This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.cer (raw, json) Hash identifier: 4tbmTbmd3OmbhSoVqoMaHIlCXUi+E1jFKCGFTYHatNA= Subject key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFA30591C416DE6E616371CF9610D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5505 IP: 185.123.204.0/22 IP: 185.210.226.0/23 IP: 2a03:9320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:30:59:1c:41:6d:e6:e6:16:37:1c:f9:61:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:ef:ed:3e:f2:72:2d:43:65:35:f8:44:d9: a6:33:bd:8d:67:48:a2:f3:2e:ee:85:6c:69:92:f9: d8:54:16:4f:04:89:b0:5a:1e:b3:b6:17:95:04:1a: 19:85:ac:4d:e3:a3:41:29:6d:bc:71:1f:f3:e6:00: bd:2a:59:86:36:6a:a6:a7:00:12:f8:73:53:27:90: a0:8b:d0:be:27:be:1a:49:8e:a8:1e:3e:25:0e:ed: d1:d0:df:a2:fa:8b:25:a5:6e:72:95:b0:23:79:81: f3:88:2e:17:72:66:21:88:d8:61:83:71:9a:76:41: 8f:90:3b:37:9f:14:37:1d:28:cc:02:f6:ea:9e:28: e9:c2:f9:5c:82:7f:01:6e:8f:98:13:28:64:ba:7f: 34:a8:d5:20:9b:d6:c8:5b:40:92:77:36:82:ba:9d: 71:e7:c7:92:f3:2c:48:7c:84:44:ef:df:4e:e7:97: 22:eb:07:31:ce:b7:aa:db:fa:6e:c6:dc:08:72:1b: f5:a9:a9:1e:ab:58:48:83:40:0a:c7:8f:90:26:ee: 2f:7b:5a:13:f7:b0:1a:63:21:37:e4:25:e5:1d:4b: 8c:81:dd:08:72:77:64:f0:d8:8a:9a:fc:a0:46:99: 94:8c:7b:c6:85:89:d1:ab:57:8b:46:39:b3:69:b6: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.204.0/22 185.210.226.0/23 IPv6: 2a03:9320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5505 Signature Algorithm: sha256WithRSAEncryption 0b:bf:e8:91:ab:79:7b:23:ac:33:d8:22:51:29:1c:8b:38:3c: 7b:10:9f:85:bb:84:48:97:ef:cf:26:58:ce:41:fe:4e:7d:bd: 85:63:c1:6d:73:d3:1d:3c:b7:9c:67:7d:2f:db:e1:38:cb:19: e0:dd:d4:f2:8b:1b:e6:90:d1:27:ed:f3:4d:e1:b5:56:84:4b: 8d:bf:d5:00:63:81:55:b3:dc:c1:c8:c1:9c:cb:f6:d9:57:f3: 87:13:50:5a:15:c6:34:54:24:cc:01:1d:77:08:5f:f3:a6:3e: 3f:a8:6e:d0:c9:dc:f9:0a:b9:a3:ca:68:c2:e5:ee:12:55:c8: b6:43:73:66:e6:4c:6d:43:d3:6f:fe:5b:2a:87:6d:2f:04:65: 6c:02:80:2d:9d:e8:79:ca:5c:42:c7:a8:09:61:ab:f8:c6:60: b5:f0:c1:bb:06:99:4e:93:be:0a:4f:a4:a3:97:74:8b:82:de: d6:9a:8f:c9:06:28:90:eb:47:4b:a5:db:d2:31:db:aa:e3:b0: 62:91:44:fd:cd:3d:e7:c7:80:c9:c4:50:11:5b:79:bd:8d:94: 5f:92:ad:41:c0:8d:0c:45:f4:9b:2b:56:7e:63:74:62:22:ac: 8a:ba:de:81:76:1b:2d:d4:b4:3f:d2:68:cf:da:94:f7:b1:26: 40:c1:8e:02 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9WvowWRxBbebmFjcc+WENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRmODBmN2M2OTJlODZkM2NkNmI3NTVkMDZjZjdjZTljMTM3ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Dv7T7yci1DZTX4RNmmM72NZ0ii 8y7uhWxpkvnYVBZPBImwWh6ztheVBBoZhaxN46NBKW28cR/z5gC9KlmGNmqmpwAS +HNTJ5Cgi9C+J74aSY6oHj4lDu3R0N+i+oslpW5ylbAjeYHziC4XcmYhiNhhg3Ga dkGPkDs3nxQ3HSjMAvbqnijpwvlcgn8Bbo+YEyhkun80qNUgm9bIW0CSdzaCup1x 58eS8yxIfIRE799O55ci6wcxzreq2/puxtwIchv1qakeq1hIg0AKx4+QJu4ve1oT 97AaYyE35CXlHUuMgd0Icndk8NiKmvygRpmUjHvGhYnRq1eLRjmzabb4NwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPnfgPfGkuhtPNa3VdBs986cE3/yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzY3MWVl NC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVhZWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0 LWFkODEtNDU0Zi05NjVmLTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRW MEd6M3pwd1RmX0kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArl7zAMEAbnS4jANBAIAAjAHAwUAKgOTIDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIVgTANBgkqhkiG9w0BAQsFAAOCAQEAC7/o kat5eyOsM9giUSkcizg8exCfhbuESJfvzyZYzkH+Tn29hWPBbXPTHTy3nGd9L9vh OMsZ4N3U8osb5pDRJ+3zTeG1VoRLjb/VAGOBVbPcwcjBnMv22VfzhxNQWhXGNFQk zAEddwhf86Y+P6hu0Mnc+Qq5o8powuXuElXItkNzZuZMbUPTb/5bKodtLwRlbAKA LZ3oecpcQseoCWGr+MZgtfDBuwaZTpO+Ck+ko5d0i4Le1pqPyQYokOtHS6Xb0jHb quOwYpFE/c0958eAycRQEVt5vY2UX5KtQcCNDEX0mytWfmN0YiKsirregXYbLdS0 P9Joz9qU97EmQMGOAg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:43 2026 by rpki-client