This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer (raw, json) Hash identifier: bJslxj5MTSMah96e/5lFK8A+Dfe1fufGf0JCztduGM4= Subject key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11C291DEDAA8407BB7DBDD76A7AFC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.27.228.0/22 IP: 185.168.141.0/24 IP: 2a10:65c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c2:91:de:da:a8:40:7b:b7:db:dd:76:a7:af:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:24:16:7c:62:27:1a:f1:8d:87:f8:7b:4d: 98:77:93:85:21:33:01:86:2a:7c:62:0a:08:a6:bd: 2a:63:31:28:1c:51:0c:fc:38:bb:53:97:e7:db:a1: d0:e7:d0:0c:bf:a7:1d:bc:eb:84:0a:02:4a:0c:9f: db:ac:e2:0d:ac:cc:eb:02:ca:5e:ed:ed:fe:d4:48: 0b:7c:03:84:d9:a9:b8:d1:39:52:01:f3:5d:3b:78: 4e:b5:f4:bb:b1:28:3d:d9:13:b0:04:17:1e:a7:c4: 51:78:0d:21:4b:61:d5:56:1a:9b:83:a7:85:44:09: 27:1f:5a:d2:ed:b7:6d:91:5d:f8:5e:55:90:66:e6: 17:e1:2e:31:53:05:dc:c9:2e:c0:c7:d5:d3:de:d4: 22:af:18:c0:10:fe:d3:ec:0f:4a:fd:6d:17:da:ee: 2c:22:dd:8d:fe:27:73:74:29:28:a2:30:61:6b:ea: f1:4c:05:d2:28:f7:88:30:46:70:6c:26:5e:2a:6b: 4b:75:84:0b:e7:08:1c:4b:73:ef:66:c5:75:a9:98: a2:5f:be:e4:fc:7e:57:7b:da:2f:65:c2:70:1c:42: 77:a3:98:28:b4:25:e5:ea:f1:2b:12:ad:3e:b8:0d: fd:dd:9c:dd:32:97:7e:41:56:88:0c:65:08:b5:55: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.228.0/22 185.168.141.0/24 IPv6: 2a10:65c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:a3:0f:20:8d:12:e8:02:21:20:f1:e1:7e:d6:2a:47:48:1c: ae:44:c3:ba:18:3f:19:e5:c0:b7:70:02:05:37:7b:57:51:d6: a1:86:27:e2:95:09:9c:ab:d0:63:76:3c:a3:bc:09:b9:7d:6d: 0b:35:63:29:1b:3f:42:f7:78:e5:d2:7d:2d:46:f0:0a:51:24: 1b:4c:19:24:ec:61:6d:ab:f1:ba:a3:95:7b:a7:d6:a8:20:7f: b5:81:c0:3a:3f:ea:4a:6d:c4:b4:3f:85:d2:bc:b5:c1:d1:ba: a3:be:bb:02:a3:de:6c:c9:59:81:ae:63:5d:fa:70:50:0e:a1: 09:4d:18:b7:d1:6b:67:50:33:12:92:69:ab:5a:71:7c:a3:a7: 52:fe:f9:43:bd:fd:bf:4f:75:29:45:6e:ce:be:43:a6:0c:67: 6e:f7:ea:83:7e:b4:92:a9:ec:16:9f:80:89:1f:55:5a:1d:62: fd:d4:ae:f4:43:70:f7:a8:66:11:dd:29:89:b2:8e:41:a3:b6: 38:b0:84:94:98:7b:23:c4:0f:b1:07:05:d6:c3:30:4c:19:1c: bc:ce:83:ec:23:f6:76:3b:a3:1a:d2:d1:6d:33:6a:c5:fe:e2: 1e:79:32:3d:03:31:e1:d8:f0:8a:99:1b:7d:c8:7e:fe:c0:3e: cc:02:2a:53 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt8EcKR3tqoQHu32912p6/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjFmY2U5YWE3MmM4Mzg0OTZmNGJkZWY5YzFmMGI4ZTg5NGZjOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKAkFnxiJxrxjYf4e02Yd5OFITMB hip8YgoIpr0qYzEoHFEM/Di7U5fn26HQ59AMv6cdvOuECgJKDJ/brOINrMzrAspe 7e3+1EgLfAOE2am40TlSAfNdO3hOtfS7sSg92ROwBBcep8RReA0hS2HVVhqbg6eF RAknH1rS7bdtkV34XlWQZuYX4S4xUwXcyS7Ax9XT3tQirxjAEP7T7A9K/W0X2u4s It2N/idzdCkoojBha+rxTAXSKPeIMEZwbCZeKmtLdYQL5wgcS3PvZsV1qZiiX77k /H5Xe9ovZcJwHEJ3o5gotCXl6vErEq0+uA393ZzdMpd+QVaIDGUItVUmeQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFPsfzpqnLIOElvS975wfC46JT8mOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzU2NTVm NS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5MTQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1 LTAxNDEtNGYzZC1hNTBjLWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2 bkI4TGpvbFB5WTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAlEb5AMEALmojTANBAIAAjAHAwUDKhBlwDAN BgkqhkiG9w0BAQsFAAOCAQEAUqMPII0S6AIhIPHhftYqR0gcrkTDuhg/GeXAt3AC BTd7V1HWoYYn4pUJnKvQY3Y8o7wJuX1tCzVjKRs/Qvd45dJ9LUbwClEkG0wZJOxh bavxuqOVe6fWqCB/tYHAOj/qSm3EtD+F0ry1wdG6o767AqPebMlZga5jXfpwUA6h CU0Yt9FrZ1AzEpJpq1pxfKOnUv75Q739v091KUVuzr5Dpgxnbvfqg360kqnsFp+A iR9VWh1i/dSu9ENw96hmEd0pibKOQaO2OLCElJh7I8QPsQcF1sMwTBkcvM6D7CP2 djujGtLRbTNqxf7iHnkyPQMx4djwipkbfch+/sA+zAIqUw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:06 2026 by rpki-client