This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer (raw, json) Hash identifier: 34Mej+DetGkHqC/Vj3ji/je1Yyi8jHM9X0yGGSbEvN0= Subject key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B94701E38A02ED0CFEF1791744676 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202212 IP: 185.50.16.0/22 IP: 185.182.28.0/22 IP: 2a01:a860::/32 IP: 2a0a:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:94:70:1e:38:a0:2e:d0:cf:ef:17:91:74:46:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:54:0e:ce:45:0c:12:45:a2:92:e6:a3:cb: d4:3b:54:25:3d:b4:34:0a:de:02:43:54:a3:ec:96: f3:24:74:c6:a4:bc:a9:51:20:9d:ad:10:d0:95:77: 1e:48:e8:ef:78:55:29:cd:3e:5c:83:02:e8:ea:58: 61:13:66:1b:ad:7b:e6:a5:1b:87:65:3d:78:a1:c2: cc:8c:94:24:5f:8b:50:b6:00:c2:1b:57:04:e3:a2: ff:21:f5:69:1b:77:75:27:ad:17:cb:72:59:5a:5e: e9:3c:09:1a:36:19:81:7d:f4:ca:1c:fb:14:29:3a: 2f:4d:f7:4c:51:ed:70:a7:67:9c:b5:a3:88:54:97: c1:34:46:0b:cd:d4:a9:6f:99:3a:cc:8b:1c:9e:68: a6:5e:f4:2a:51:09:6b:72:4f:1c:4b:bd:ce:ca:72: af:63:e9:68:d5:e4:f1:cc:32:cf:1b:26:66:0b:e4: 82:7f:cd:1f:cf:bd:c8:65:2a:d2:e7:7a:9a:81:02: 91:e5:a2:c5:85:9e:1f:b4:66:f0:66:17:50:c2:4f: fd:aa:98:11:d8:75:9b:28:7f:99:81:78:6e:fd:25: 55:fb:c3:04:1e:ff:e1:fe:24:fc:09:96:95:ae:23: 44:57:fa:da:b0:69:2f:a8:2f:3c:36:14:78:3c:bc: 30:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.16.0/22 185.182.28.0/22 IPv6: 2a01:a860::/32 2a0a:e880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202212 Signature Algorithm: sha256WithRSAEncryption 94:1e:dd:3d:c8:f6:20:eb:22:52:36:92:d2:93:0e:f5:fc:e9: 80:3e:ad:08:75:cb:49:c7:93:4c:36:d8:bc:51:21:bd:98:ed: ee:d1:df:d6:7f:01:40:72:7c:d6:94:7a:7b:05:f1:5a:cf:46: 50:61:dc:e0:49:dd:ee:34:e1:14:43:d1:ea:5e:40:65:8a:71: bd:22:a3:56:53:a5:66:e2:37:6b:b8:a8:77:d4:c3:67:f5:3c: 37:52:bc:5e:d0:9a:bc:95:f8:17:d9:48:12:c9:a9:92:d0:81: 43:1b:fc:87:f0:cd:ec:e1:ef:36:7d:5c:30:81:b3:2a:f6:4c: 03:42:d7:9e:9b:a1:7b:3d:93:2b:aa:94:4b:eb:e1:47:a0:37: 05:41:e5:5a:4c:62:0a:51:2d:1c:ce:59:7d:a0:ed:42:02:f9: ef:58:e4:35:e6:8e:20:48:f1:23:a5:d1:ee:15:01:0e:7a:72: c6:a0:9e:a4:fb:09:25:dc:58:e2:50:35:8a:20:98:0a:b0:0a: 90:80:e5:41:9a:7f:d3:dc:a5:8a:b0:a2:6f:3d:e2:58:5f:bd: 0c:0d:21:58:15:e6:03:67:e3:a7:41:48:10:98:91:d1:10:72: 7a:84:44:aa:01:c9:4e:8d:cb:78:ac:ea:02:1a:19:58:9c:01: 34:b9:f9:c4 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt6W5RwHjigLtDP7xeRdEZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjg0M2NkNjFkOGZmZjFmNmNmYjM4MGFlMjQzYmUwYjFkOTQzNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mNUDs5FDBJFopLmo8vUO1QlPbQ0 Ct4CQ1Sj7JbzJHTGpLypUSCdrRDQlXceSOjveFUpzT5cgwLo6lhhE2YbrXvmpRuH ZT14ocLMjJQkX4tQtgDCG1cE46L/IfVpG3d1J60Xy3JZWl7pPAkaNhmBffTKHPsU KTovTfdMUe1wp2ectaOIVJfBNEYLzdSpb5k6zIscnmimXvQqUQlrck8cS73OynKv Y+lo1eTxzDLPGyZmC+SCf80fz73IZSrS53qagQKR5aLFhZ4ftGbwZhdQwk/9qpgR 2HWbKH+ZgXhu/SVV+8MEHv/h/iT8CZaVriNEV/rasGkvqC88NhR4PLwwcwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFNaEPNYdj/8fbPs4CuJDvgsdlDWrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzQ0Y2M3 Yy1hNmI1LTRkYTYtYWY4ZS1lZWNkMDlkOTBjNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNDRjYzdj LWE2YjUtNGRhNi1hZjhlLWVlY2QwOWQ5MGM2NS8xLzFvUTgxaDJQX3g5cy16Z0s0 a08tQ3gyVU5hcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuTIQAwQCubYcMBQEAgACMA4DBQAqAahgAwUD KgrogDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFeQwDQYJKoZIhvcNAQELBQAD ggEBAJQe3T3I9iDrIlI2ktKTDvX86YA+rQh1y0nHk0w22LxRIb2Y7e7R39Z/AUBy fNaUensF8VrPRlBh3OBJ3e404RRD0epeQGWKcb0io1ZTpWbiN2u4qHfUw2f1PDdS vF7QmryV+BfZSBLJqZLQgUMb/Ifwzezh7zZ9XDCBsyr2TANC156boXs9kyuqlEvr 4UegNwVB5VpMYgpRLRzOWX2g7UIC+e9Y5DXmjiBI8SOl0e4VAQ56csagnqT7CSXc WOJQNYogmAqwCpCA5UGaf9PcpYqwom894lhfvQwNIVgV5gNn46dBSBCYkdEQcnqE RKoByU6Ny3is6gIaGVicATS5+cQ= -----END CERTIFICATE-----Generated at Sat Jan 3 02:19:01 2026 by rpki-client