This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.cer (raw, json) Hash identifier: ku5hErTNqaG/5tggTdZdgWpSlE8UMnDVoa2bltHFvLA= Subject key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC7009C3158A3F029BAF435FE0159 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215326 IP: 95.87.90.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c7:00:9c:31:58:a3:f0:29:ba:f4:35:fe:01:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:c4:ff:7a:2b:d5:83:04:40:d1:f1:94:69: 95:e4:4b:96:16:3c:35:8f:ad:8d:1f:25:fb:91:a7: a8:25:95:0e:43:89:ec:a6:5f:2b:0c:8b:f4:44:af: 98:36:ec:20:44:c1:d2:58:78:ad:1f:2a:7c:78:a7: 27:1e:0b:5d:82:29:de:03:5a:cb:fc:92:38:b6:03: 04:88:49:c4:50:86:d2:7a:9f:98:54:6a:d5:28:29: ec:0f:da:8f:97:34:03:31:95:ef:46:f3:69:4b:55: 05:94:d3:ad:63:09:b8:42:05:b7:26:3a:88:37:18: 99:26:06:08:23:16:c6:21:06:d1:a2:cb:29:ce:8c: 48:bd:e2:e8:c3:f3:7b:65:80:ea:7b:23:78:7b:18: 82:34:6b:ba:d1:62:68:fa:50:67:c8:3b:5e:98:5b: 0d:d6:7d:40:ec:69:63:01:fa:b2:f3:62:3a:13:bd: bf:ae:5f:46:d6:6f:e0:eb:c2:db:18:a5:8a:da:aa: 89:ea:a7:a1:6c:13:bd:c0:dd:24:ad:76:f8:db:e1: 55:b1:17:94:6f:ca:24:a8:9d:48:52:4b:61:39:ef: e6:e8:51:2e:ee:40:0b:eb:4c:f8:d4:12:ad:4f:67: 6a:96:54:72:3c:ba:cb:69:93:d3:b5:b2:40:3c:35: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.87.90.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215326 Signature Algorithm: sha256WithRSAEncryption 15:77:04:f7:b4:22:c1:0a:ee:4a:f6:a1:cf:bf:83:cf:fa:2f: d8:0e:a3:96:f4:67:94:d1:09:cd:40:d6:05:e3:20:7a:ab:68: ce:88:61:96:1c:e8:21:f0:55:b1:89:8e:ed:55:52:05:5f:2a: f2:bf:ef:80:64:bb:1e:3b:c2:fa:2c:63:55:61:c6:5d:17:bc: 38:62:f1:64:f5:c6:59:52:db:87:50:c8:ec:4b:6b:64:58:f4: af:3a:6e:96:4b:38:00:76:a9:1c:1e:51:77:e1:4c:ea:35:48: 5a:49:48:73:c0:5a:da:8f:04:ad:8c:0c:fb:e2:09:61:05:6d: ee:db:94:d5:83:3c:2d:38:7d:1b:05:d0:80:5f:1a:a2:d4:b4: 01:cc:2c:a2:f8:c4:21:97:f3:99:2e:23:15:ed:0f:4c:de:82: 65:07:b4:9b:ef:ca:bb:bf:20:19:fd:66:4b:52:4e:06:a9:9d: 4c:1c:ee:e7:f7:5e:c7:84:16:a1:a7:40:7f:cd:59:88:1f:b8: e1:ec:c6:06:71:bc:ba:02:8a:6b:b6:1d:f9:ff:2d:e6:b7:a7: 16:3e:97:9a:1c:b2:80:65:84:3e:f0:48:b4:5b:c1:0c:24:a4: 8e:4b:5e:99:61:b0:23:e0:7a:19:ac:20:0e:01:ce:30:cb:9b: f1:d5:e0:ca -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt57McAnDFYo/ApuvQ1/gFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTA3YWUzYTc5MThmOTMyZWEyNGNjMTU2YjRiNmU5YmE1NTgxYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszbE/3or1YMEQNHxlGmV5EuWFjw1 j62NHyX7kaeoJZUOQ4nspl8rDIv0RK+YNuwgRMHSWHitHyp8eKcnHgtdgineA1rL /JI4tgMEiEnEUIbSep+YVGrVKCnsD9qPlzQDMZXvRvNpS1UFlNOtYwm4QgW3JjqI NxiZJgYIIxbGIQbRosspzoxIveLow/N7ZYDqeyN4exiCNGu60WJo+lBnyDtemFsN 1n1A7GljAfqy82I6E72/rl9G1m/g68LbGKWK2qqJ6qehbBO9wN0krXb42+FVsReU b8okqJ1IUkthOe/m6FEu7kAL60z41BKtT2dqllRyPLrLaZPTtbJAPDUvNQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPoHrjp5GPky6iTMFWtLbpulWBv6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2E5N2Rj MC01Njg1LTRmNmUtOTg3Zi0yYTVhNmUyZDc5NDgvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTk3ZGMw LTU2ODUtNGY2ZS05ODdmLTJhNWE2ZTJkNzk0OC8xLzEtZ2V1T25rWS1UTHFKTXdW YTB0dW02VllHX28ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAV9XWjAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDSR4wDQYJKoZIhvcNAQELBQADggEBABV3BPe0IsEK7kr2oc+/g8/6L9gOo5b0 Z5TRCc1A1gXjIHqraM6IYZYc6CHwVbGJju1VUgVfKvK/74Bkux47wvosY1Vhxl0X vDhi8WT1xllS24dQyOxLa2RY9K86bpZLOAB2qRweUXfhTOo1SFpJSHPAWtqPBK2M DPviCWEFbe7blNWDPC04fRsF0IBfGqLUtAHMLKL4xCGX85kuIxXtD0zegmUHtJvv yru/IBn9ZktSTgapnUwc7uf3XseEFqGnQH/NWYgfuOHsxgZxvLoCimu2Hfn/Lea3 pxY+l5ocsoBlhD7wSLRbwQwkpI5LXplhsCPgehmsIA4BzjDLm/HV4Mo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:08 2026 by rpki-client