This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer File: 1-IesflsonOaBskdMOPeVLMqcD7g.cer (raw, json) Hash identifier: SYJsv6JiAUz2Lrq70EFKOchuBlsYZ5MjrlqfV5vpm2w= Subject key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2E630E32D55190D6CF99DABBC61C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202055 IP: 185.54.156.0/23 IP: 185.54.159.0/24 IP: 2a04:d100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e6:30:e3:2d:55:19:0d:6c:f9:9d:ab:bc:61:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5a:92:fa:7d:c8:0b:59:78:c5:39:26:2a:47: 86:f5:82:69:5e:e9:fc:b8:75:25:b0:ee:b6:76:bc: 30:fe:55:9a:c9:58:51:72:be:ac:13:d7:e8:50:da: f0:2f:40:24:cf:0d:d8:3d:11:65:e5:81:d6:15:c4: bc:b0:c0:f0:6a:e8:32:09:38:84:d7:82:3d:2a:34: 8c:a3:a9:e2:4c:ec:83:cb:dd:18:a8:34:81:f4:5e: 4b:ce:c0:d9:a7:85:e8:20:d7:02:74:ec:ed:89:18: 97:11:96:d4:f0:c6:fd:0f:6e:1e:65:e3:37:2a:6e: 05:65:04:a9:2e:13:3f:55:b4:8c:3d:33:d9:1b:f8: 17:1b:9b:79:c2:53:cc:e5:fc:79:7b:1d:3d:e1:44: 88:64:b8:a9:4a:60:47:4f:68:56:6c:5a:00:e3:b0: 12:0a:31:d1:e7:80:35:b1:09:26:41:cd:62:98:65: ac:d5:36:0b:08:d1:ca:44:25:b8:8d:d3:c9:15:12: 69:b5:64:2e:37:7e:e3:ee:a1:bc:c6:9a:0a:ab:4b: ac:85:6f:5d:2a:b3:89:e8:91:79:fc:62:68:3d:37: 72:cd:0c:48:fd:2f:3d:25:fe:ac:e8:db:3d:fa:41: 77:2e:98:18:5d:02:c9:51:f0:cd:bb:50:2f:7d:be: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.156.0/23 185.54.159.0/24 IPv6: 2a04:d100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202055 Signature Algorithm: sha256WithRSAEncryption 60:46:c5:44:09:cf:78:b7:db:5b:d7:ee:45:0f:b7:35:c7:7e: 94:7c:58:da:fb:af:1f:9f:67:ec:72:1e:7f:ce:36:56:92:7d: 9f:46:7d:42:ac:66:f9:6c:43:b4:a4:46:c3:fc:49:90:6e:b8: 0a:fd:0b:62:59:91:d4:87:e3:5d:f5:ec:b1:1a:17:58:21:a8: e3:6a:d8:aa:c5:09:bf:8a:ab:42:81:a9:56:ec:e7:8c:7c:ea: 18:3f:c9:cd:63:43:1d:a0:28:58:02:5a:d8:8e:de:e8:7b:b9: ba:a3:ae:3a:02:1d:05:a5:74:1b:62:7b:49:6d:cc:1e:9f:a9: 71:fe:50:38:ad:c4:21:f5:0f:52:47:11:a8:00:c9:a1:1d:13: 8a:71:1d:37:e3:b6:6b:2d:72:96:6d:7b:bb:55:ac:94:53:ff: ab:94:23:7c:86:2f:c3:72:da:57:cb:27:7a:94:bb:ef:c9:e1: 0d:07:8b:2b:43:be:97:eb:38:f4:91:59:49:60:de:55:30:f5: 84:eb:2a:77:a9:57:7b:26:72:65:0a:3c:23:fa:ab:b2:f8:73: b8:75:83:3c:2d:98:74:d7:49:6c:56:2a:44:f2:71:01:b8:c2: 40:b2:d7:81:ba:5c:ef:a6:ca:6d:d6:96:56:64:e8:77:57:96: 14:15:09:5f -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt4ouYw4y1VGQ1s+Z2rvGHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODg3YWM3ZTViMjg5Y2U2ODFiMjQ3NGMzOGY3OTUyY2NhOWMwZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31qS+n3IC1l4xTkmKkeG9YJpXun8 uHUlsO62drww/lWayVhRcr6sE9foUNrwL0Akzw3YPRFl5YHWFcS8sMDwaugyCTiE 14I9KjSMo6niTOyDy90YqDSB9F5LzsDZp4XoINcCdOztiRiXEZbU8Mb9D24eZeM3 Km4FZQSpLhM/VbSMPTPZG/gXG5t5wlPM5fx5ex094USIZLipSmBHT2hWbFoA47AS CjHR54A1sQkmQc1imGWs1TYLCNHKRCW4jdPJFRJptWQuN37j7qG8xpoKq0ushW9d KrOJ6JF5/GJoPTdyzQxI/S89Jf6s6Ns9+kF3LpgYXQLJUfDNu1Avfb5LGQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPiHrH5bKJzmgbJHTDj3lSzKnA+4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2NjM2Fk NC1mZjFhLTQ0OTctODJkYS04ZDUxZGI2NWRiNjYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0 LWZmMWEtNDQ5Ny04MmRhLThkNTFkYjY1ZGI2Ni8xLzEtSWVzZmxzb25PYUJza2RN T1BlVkxNcWNEN2cubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAbk2nAMEALk2nzANBAIAAjAHAwUDKgTRADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFUcwDQYJKoZIhvcNAQELBQADggEBAGBG xUQJz3i321vX7kUPtzXHfpR8WNr7rx+fZ+xyHn/ONlaSfZ9GfUKsZvlsQ7SkRsP8 SZBuuAr9C2JZkdSH41317LEaF1ghqONq2KrFCb+Kq0KBqVbs54x86hg/yc1jQx2g KFgCWtiO3uh7ubqjrjoCHQWldBtie0ltzB6fqXH+UDitxCH1D1JHEagAyaEdE4px HTfjtmstcpZte7tVrJRT/6uUI3yGL8Ny2lfLJ3qUu+/J4Q0HiytDvpfrOPSRWUlg 3lUw9YTrKnepV3smcmUKPCP6q7L4c7h1gzwtmHTXSWxWKkTycQG4wkCy14G6XO+m ym3WllZk6HdXlhQVCV8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:28 2026 by rpki-client