This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer (raw, json) Hash identifier: 62LdgdTpMzFktD3uVH0rLlZR+5yD95RicijYXh2lucA= Subject key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A358BBF383F20D804562B5654C7270 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58118 IP: 91.239.8.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:bb:f3:83:f2:0d:80:45:62:b5:65:4c:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:56:fd:04:d6:45:6a:03:a0:cb:b7:e2:0b: d1:4e:54:7d:04:69:d3:cb:68:5f:2b:cf:c0:9c:a5: cb:16:50:39:75:54:39:29:14:65:d5:ec:b5:1e:93: 29:8e:87:7c:f1:ce:b8:f8:62:be:f2:01:70:dd:92: 85:5e:01:0d:8c:c3:68:c2:79:26:2f:83:4c:2d:6d: de:d6:7c:d4:d9:a4:e5:eb:04:25:67:97:c9:3d:f2: a1:5f:68:a5:3a:90:0b:62:e3:d4:5f:78:6a:05:62: 0a:ae:70:51:40:98:cb:7c:c3:9b:fb:49:b3:e3:a9: 1c:b4:9b:9c:28:a8:33:e5:4a:6f:d9:bf:99:71:1a: c6:d1:d5:ee:53:e8:47:e5:bf:94:f2:95:f0:00:fa: 7a:3f:96:f8:e9:35:ee:1a:48:ea:23:8f:a8:41:65: 3d:1a:a3:31:fa:f2:6e:f8:81:22:25:04:f7:4a:e2: d4:a2:03:7d:67:ef:d8:81:2f:2c:ae:07:46:19:70: e9:79:b0:11:a2:7d:f3:00:cd:05:70:8c:f9:2e:fa: e1:1e:6d:bb:a1:2e:83:02:d9:fc:1c:df:8c:fc:ee: ab:5b:7f:c0:97:e4:5b:90:5a:72:5e:83:bc:34:97: ed:eb:08:1c:2d:cc:f3:81:e4:9c:3c:95:48:fb:b3: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.8.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58118 Signature Algorithm: sha256WithRSAEncryption 94:a2:5e:64:12:31:7a:63:51:34:2c:e7:2d:14:82:b9:d7:4c: 50:c2:be:01:82:50:a3:23:4c:91:8c:6b:6f:25:50:19:af:05: d1:68:fc:76:94:ab:38:59:d5:65:9e:e9:8d:10:19:21:68:c6: 1b:d2:fe:47:33:16:9c:af:f7:39:51:df:98:37:de:97:07:00: 4c:e1:d4:ac:e4:ff:27:d9:fd:29:fb:02:09:8e:b2:83:73:19: 89:d7:cc:41:af:de:e9:9a:1e:37:31:96:60:2f:b8:d1:d2:c9: 03:ac:81:64:cd:a0:6c:cf:9b:f5:a9:95:06:fe:56:3b:5b:33: 25:75:44:ff:77:87:14:bc:cb:df:3e:7e:20:51:d4:10:9d:ee: 21:5b:6d:d3:0b:9d:fe:ba:e6:14:e5:6d:0f:28:5e:92:28:a5: 51:da:fd:74:da:7a:54:28:9a:e2:f2:2a:02:d9:0a:78:b2:39: d0:8d:79:b8:08:63:0b:47:92:da:1d:8e:10:71:67:75:32:7d: bd:17:3f:36:5c:82:d0:43:85:ec:a5:10:c4:9c:78:42:ed:a7: 35:e6:0c:28:e8:05:5d:e9:21:43:24:f6:a6:38:4b:9b:39:53: 0e:6f:72:2c:d9:c8:48:15:80:0b:09:2b:4e:38:76:33:e2:6d: 9e:30:2b:ba -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt4o1i784PyDYBFYrVlTHJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE3OGUzOGJiOGVmOThiYmYyYjMxYjg5NjM5N2Y0ODc5ZjZiMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/JW/QTWRWoDoMu34gvRTlR9BGnT y2hfK8/AnKXLFlA5dVQ5KRRl1ey1HpMpjod88c64+GK+8gFw3ZKFXgENjMNownkm L4NMLW3e1nzU2aTl6wQlZ5fJPfKhX2ilOpALYuPUX3hqBWIKrnBRQJjLfMOb+0mz 46kctJucKKgz5Upv2b+ZcRrG0dXuU+hH5b+U8pXwAPp6P5b46TXuGkjqI4+oQWU9 GqMx+vJu+IEiJQT3SuLUogN9Z+/YgS8srgdGGXDpebARon3zAM0FcIz5LvrhHm27 oS6DAtn8HN+M/O6rW3/Al+RbkFpyXoO8NJft6wgcLczzgeScPJVI+7MidwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPoXjji7jvmLvysxuJY5f0h59rD3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzY2ZTA2 YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3MTQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZh LTVlNDctNGZhOS1iZDNiLTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0 bGpsX1NIbjJzUGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvvCDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMA4wYwDQYJKoZIhvcNAQELBQADggEBAJSiXmQSMXpjUTQs5y0UgrnXTFDCvgGC UKMjTJGMa28lUBmvBdFo/HaUqzhZ1WWe6Y0QGSFoxhvS/kczFpyv9zlR35g33pcH AEzh1Kzk/yfZ/Sn7AgmOsoNzGYnXzEGv3umaHjcxlmAvuNHSyQOsgWTNoGzPm/Wp lQb+VjtbMyV1RP93hxS8y98+fiBR1BCd7iFbbdMLnf665hTlbQ8oXpIopVHa/XTa elQomuLyKgLZCniyOdCNebgIYwtHktodjhBxZ3Uyfb0XPzZcgtBDheylEMSceELt pzXmDCjoBV3pIUMk9qY4S5s5Uw5vcizZyEgVgAsJK044djPibZ4wK7o= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:18 2026 by rpki-client