This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer File: 1-545C9y9la-rSl_4xO2e_ENoe9E.cer (raw, json) Hash identifier: +J6UpFDfu/f5HUvJdBm3jsAQOmXsZLOaR5PXpmt3G9Q= Subject key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED34343FB253A446E545A772F671F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.191.144.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:34:34:3f:b2:53:a4:46:e5:45:a7:72:f6:71:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:4c:0e:d5:42:48:de:fa:6b:7a:a7:18:0a: 03:ea:27:fe:70:d2:d1:28:f4:37:15:11:e9:b5:2d: 7b:b7:f8:fd:1d:ac:07:60:52:34:0d:0b:ac:2e:0b: d2:53:b8:ab:eb:6b:a7:76:c8:0b:4f:c5:b8:6e:28: 6f:41:af:c9:90:24:62:2d:b2:dc:e6:8c:e1:2d:b4: f2:45:4f:2c:7d:d9:90:49:44:aa:1c:09:01:0e:dc: 88:86:f8:81:72:e0:62:4c:d6:51:cf:31:55:10:c0: 59:d0:3f:00:2e:53:f6:a8:f2:62:17:34:82:85:02: 38:5d:49:f2:b3:ad:29:0b:ff:1d:cd:6f:15:75:72: d9:65:ea:07:9c:c1:bd:20:93:9e:53:03:35:9f:10: ab:72:12:86:46:50:8d:dc:ea:a9:ae:20:87:72:b5: d7:89:a8:a9:fd:56:7a:ee:1c:de:dd:6c:f2:0c:76: ff:2a:f8:76:9e:8b:52:29:d0:d3:08:e4:ef:01:4f: 9f:ac:cb:cd:b9:c7:af:3a:b1:7a:db:5e:00:54:b8: 90:af:93:2a:36:89:2b:9c:1b:99:20:e9:c4:de:81: 43:69:0a:a8:51:c5:ea:53:98:cd:5e:b6:1c:3c:45: 29:bf:a0:fd:13:61:99:a8:2f:ae:de:4b:e7:16:71: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:3f:36:73:b9:b4:a5:24:41:69:46:ae:61:32:01:0f:67:36: c0:4d:f0:fd:8a:79:69:cc:63:df:ec:3b:cd:26:1e:b4:b6:7e: f5:cb:56:9d:16:4d:5d:e8:4d:7e:e9:6c:18:cd:81:1c:59:65: ab:e6:b4:db:58:fe:c2:8d:fc:a2:39:4d:46:c6:50:cd:2e:49: ac:0e:7c:e7:0f:a5:0f:54:bb:81:73:3e:8e:56:05:75:8c:b1: 29:7d:d6:05:18:83:55:e5:26:f0:c6:f7:4b:70:8e:a1:3e:63: 29:cb:fc:f9:27:9d:4b:54:c1:ee:de:0e:da:b7:8b:c8:e1:d7: c6:20:b9:e5:ec:cc:5c:5d:a7:54:97:df:e6:08:6d:22:e1:3c: 23:54:4b:d2:f5:7d:ef:e6:9e:9f:ba:c0:5b:fe:d8:16:c3:ce: 39:ec:c6:dc:7b:82:a1:6d:3c:d5:fa:e2:f0:b2:a1:10:0a:3f: f8:78:64:7f:2f:74:0d:ca:51:50:9e:ba:0b:8c:c1:26:a4:d9: c7:3c:a4:11:44:2c:76:85:18:a8:cc:3f:d7:ce:89:d4:4d:b0: ff:b1:39:b3:5e:2f:b6:fa:fe:46:bc:92:1e:e7:9f:94:ad:b6: bd:5e:32:fa:97:d6:bb:c2:d1:b5:22:1d:0d:5a:56:4a:3d:a5: 88:2b:bf:23 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt57TQ0P7JTpEblRady9nHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjllMzkwYmRjYmQ5NWFmYWI0YTVmZjhjNGVkOWVmYzQzNjg3YmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+VMDtVCSN76a3qnGAoD6if+cNLR KPQ3FRHptS17t/j9HawHYFI0DQusLgvSU7ir62undsgLT8W4bihvQa/JkCRiLbLc 5ozhLbTyRU8sfdmQSUSqHAkBDtyIhviBcuBiTNZRzzFVEMBZ0D8ALlP2qPJiFzSC hQI4XUnys60pC/8dzW8VdXLZZeoHnMG9IJOeUwM1nxCrchKGRlCN3OqpriCHcrXX iaip/VZ67hze3WzyDHb/Kvh2notSKdDTCOTvAU+frMvNucevOrF6214AVLiQr5Mq NokrnBuZIOnE3oFDaQqoUcXqU5jNXrYcPEUpv6D9E2GZqC+u3kvnFnFF6QIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPueOQvcvZWvq0pf+MTtnvxDaHvRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2Q5MDJj YS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYwMWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNh LWNkZjMtNGYyOS1iMjMyLTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80 eE8yZV9FTm9lOUUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA12/kDANBgkqhkiG9w0BAQsFAAOCAQEAij82 c7m0pSRBaUauYTIBD2c2wE3w/Yp5acxj3+w7zSYetLZ+9ctWnRZNXehNfulsGM2B HFllq+a021j+wo38ojlNRsZQzS5JrA585w+lD1S7gXM+jlYFdYyxKX3WBRiDVeUm 8Mb3S3COoT5jKcv8+SedS1TB7t4O2reLyOHXxiC55ezMXF2nVJff5ghtIuE8I1RL 0vV97+aen7rAW/7YFsPOOezG3HuCoW081fri8LKhEAo/+Hhkfy90DcpRUJ66C4zB JqTZxzykEUQsdoUYqMw/186J1E2w/7E5s14vtvr+RrySHueflK22vV4y+pfWu8LR tSIdDVpWSj2liCu/Iw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:03 2026 by rpki-client