This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer File: 1AYg6l2vilSq6hfyy57N8114UwY.cer (raw, json) Hash identifier: 4xrDaUEkNtx4hvzE9JbswkpKbw8eCtT3MOTZo8rRZbQ= Subject key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36EF55760DF40FE751426B47818AA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211289 IP: 5.181.52.0/24 IP: 2a05:3440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ef:55:76:0d:f4:0f:e7:51:42:6b:47:81:8a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:e6:57:41:a6:63:4c:88:63:68:6d:a1:75: 23:81:be:85:24:e4:81:fc:bf:b3:c7:fa:88:74:30: 27:78:74:97:9e:f0:aa:2e:0d:33:b8:e6:b7:31:82: f4:5a:17:d2:5f:c5:2d:e3:81:41:94:23:20:af:a4: e5:92:97:ba:d2:9e:2f:2f:b8:e3:8b:7b:57:a7:c4: 98:11:c5:de:e0:fa:df:f8:df:f5:ff:32:64:68:5c: 10:27:b6:33:2a:52:21:d6:cd:1a:f2:71:bf:65:e1: 6f:4e:9c:a2:ae:f3:3d:ce:f9:46:62:6e:2d:72:0a: 32:70:a0:37:83:93:b3:ad:bd:01:95:1c:df:9a:94: d0:a3:f7:f6:66:78:c0:83:a7:6e:a8:81:7f:60:40: 55:18:1e:19:20:f5:fc:0c:5f:33:f4:b8:37:1f:57: 68:74:f6:94:6f:93:17:f4:c7:31:f1:b5:05:4c:50: 0d:e5:fa:4d:a1:18:a7:6c:f6:a9:7d:81:d6:a2:ec: 43:5c:38:e2:46:30:b5:2c:a4:83:36:50:0a:eb:53: f1:b4:49:41:a0:0e:05:fa:ca:7b:82:94:ec:a1:5e: ae:6d:42:62:67:8d:69:40:ff:43:03:e4:1b:5f:39: 46:95:05:fa:0d:e5:ed:12:b3:4a:cf:7f:38:b6:b2: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.52.0/24 IPv6: 2a05:3440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211289 Signature Algorithm: sha256WithRSAEncryption 8b:22:94:a0:3a:86:14:fc:9a:38:24:24:94:e9:45:9a:fd:6b: eb:1e:83:42:2f:41:56:a4:fb:1c:31:62:0e:12:fd:fb:99:09: 2a:30:44:e3:fb:49:33:8a:e3:c4:d2:1b:a6:09:09:ba:bc:61: a1:c8:48:0c:6e:f8:39:29:5c:80:e4:c0:57:68:41:5f:e4:71: d8:64:1b:92:13:6e:00:42:64:25:ee:02:35:9b:42:88:ec:35: a4:2f:6c:17:a5:bb:f2:97:1d:6c:a5:1d:4b:5d:a4:6a:41:8b: 20:80:84:69:e8:5d:ec:57:85:f9:aa:ad:c3:95:e6:9e:92:68: 57:df:96:4c:bf:6a:0a:90:5d:55:92:df:e7:ae:a3:39:28:fe: 0e:e8:2b:8b:a7:c8:e4:4f:6c:8c:55:38:f5:fd:14:d3:c7:6c: a0:7e:42:10:c9:9e:ba:32:0d:76:a2:23:81:30:cd:ff:1f:1a: 9f:fe:c3:8a:de:97:f7:a6:a7:cc:9b:81:74:c7:90:ea:72:2e: c5:56:d1:47:b3:db:f7:9a:dd:7e:4a:32:12:72:36:f7:6c:b1: e5:b1:a7:42:59:61:ca:17:85:0e:0e:90:5b:3f:3f:33:85:1d: f6:0b:89:bd:ac:c0:54:a8:06:63:7c:d0:1f:cb:5f:c0:8b:f6: ef:87:4f:02 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Nu9Vdg30D+dRQmtHgYqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA2MjBlYTVkYWY4YTU0YWFlYTE3ZjJjYjllY2RmMzVkNzg1MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl3mV0GmY0yIY2htoXUjgb6FJOSB /L+zx/qIdDAneHSXnvCqLg0zuOa3MYL0WhfSX8Ut44FBlCMgr6Tlkpe60p4vL7jj i3tXp8SYEcXe4Prf+N/1/zJkaFwQJ7YzKlIh1s0a8nG/ZeFvTpyirvM9zvlGYm4t cgoycKA3g5Ozrb0BlRzfmpTQo/f2ZnjAg6duqIF/YEBVGB4ZIPX8DF8z9Lg3H1do dPaUb5MX9Mcx8bUFTFAN5fpNoRinbPapfYHWouxDXDjiRjC1LKSDNlAK61PxtElB oA4F+sp7gpTsoV6ubUJiZ41pQP9DA+QbXzlGlQX6DeXtErNKz384trKNowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNQGIOpdr4pUquoX8suezfNdeFMGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzc5OGZj NS1iNTRjLTQxYzEtOGFmZS1mMDllNDZjNjliZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNzk4ZmM1 LWI1NGMtNDFjMS04YWZlLWYwOWU0NmM2OWJmOC8xLzFBWWc2bDJ2aWxTcTZoZnl5 NTdOODExNFV3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQABbU0MA0EAgACMAcDBQMqBTRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5WTANBgkqhkiG9w0BAQsFAAOCAQEAiyKUoDqGFPya OCQklOlFmv1r6x6DQi9BVqT7HDFiDhL9+5kJKjBE4/tJM4rjxNIbpgkJurxhochI DG74OSlcgOTAV2hBX+Rx2GQbkhNuAEJkJe4CNZtCiOw1pC9sF6W78pcdbKUdS12k akGLIICEaehd7FeF+aqtw5XmnpJoV9+WTL9qCpBdVZLf566jOSj+Dugri6fI5E9s jFU49f0U08dsoH5CEMmeujINdqIjgTDN/x8an/7Dit6X96anzJuBdMeQ6nIuxVbR R7Pb95rdfkoyEnI292yx5bGnQllhyheFDg6QWz8/M4Ud9guJvazAVKgGY3zQH8tf wIv274dPAg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:45 2026 by rpki-client