This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer (raw, json) Hash identifier: mm7HAOlyQP6I0oBprgZlF7vwpdIlEVEoUyi9yJBymvE= Subject key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A045A4B973DA0CFA80676B6B45148 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208603 IP: 45.90.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:04:5a:4b:97:3d:a0:cf:a8:06:76:b6:b4:51:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:83:cb:a3:9b:27:c5:e5:69:1b:ee:ad:ea: 3c:c1:62:51:64:68:95:73:91:22:f0:62:ff:57:4c: 57:78:56:be:7e:73:87:25:71:61:0e:47:e4:2b:64: 74:76:80:4d:e5:be:87:07:58:9e:ef:19:f5:84:f3: 53:e3:54:cb:ea:32:51:64:23:1d:64:0f:53:0d:0d: 34:8e:b7:cb:9a:e1:38:38:18:f9:14:16:19:e9:31: 7a:3b:41:61:ae:f9:f6:57:54:12:e7:5f:31:77:e2: 39:ae:7a:a9:87:e6:0f:81:72:d7:0f:16:f8:fd:32: f9:79:00:0f:92:1a:ea:84:aa:8f:28:77:c1:85:4e: 34:ca:eb:e7:bd:a8:b0:e5:67:5c:8f:88:5a:c1:e0: 32:77:3e:f2:62:78:01:85:f7:95:f9:58:b3:c4:8f: de:a2:5b:f4:98:ea:1a:05:34:bc:6c:bf:a2:7c:92: 41:7f:41:19:02:ef:4f:af:46:9c:22:92:d2:87:5b: 30:17:82:e0:da:e7:93:90:16:5d:8d:0a:2e:c5:19: fe:c3:35:60:d2:2e:96:56:69:d7:c1:1f:0d:5e:28: d5:f6:9f:64:02:8f:61:ee:19:79:21:2b:5b:cd:a8: 6c:d9:8a:33:83:09:29:92:1c:ba:11:37:78:fc:b3: 17:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208603 Signature Algorithm: sha256WithRSAEncryption 25:b1:bc:38:48:c4:64:92:dd:08:15:d2:45:ca:30:dc:7a:07: ae:8c:20:a3:be:21:ce:05:5a:8a:d9:e3:8d:3d:4a:6d:38:ec: 65:ac:f1:eb:85:39:ca:74:8f:ba:a9:42:05:2c:8d:a0:0e:6e: 4d:b4:42:0a:ca:c1:7c:b1:52:6d:a1:d8:ed:21:60:d9:10:42: 95:24:03:a7:3a:2a:e5:43:7a:29:54:da:24:ef:65:98:0a:88: 05:7a:8f:66:43:dd:73:65:c8:36:b9:67:a8:cb:1d:1a:bf:74: 2e:4c:22:30:c8:14:4b:e9:38:c0:ae:fa:fa:d4:66:64:43:09: d8:5d:21:8e:90:8c:0e:9d:b0:4a:46:ab:44:62:91:ac:f4:c3: 7f:e8:ab:2a:a7:13:5e:56:44:cd:b6:cf:68:11:0a:e2:03:72: f4:f4:49:0f:9d:06:b8:0d:a7:2e:66:39:2a:f3:fe:a7:08:c5: 8b:48:42:70:b6:aa:fa:90:61:2b:c4:64:65:e8:3b:94:41:c2: ad:c8:83:55:88:d0:a3:b0:19:79:b4:39:c7:16:2c:57:e3:7d: 92:e3:ef:35:2e:cb:b8:2a:6f:99:aa:95:0e:c2:6a:13:19:ff: 0c:72:4b:f3:dc:b9:6e:a5:0f:e3:dc:53:52:32:54:92:d1:1b: 2f:50:2a:21 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6WgRaS5c9oM+oBna2tFFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmYyYTVhNWRmNGQ5NWFjMDExNWNhZWRhZDE5NGI2MjY4OGYyYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3SDy6ObJ8XlaRvureo8wWJRZGiV c5Ei8GL/V0xXeFa+fnOHJXFhDkfkK2R0doBN5b6HB1ie7xn1hPNT41TL6jJRZCMd ZA9TDQ00jrfLmuE4OBj5FBYZ6TF6O0Fhrvn2V1QS518xd+I5rnqph+YPgXLXDxb4 /TL5eQAPkhrqhKqPKHfBhU40yuvnvaiw5Wdcj4haweAydz7yYngBhfeV+VizxI/e olv0mOoaBTS8bL+ifJJBf0EZAu9Pr0acIpLSh1swF4Lg2ueTkBZdjQouxRn+wzVg 0i6WVmnXwR8NXijV9p9kAo9h7hl5IStbzahs2Yozgwkpkhy6ETd4/LMX1wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPvypaXfTZWsARXK7a0ZS2Jojyu6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzBhNTBk MC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkwYzAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQw LTU2NGYtNDBlMC04NTg5LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0 clJsTFltaVBLN28ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1a/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDLtswDQYJKoZIhvcNAQELBQADggEBACWxvDhIxGSS3QgV0kXKMNx6B66MIKO+ Ic4FWorZ4409Sm047GWs8euFOcp0j7qpQgUsjaAObk20QgrKwXyxUm2h2O0hYNkQ QpUkA6c6KuVDeilU2iTvZZgKiAV6j2ZD3XNlyDa5Z6jLHRq/dC5MIjDIFEvpOMCu +vrUZmRDCdhdIY6QjA6dsEpGq0Rikaz0w3/oqyqnE15WRM22z2gRCuIDcvT0SQ+d BrgNpy5mOSrz/qcIxYtIQnC2qvqQYSvEZGXoO5RBwq3Ig1WI0KOwGXm0OccWLFfj fZLj7zUuy7gqb5mqlQ7CahMZ/wxyS/PcuW6lD+PcU1IyVJLRGy9QKiE= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:47 2026 by rpki-client