This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer File: 152kZWFcYAlDcIM4ktqEyIbhxO8.cer (raw, json) Hash identifier: 2QMsLjM9RzW4uMAlrG3EJfmbTEPT6A8sCEm+MNwaMIM= Subject key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED45042AB78EBDAA4F166B592D07E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16004 AS: 61968 IP: 185.1.186.0/24 IP: 185.1.231.0/24 IP: 185.188.80.0/22 IP: 217.29.64.0/20 IP: 2001:7f8:b::/48 IP: 2001:7f8:101::/48 IP: 2001:1ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:04:2a:b7:8e:bd:aa:4f:16:6b:59:2d:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d79da465615c60094370833892da84c886e1c4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1b:a8:24:bc:63:a1:0f:81:af:c6:06:fd:8f: a0:79:45:82:e5:02:6d:56:8f:fa:8a:67:ec:32:9e: a0:ca:d2:ce:a7:e2:af:84:26:3f:71:02:63:c2:e4: 6e:81:5b:a3:5c:66:37:46:6a:55:a9:6f:a8:d7:73: 2c:75:8b:08:d2:92:e9:b2:c8:24:42:b4:e2:58:c7: cd:37:e0:d0:86:f0:11:07:e4:ae:98:37:bb:d0:23: cd:0a:b2:92:13:ba:78:51:c9:5f:1c:c5:92:3f:18: 45:5b:5c:b1:17:bc:ce:16:8f:ce:41:2c:02:12:9d: bd:6a:13:c8:c2:f0:fd:79:bf:eb:14:f3:c3:f3:70: ce:46:c2:75:9b:30:27:cc:70:26:f0:6c:b5:b3:38: 08:72:43:83:af:b4:30:ce:56:a5:cb:40:33:68:45: f4:24:21:14:fc:9c:43:a2:98:80:ce:b6:94:38:20: d6:3c:be:c5:b9:45:f8:d5:53:b6:b4:42:77:d9:ef: a9:9f:e7:fa:cd:3e:f1:ce:9c:b1:fc:bb:ec:55:04: a8:fb:9f:22:f1:38:13:f0:14:c8:46:cf:68:2c:a7: c1:2a:72:81:f1:8d:b3:20:40:94:e4:67:2d:d7:3b: 5d:6f:92:93:f7:3d:de:b1:cb:49:26:9c:a7:68:78: 63:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.186.0/24 185.1.231.0/24 185.188.80.0/22 217.29.64.0/20 IPv6: 2001:7f8:b::/48 2001:7f8:101::/48 2001:1ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16004 61968 Signature Algorithm: sha256WithRSAEncryption 78:10:3e:33:ed:6e:5e:46:69:be:4e:61:bb:aa:33:0c:31:81: fb:c0:af:d0:08:07:ba:a6:51:10:e5:b9:51:66:71:44:11:83: a4:32:85:06:76:fb:78:fd:da:48:77:05:5e:5a:ab:59:84:7e: a4:5c:d2:84:20:be:fc:00:54:9a:22:10:15:92:c0:48:ee:a4: 24:de:9b:ae:da:73:6c:38:d0:7b:29:6a:fa:17:83:bd:37:a7: b2:c6:16:65:0c:75:b4:06:ea:f4:55:70:53:37:df:d3:7b:92: 62:cd:bc:6e:3a:cc:e3:9e:10:d5:bd:56:35:97:fe:a5:00:c5: bb:ef:bc:3c:bb:fe:38:9d:19:22:31:c3:16:26:8e:a4:7b:de: 9c:44:1c:06:e9:08:c3:15:34:d0:63:a4:23:90:e2:89:9c:d7: 9f:7b:00:dd:2b:98:13:2c:19:1f:3a:47:6d:6b:58:f4:d2:ae: 86:fe:31:15:77:65:3e:ff:d0:53:4e:1c:b5:93:86:1f:a7:17: e3:59:2b:e4:f0:fc:b7:33:0c:e3:12:61:b7:af:46:55:a5:37: 92:80:54:5a:a7:70:9a:d1:0d:0c:c3:69:95:1d:49:42:83:4b: 2e:36:ab:38:ee:6a:4b:f3:40:cc:36:f6:89:04:c6:2e:2f:47: de:9b:65:1b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt57UUEKreOvapPFmtZLQfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzlkYTQ2NTYxNWM2MDA5NDM3MDgzMzg5MmRhODRjODg2ZTFjNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8huoJLxjoQ+Br8YG/Y+geUWC5QJt Vo/6imfsMp6gytLOp+KvhCY/cQJjwuRugVujXGY3RmpVqW+o13MsdYsI0pLpssgk QrTiWMfNN+DQhvARB+SumDe70CPNCrKSE7p4UclfHMWSPxhFW1yxF7zOFo/OQSwC Ep29ahPIwvD9eb/rFPPD83DORsJ1mzAnzHAm8Gy1szgIckODr7Qwzlaly0AzaEX0 JCEU/JxDopiAzraUOCDWPL7FuUX41VO2tEJ32e+pn+f6zT7xzpyx/LvsVQSo+58i 8TgT8BTIRs9oLKfBKnKB8Y2zIECU5Gct1ztdb5KT9z3esctJJpynaHhj5wIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFNedpGVhXGAJQ3CDOJLahMiG4cTvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2Q3OWM5 OC1jMjdkLTQ1YjMtODZkOS1kYWQzYmIxM2MwYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZDc5Yzk4 LWMyN2QtNDViMy04NmQ5LWRhZDNiYjEzYzBhMi8xLzE1MmtaV0ZjWUFsRGNJTTRr dHFFeUliaHhPOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAeBAIAATAYAwQAuQG6AwQAuQHnAwQCubxQAwQE2R1AMB8EAgAC MBkDBwAgAQf4AAsDBwAgAQf4AQEDBQAgARrAMB4GCCsGAQUFBwEIAQH/BA8wDaAL MAkCAj6EAgMA8hAwDQYJKoZIhvcNAQELBQADggEBAHgQPjPtbl5Gab5OYbuqMwwx gfvAr9AIB7qmURDluVFmcUQRg6QyhQZ2+3j92kh3BV5aq1mEfqRc0oQgvvwAVJoi EBWSwEjupCTem67ac2w40HspavoXg703p7LGFmUMdbQG6vRVcFM339N7kmLNvG46 zOOeENW9VjWX/qUAxbvvvDy7/jidGSIxwxYmjqR73pxEHAbpCMMVNNBjpCOQ4omc 1597AN0rmBMsGR86R21rWPTSrob+MRV3ZT7/0FNOHLWThh+nF+NZK+Tw/LczDOMS YbevRlWlN5KAVFqncJrRDQzDaZUdSUKDSy42qzjuakvzQMw29okExi4vR96bZRs= -----END CERTIFICATE-----Generated at Sat Jan 10 07:02:52 2026 by rpki-client