This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer (raw, json) Hash identifier: MwLY7CP9qo26ZdmMiXndjnIJV63qr515tAjCpD1r82Q= Subject key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775945621D621E888EF881172948903F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204542 IP: 185.245.208.0/22 IP: 2a0d:6b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:45:62:1d:62:1e:88:8e:f8:81:17:29:48:90:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:34:e8:bc:21:ef:d8:95:b6:20:e4:44:33: 55:4c:ad:b5:10:0f:b4:18:0b:cc:09:72:d0:4b:71: 7e:a0:33:af:53:a4:e4:86:9e:86:dd:12:c6:56:b2: 80:bf:3b:1f:1a:9b:c1:af:4c:ea:13:bd:9c:13:4e: d1:e9:f0:7a:80:2f:44:4c:6d:09:c4:cc:ec:2f:8c: ec:0f:5e:2f:ac:87:2a:ca:9f:c7:a7:be:3c:4c:0e: 8d:8a:39:cd:98:f9:8c:a9:9d:ad:9d:cb:91:2d:b8: 5b:9a:df:5e:87:a7:12:c2:d0:be:86:0d:f5:4e:82: a9:83:ef:88:c6:59:e2:84:0e:ff:ed:00:c6:d3:e2: 83:f0:aa:d3:ab:8b:25:66:d1:7e:48:34:b2:d0:70: cd:2a:41:d0:ce:ae:f8:5e:11:20:13:49:93:fe:55: 61:87:95:d5:59:10:5e:98:ac:9e:bb:7a:a8:5b:ad: 64:b6:1f:04:9c:cc:98:1d:6a:57:d8:a7:a0:ec:b0: 07:22:a9:ca:9d:81:fc:4e:2e:ea:ab:2e:41:d1:f6: 9a:b5:ea:b8:b6:41:14:ed:a0:1f:48:66:fe:3c:be: f4:ad:2c:81:7d:ff:d6:4e:81:88:32:2c:74:fe:d9: d2:3c:84:bd:80:85:06:b7:16:b2:01:a7:fd:92:c5: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.208.0/22 IPv6: 2a0d:6b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204542 Signature Algorithm: sha256WithRSAEncryption 1b:05:6b:8f:4f:10:9b:db:52:6c:e8:6b:53:e8:44:0a:8b:5b: 17:77:21:b4:6a:c1:6f:16:d6:07:b7:af:75:f7:2f:5c:e4:64: 38:f0:a8:f5:b8:33:7d:7b:05:5a:29:d8:ec:38:eb:83:0d:d8: a8:81:59:ee:19:fd:ba:72:4e:01:79:97:a7:0a:a1:4b:12:3b: 38:73:c7:66:34:73:02:f2:84:e6:63:8f:bb:9d:94:c8:ca:c4: 1e:a3:e2:a5:90:6a:de:88:81:84:74:7c:3c:c1:e6:38:44:9f: 7d:28:bf:ef:c6:82:a1:bf:dd:f9:9d:6c:e5:55:76:4e:9d:f3: 72:ae:e3:d8:c2:17:30:82:55:aa:ad:b6:95:d6:2d:13:59:9e: a1:9a:ce:67:38:26:4c:27:5b:15:4d:3a:5e:35:ea:9b:94:05: ff:15:1e:ea:34:63:b8:0d:2b:5c:89:a6:eb:56:32:75:18:46: 88:e3:2c:de:dd:22:32:90:f3:48:c5:d8:4a:b6:af:42:2d:f3: 81:ad:97:88:c0:a5:51:30:02:ae:40:63:db:db:95:8d:c8:06: d3:ac:e5:d1:9b:a3:98:9b:2c:83:f8:7d:69:d0:da:49:ff:20: 95:5c:78:b4:4a:e4:48:a5:73:fc:72:58:83:86:35:3e:03:fc: ef:3a:50:30 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt3WUViHWIeiI74gRcpSJA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI4ZGE2MDgxMzdmODRlNDU0NTMyMGI0YTNiYjA0OTYxZDJiMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02A06Lwh79iVtiDkRDNVTK21EA+0 GAvMCXLQS3F+oDOvU6Tkhp6G3RLGVrKAvzsfGpvBr0zqE72cE07R6fB6gC9ETG0J xMzsL4zsD14vrIcqyp/Hp748TA6NijnNmPmMqZ2tncuRLbhbmt9eh6cSwtC+hg31 ToKpg++IxlnihA7/7QDG0+KD8KrTq4slZtF+SDSy0HDNKkHQzq74XhEgE0mT/lVh h5XVWRBemKyeu3qoW61kth8EnMyYHWpX2Keg7LAHIqnKnYH8Ti7qqy5B0faateq4 tkEU7aAfSGb+PL70rSyBff/WToGIMix0/tnSPIS9gIUGtxayAaf9ksXRvwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPi42mCBN/hORUUyC0o7sElh0rErMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzgwNTUz My1kYmM1LTQyYzAtYmM3OC01NzViMDMzNDRjYjEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvODA1NTMz LWRiYzUtNDJjMC1iYzc4LTU3NWIwMzM0NGNiMS8xLzEtTGphWUlFMy1FNUZSVElM U2p1d1NXSFNzU3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArn10DANBAIAAjAHAwUDKg1rgDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDHv4wDQYJKoZIhvcNAQELBQADggEBABsFa49PEJvb Umzoa1PoRAqLWxd3IbRqwW8W1ge3r3X3L1zkZDjwqPW4M317BVop2Ow464MN2KiB We4Z/bpyTgF5l6cKoUsSOzhzx2Y0cwLyhOZjj7udlMjKxB6j4qWQat6IgYR0fDzB 5jhEn30ov+/GgqG/3fmdbOVVdk6d83Ku49jCFzCCVaqttpXWLRNZnqGazmc4Jkwn WxVNOl416puUBf8VHuo0Y7gNK1yJputWMnUYRojjLN7dIjKQ80jF2Eq2r0It84Gt l4jApVEwAq5AY9vblY3IBtOs5dGbo5ibLIP4fWnQ2kn/IJVceLRK5Eilc/xyWIOG NT4D/O86UDA= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:29 2026 by rpki-client