This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer (raw, json) Hash identifier: L1yWPZ8gv5G9Sf7mfdqCeiwFvJ9Kav/N5Bt2prjlIh8= Subject key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E0DA14EA7485A229E02DD3000AC15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60792 IP: 45.140.216.0/22 IP: 2a0f:1b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0d:a1:4e:a7:48:5a:22:9e:02:dd:30:00:ac:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:66:32:c6:5f:0c:4f:09:2a:c6:21:26:20:41: 0a:05:f6:29:7a:73:ed:b5:71:f7:7e:97:ca:85:b4: 27:0f:ea:87:94:4c:24:ab:ec:d8:89:30:56:be:ee: ca:98:cf:e3:37:5e:c5:a5:cb:cb:ac:eb:58:88:33: ec:b7:e9:ef:3b:36:9f:90:0f:4d:24:9a:a8:4c:c9: 3f:32:1a:84:3f:34:9f:8d:40:9b:eb:f6:29:35:b5: 05:b2:d4:fd:e4:52:52:a6:25:0c:c4:e0:3c:98:bf: 96:36:ba:bc:e6:29:79:fd:9e:e6:b9:cf:0a:5a:6f: c7:1c:f6:ed:20:99:b0:00:52:4a:99:83:9f:4e:a6: 1e:06:97:e3:8f:b2:4f:7c:0b:2a:19:2c:14:15:e5: 1b:96:94:0e:a6:a9:eb:f5:9b:43:99:00:a9:0d:42: eb:84:30:3d:7c:f2:4f:b6:44:ed:a1:24:66:d0:a6: 47:7c:1c:fb:96:88:f4:71:38:80:64:38:27:7a:76: 2b:a2:43:28:d7:69:5d:5f:7e:11:90:bf:8f:e1:58: 80:fd:ed:e0:9a:54:93:c9:40:5c:fa:6c:80:e6:d1: ed:be:28:d1:00:65:eb:16:9d:6a:d0:e4:99:f5:33: 9f:30:21:d1:6b:1d:68:01:dc:dd:81:25:be:5e:da: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.216.0/22 IPv6: 2a0f:1b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60792 Signature Algorithm: sha256WithRSAEncryption a9:0a:cb:9a:cb:a3:ff:86:74:8d:1a:e0:b0:b3:cc:d2:c4:72: d0:a1:e1:76:a6:36:9a:f6:02:04:d9:56:84:ec:2c:50:ee:b8: 10:ee:a9:21:5e:61:30:41:07:ba:c7:d1:06:5c:4c:97:43:f6: 8a:bc:bf:e7:28:ef:fa:cd:44:b8:98:88:36:b7:ff:20:2c:3b: 04:af:0a:49:57:9f:5a:01:28:34:be:92:87:51:63:9c:ad:63: 6b:37:eb:07:d4:51:fc:d6:d6:33:c8:87:91:ba:e9:af:ad:e9: 7d:04:fa:3c:49:ce:a5:7b:89:17:60:dc:0f:f6:e4:42:41:f7: 64:ba:0a:67:99:82:60:84:11:1f:47:d9:5e:39:6c:9e:d5:16: cf:7d:3a:44:79:a4:bd:a7:43:b8:be:5b:68:b3:0e:e9:de:32: 0f:85:aa:d6:6c:c6:af:6a:eb:65:41:51:f0:b9:7a:cd:f9:7c: da:df:68:eb:8e:da:c4:bc:7d:35:8a:bd:2d:67:7c:7e:af:7b: f8:7d:1f:c3:88:9a:53:c1:b2:c0:f3:40:86:fd:fe:05:a8:60: c3:3f:47:36:d3:4d:73:af:69:36:fa:14:71:fb:8b:d9:9f:9b: 94:95:f8:3e:1e:84:3a:8a:d7:64:cc:78:f1:32:b3:d9:b9:91: 93:2a:d1:67 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5fg2hTqdIWiKeAt0wAKwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQ3MjEzZjM1ODViNzExMmRmZjBjYjQzYzE5MmIxY2FmMzA3ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WYyxl8MTwkqxiEmIEEKBfYpenPt tXH3fpfKhbQnD+qHlEwkq+zYiTBWvu7KmM/jN17FpcvLrOtYiDPst+nvOzafkA9N JJqoTMk/MhqEPzSfjUCb6/YpNbUFstT95FJSpiUMxOA8mL+WNrq85il5/Z7muc8K Wm/HHPbtIJmwAFJKmYOfTqYeBpfjj7JPfAsqGSwUFeUblpQOpqnr9ZtDmQCpDULr hDA9fPJPtkTtoSRm0KZHfBz7loj0cTiAZDgnenYrokMo12ldX34RkL+P4ViA/e3g mlSTyUBc+myA5tHtvijRAGXrFp1q0OSZ9TOfMCHRax1oAdzdgSW+XtpPqQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPjXIT81hbcRLf8MtDwZKxyvMH0YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzQ5NTNl ZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAxM2YvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2Vl LTkxMGYtNGI4ZS1iNDY0LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kw UEJrckhLOHdmUmcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2M2DANBAIAAjAHAwUDKg8bADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA7XgwDQYJKoZIhvcNAQELBQADggEBAKkKy5rLo/+G dI0a4LCzzNLEctCh4XamNpr2AgTZVoTsLFDuuBDuqSFeYTBBB7rH0QZcTJdD9oq8 v+co7/rNRLiYiDa3/yAsOwSvCklXn1oBKDS+kodRY5ytY2s36wfUUfzW1jPIh5G6 6a+t6X0E+jxJzqV7iRdg3A/25EJB92S6CmeZgmCEER9H2V45bJ7VFs99OkR5pL2n Q7i+W2izDuneMg+FqtZsxq9q62VBUfC5es35fNrfaOuO2sS8fTWKvS1nfH6ve/h9 H8OImlPBssDzQIb9/gWoYMM/RzbTTXOvaTb6FHH7i9mfm5SV+D4ehDqK12TMePEy s9m5kZMq0Wc= -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:32 2026 by rpki-client