJmszl6UkRMwk/JItiKcNpiZkGLduDNHc2P8uulNM5/P4vDmJ0zPx+ 5UGq/Y25eCOqLmG58R9rgYAKAfW0rum5MizambGjp7uoYpKQOizgMpFPEVOCwOhI 6CnvI3mwgQ4yVCA+4EmGbzmWiGqN6Wj4tO+Ir2ONSaLkaojnPmKsp2NM12fB+Y0N PRky/2yJ58rd/jiXSzlFkOvvP/cr3/Bu1YjjYcZ+95Gnckp4PnPBzWFg7Kamm4Tm kt27qinAZjziT338PT7lrYq3+S2Ew5fia5FTjeQyjyUsIL/sfZolbjMyLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNWiGW7xGSIRVeFoP4ln0lRiXa5xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2IwNjMz Ny02NTE3LTQwMGItOGNiNS03YWZhMGJjZDc5NzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYjA2MzM3 LTY1MTctNDAwYi04Y2I1LTdhZmEwYmNkNzk3Ni8xLzFhSVpidkVaSWhGVjRXZ19p V2ZTVkdKZHJuRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDvFwgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/uTANBgkqhkiG9w0BAQsFAAOCAQEAbhKyiHL6BwMaZ2JVBNvyt+J/sasYerAu movFrCDLNXi9gc0TSqoeuOuV/sWZnp4jtzjvr8UkuC3ttnwmeQ1/CIBFUP7w8mHK KG6UaHU5yYGaa/Ei62FLUnYD4c5OmdOZze7H2TrMdxKrJ57xtLo6ObxRgVPJwJWn 4sqGNyHUVFJ+zrR5t3PN5xWCbv+VPyG4EXpS1OImO2ESZb3D0Lcmo1+FE4v8URAJ cA8EzWfbE9HUz+wEnekZ7kEzaPuQH6Oof1QGOL3AeFrCfCmLWs+m9qESN9gUs7Qs h3tK8uOOF1+4VOEplAOmX4qIIfbZ2odWyr2I2OdTMhNJJRdw4AgsQg== -----END CERTIFICATE-----Generated at Mon Jan 12 01:38:18 2026 by rpki-client