This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer (raw, json) Hash identifier: Oh+rsltCdDldpwA69mDkSDGQga5+HOh6CzOpzti2IMM= Subject key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834AE65AF3F39BD5928CE8C68D6C146 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209435 IP: 5.253.172.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ae:65:af:3f:39:bd:59:28:ce:8c:68:d6:c1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fab796d980fa60fe2514fce62646f45d12c95165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:94:96:5a:d4:c5:a9:61:8b:44:1b:ae:e5: a7:8e:fc:a3:24:29:2d:0e:69:2f:ba:48:ad:57:1d: f8:ae:23:5b:b8:93:a1:f9:22:e2:64:dd:2a:bb:a9: df:da:18:c1:94:a4:32:bc:8a:69:3f:04:15:96:b6: cc:73:78:5d:cf:72:37:21:8d:bf:e7:8b:f7:a3:67: 96:5e:3f:1b:e3:81:46:4e:87:b2:45:44:85:b1:a6: af:b8:0b:9d:5f:47:36:1c:79:4c:26:21:34:54:52: 8a:84:ab:bc:fb:c4:62:67:97:5c:02:3b:f3:b2:92: c2:88:b3:ad:ee:3f:b6:71:66:60:07:bc:21:25:65: 65:a0:9f:71:b9:5a:02:d5:c6:5c:e9:45:8f:04:bb: a4:79:76:c0:50:20:3e:f8:d2:1f:3b:83:d7:54:79: 78:fc:73:67:e9:f6:c9:f2:80:fb:68:41:82:26:09: 9b:f5:92:2d:27:7e:ad:a3:a8:b8:0e:7c:36:04:0a: 79:0b:e9:4d:f4:d7:e0:c9:ce:d7:b4:0d:a7:76:ba: dc:d6:8f:de:ac:81:a5:53:36:3b:41:d3:99:9c:d3: ce:57:b7:5f:b6:a0:4f:a1:73:9f:ea:1f:95:69:b3: cd:73:a8:d5:3d:aa:af:79:0f:98:0e:95:49:27:13: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209435 Signature Algorithm: sha256WithRSAEncryption 3b:a8:db:2a:89:cd:e6:50:68:f3:4f:ee:eb:d8:f2:3f:ed:1d: 51:ba:35:6d:a0:76:fc:d2:f3:bd:af:ae:c9:76:5c:7f:c2:d8: 67:69:3f:b4:1d:ba:79:79:b5:3c:da:b6:da:ba:db:ae:ad:33: cf:2d:18:49:4b:97:99:29:45:11:a9:8f:83:30:4f:68:6b:9a: 11:03:c0:d9:aa:c3:4e:54:e5:b8:18:37:4c:94:6e:29:58:87: f6:7b:99:dd:0b:30:b8:70:27:74:c5:2b:27:6a:f3:fd:39:49: 39:5e:7f:4e:ba:de:c8:72:5d:e7:6e:4d:2c:80:46:cb:ce:fd: 92:e2:bf:32:8c:61:38:3d:d4:8b:50:d4:5b:34:08:06:14:22: c4:e4:42:d6:9c:1f:b3:1a:cd:78:0f:15:d4:fe:db:f2:9e:92: d4:ca:9a:ab:d7:94:78:32:5b:61:cb:47:f2:fd:dc:a1:da:aa: 27:a5:1a:da:49:de:49:d8:e4:df:b2:b0:31:d0:b9:80:4e:d9: 0b:48:80:41:ef:83:01:ae:b6:19:51:88:6e:37:bf:88:be:e2: 03:cc:7a:21:a5:eb:59:64:2a:9c:20:0e:73:ef:bf:80:e2:11: ee:e5:86:f3:09:51:e6:d2:1c:bd:17:61:7a:ca:b1:65:74:17: 30:4d:db:77 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt4NK5lrz85vVkozoxo1sFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWI3OTZkOTgwZmE2MGZlMjUxNGZjZTYyNjQ2ZjQ1ZDEyYzk1MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRCUllrUxalhi0QbruWnjvyjJCkt DmkvukitVx34riNbuJOh+SLiZN0qu6nf2hjBlKQyvIppPwQVlrbMc3hdz3I3IY2/ 54v3o2eWXj8b44FGToeyRUSFsaavuAudX0c2HHlMJiE0VFKKhKu8+8RiZ5dcAjvz spLCiLOt7j+2cWZgB7whJWVloJ9xuVoC1cZc6UWPBLukeXbAUCA++NIfO4PXVHl4 /HNn6fbJ8oD7aEGCJgmb9ZItJ36to6i4Dnw2BAp5C+lN9Nfgyc7XtA2ndrrc1o/e rIGlUzY7QdOZnNPOV7dftqBPoXOf6h+VabPNc6jVPaqveQ+YDpVJJxP9kwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPq3ltmA+mD+JRT85iZG9F0SyVFlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzk3Zjg5 ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNiMGIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODll LTgyYjUtNDQyYi1iNjcyLTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHpt SmtiMFhSTEpVV1UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAgX9rDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMhswDQYJKoZIhvcNAQELBQADggEBADuo2yqJzeZQaPNP7uvY8j/tHVG6NW2g dvzS872vrsl2XH/C2GdpP7Qdunl5tTzattq6266tM88tGElLl5kpRRGpj4MwT2hr mhEDwNmqw05U5bgYN0yUbilYh/Z7md0LMLhwJ3TFKydq8/05STlef0663shyXedu TSyARsvO/ZLivzKMYTg91ItQ1Fs0CAYUIsTkQtacH7MazXgPFdT+2/KektTKmqvX lHgyW2HLR/L93KHaqielGtpJ3knY5N+ysDHQuYBO2QtIgEHvgwGuthlRiG43v4i+ 4gPMeiGl61lkKpwgDnPvv4DiEe7lhvMJUebSHL0XYXrKsWV0FzBN23c= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:17 2026 by rpki-client