This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer (raw, json) Hash identifier: nBLIZGRe8/w2A5bwi2VIG6ltKfk85/O9CnkMNwuZDpk= Subject key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12EAAE389E594F9DC116AF6D068A5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44671 IP: 91.202.136.0/22 IP: 178.21.232.0/21 IP: 185.41.188.0/22 IP: 2a00:7d20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ea:ae:38:9e:59:4f:9d:c1:16:af:6d:06:8a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80aef4640437f2307f79871bfb632bb8bddad21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:44:d3:f7:f4:1b:44:1f:fc:e8:83:1c:f8: 5c:63:41:0c:b4:03:30:8c:ed:fc:72:71:c0:55:54: ce:4a:1e:4a:1e:d9:1e:04:8f:39:97:e6:e8:82:85: 0c:15:7f:06:2c:01:3e:23:91:bd:0f:93:14:0c:f7: 71:73:fb:7a:d1:b0:5a:dd:3d:46:bc:a7:79:ad:bd: b3:cc:1a:26:13:1e:48:2e:ae:b6:e0:03:c8:9b:9a: ce:d4:74:7a:00:68:5b:99:ef:55:b5:74:78:fa:64: eb:04:af:80:9b:59:0b:70:69:e4:ff:f3:9c:64:2f: 2c:05:69:72:eb:dd:25:4a:71:be:3a:eb:17:43:af: bb:ea:f0:d6:1c:a3:75:5d:b3:c3:e2:40:d9:56:9f: 44:37:41:9b:f7:b1:17:62:cb:16:89:b4:08:2c:fe: 57:dc:f9:78:02:3c:d1:a7:98:bd:37:14:f1:14:dd: aa:73:83:25:1d:05:94:3b:9c:d9:28:a3:14:c1:ca: ba:b9:de:fe:15:4c:2c:6d:88:2f:9b:26:e4:d8:22: 26:da:ec:eb:38:a2:a8:35:f1:99:cb:fa:80:08:7e: c8:39:67:66:e2:d1:68:72:08:44:d0:47:44:96:a1: 7e:b5:29:86:e5:b8:09:60:0e:7f:f0:f7:03:69:1b: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.136.0/22 178.21.232.0/21 185.41.188.0/22 IPv6: 2a00:7d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44671 Signature Algorithm: sha256WithRSAEncryption 68:1a:c4:b9:61:2b:d8:d3:42:d9:ad:e5:8d:53:58:e5:8c:ee: 7a:ca:69:87:16:55:eb:d0:f3:b6:dc:84:e6:3e:5c:7f:21:e9: 4e:c9:b3:b0:fe:7a:67:0b:3a:fa:b0:db:4e:de:76:94:95:e5: 01:e2:f0:25:df:65:2c:8f:70:03:34:f7:c4:29:3e:23:ef:be: 7a:ca:5b:65:a1:48:16:c2:90:06:ed:81:fb:f2:83:0e:68:99: 7b:69:88:fc:04:5e:96:76:c0:82:13:30:fb:39:22:62:a0:49: fd:b5:de:30:4c:16:62:ae:e0:ef:65:c9:0f:b4:50:22:2e:19: cf:1e:4c:1c:67:a9:2c:7b:c6:22:c1:95:42:58:b0:af:ac:9b: 2f:8f:79:d4:4e:da:fe:0e:bb:85:ae:af:17:c1:fd:06:7f:e0: 40:26:c2:c5:09:f0:dd:ac:cd:e5:89:98:51:e9:3f:ed:a3:72: 14:aa:17:4f:80:a4:c4:f5:09:96:0a:c1:e6:3c:e0:c6:0d:d4: c6:bf:1f:e6:b0:15:33:fb:ba:e6:fa:5e:4c:31:86:a7:c8:4a: 60:ae:a9:14:5b:1c:d4:19:b6:f1:48:af:cf:56:58:84:1e:1c: 4a:eb:bb:83:85:97:86:20:23:96:e8:64:88:c2:95:f6:9f:85: 5c:39:39:6b -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8EuquOJ5ZT53BFq9tBopfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODBhZWY0NjQwNDM3ZjIzMDdmNzk4NzFiZmI2MzJiYjhiZGRhZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu1E0/f0G0Qf/OiDHPhcY0EMtAMw jO38cnHAVVTOSh5KHtkeBI85l+bogoUMFX8GLAE+I5G9D5MUDPdxc/t60bBa3T1G vKd5rb2zzBomEx5ILq624APIm5rO1HR6AGhbme9VtXR4+mTrBK+Am1kLcGnk//Oc ZC8sBWly690lSnG+OusXQ6+76vDWHKN1XbPD4kDZVp9EN0Gb97EXYssWibQILP5X 3Pl4AjzRp5i9NxTxFN2qc4MlHQWUO5zZKKMUwcq6ud7+FUwsbYgvmybk2CIm2uzr OKKoNfGZy/qACH7IOWdm4tFocghE0EdElqF+tSmG5bgJYA5/8PcDaRuahQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFPgK70ZAQ38jB/eYcb+2MruL3a0hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2UwM2Iz Yy02MDI2LTQxZTctYTU1My1hYjE0ODIyZjg1YjUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZTAzYjNj LTYwMjYtNDFlNy1hNTUzLWFiMTQ4MjJmODViNS8xLzEtQXJ2UmtCRGZ5TUg5NWh4 djdZeXU0dmRyU0UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEAlvKiAMEA7IV6AMEArkpvDANBAIAAjAHAwUA KgB9IDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArn8wDQYJKoZIhvcNAQELBQAD ggEBAGgaxLlhK9jTQtmt5Y1TWOWM7nrKaYcWVevQ87bchOY+XH8h6U7Js7D+emcL Ovqw207edpSV5QHi8CXfZSyPcAM098QpPiPvvnrKW2WhSBbCkAbtgfvygw5omXtp iPwEXpZ2wIITMPs5ImKgSf213jBMFmKu4O9lyQ+0UCIuGc8eTBxnqSx7xiLBlUJY sK+smy+PedRO2v4Ou4WurxfB/QZ/4EAmwsUJ8N2szeWJmFHpP+2jchSqF0+ApMT1 CZYKweY84MYN1Ma/H+awFTP7uub6XkwxhqfISmCuqRRbHNQZtvFIr89WWIQeHErr u4OFl4YgI5boZIjClfafhVw5OWs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:39 2026 by rpki-client