This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer (raw, json) Hash identifier: U8vUpWzPtA5E0+EvraP5fKnFCAoBGmSZidJXt26pH7s= Subject key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8047962A44C93FE9DA2428A26EEA40 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.235.15.0/24 IP: 103.54.88.0/22 IP: 103.126.48.0/23 IP: 103.209.228.0/23 IP: 217.65.75.0/24 IP: 2a00:9940::/29 IP: 2a04:e880::/29 IP: 2a06:4b80::/29 IP: 2a06:8540::/29 IP: 2a06:9dc0::/29 IP: 2a07:35c0::/29 IP: 2a09:2340::/29 IP: 2a0a:6cc0::/29 IP: 2a0a:cfc0::/29 IP: 2a0c:52c0::/29 IP: 2a0d:8180::/29 IP: 2a0d:c500::/29 IP: 2a0d:fd80::/29 IP: 2a0e:3dc0::/29 IP: 2a0e:7fc0::/29 IP: 2a0f:f9c0::/29 IP: 2a10:c80::/29 IP: 2a10:5480::/29 IP: 2a10:7b80::/29 IP: 2a11:3f40::/29 IP: 2a14:2b80::/29 IP: 2a14:5c80::/29 IP: 2a14:6580::/29 IP: 2a14:7080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:96:2a:44:c9:3f:e9:da:24:28:a2:6e:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4074714142f83970148fab0ec3e2117c393c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:3b:ab:4b:9a:ff:7d:1d:52:82:da:7c:b7: b6:25:51:65:00:f5:f3:2d:f6:02:03:9b:a4:1e:65: f2:25:91:5f:32:74:78:b2:6f:9e:dd:ed:57:4e:e5: 79:13:2b:30:15:7a:2b:bc:dc:73:55:97:d4:07:81: 89:09:04:dc:a7:21:7b:fa:2b:fd:95:95:39:69:6e: 6c:43:1e:6a:d8:09:f0:14:ac:6c:a2:a3:4e:06:f0: 71:c5:c9:6f:64:86:2a:df:2c:81:16:2a:65:f8:7c: ca:71:1c:52:44:12:14:e9:a7:5a:99:a0:b2:d0:ff: 33:cd:86:ce:a3:f9:a7:e4:a6:a5:f7:0d:f6:e7:b6: 5f:25:96:82:44:32:6f:84:f8:73:2d:8d:4c:67:7e: 93:3d:55:79:e3:84:3b:29:73:d1:9b:26:a4:99:f3: 57:aa:87:ca:f4:ab:48:bd:29:20:1e:ab:45:2a:fe: ca:f1:f7:9a:17:ae:28:81:53:0b:28:44:02:27:44: 26:96:b5:0e:53:ac:99:ae:49:2c:ae:ea:70:4b:4c: e2:8a:1d:3a:6c:aa:62:6a:48:c5:30:22:43:7c:1c: d1:84:ce:ca:aa:ff:5a:3d:33:84:88:f5:12:be:f8: 7e:f9:94:81:45:fc:2d:74:d5:9c:a0:8a:dc:ea:82: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.15.0/24 103.54.88.0/22 103.126.48.0/23 103.209.228.0/23 217.65.75.0/24 IPv6: 2a00:9940::/29 2a04:e880::/29 2a06:4b80::/29 2a06:8540::/29 2a06:9dc0::/29 2a07:35c0::/29 2a09:2340::/29 2a0a:6cc0::/29 2a0a:cfc0::/29 2a0c:52c0::/29 2a0d:8180::/29 2a0d:c500::/29 2a0d:fd80::/29 2a0e:3dc0::/29 2a0e:7fc0::/29 2a0f:f9c0::/29 2a10:c80::/29 2a10:5480::/29 2a10:7b80::/29 2a11:3f40::/29 2a14:2b80::/29 2a14:5c80::/29 2a14:6580::/29 2a14:7080::/29 Signature Algorithm: sha256WithRSAEncryption aa:bf:b0:7f:3a:a0:b4:da:2c:1a:d9:e6:8e:0f:03:69:b9:6c: 72:f9:9f:13:22:00:47:1a:86:2c:ad:21:34:3f:c0:ca:34:f5: 7b:03:88:6f:51:63:6c:5f:de:aa:c8:8f:35:b1:d5:59:70:e7: 12:ba:f2:69:1f:b8:6c:3f:82:56:83:ec:e5:c5:b0:9c:5f:ff: 8a:d8:73:21:12:b6:53:1c:66:b3:76:31:7b:c0:d5:ab:cf:7c: c0:59:36:91:f4:79:80:3d:3b:2f:ed:b7:9d:ca:4a:c7:5e:c6: 1c:0d:eb:07:95:35:95:fc:9f:dc:72:8d:77:4d:3e:25:4f:4a: ad:a8:0b:46:d4:4c:79:90:16:b3:e7:9e:55:be:94:a2:99:ae: 75:1d:1e:84:b9:19:1f:4a:7f:df:74:3d:9d:f3:88:49:1b:be: 0f:c9:19:47:6e:0c:9b:f0:30:16:91:e2:9d:35:3f:8a:01:c7: ca:d5:3b:11:eb:3b:5f:b9:67:99:69:87:b4:9a:ae:04:16:6d: 15:21:19:5f:35:89:48:f4:87:f9:54:ba:bf:6a:e0:94:11:28: f8:58:20:c2:ab:f3:eb:d1:ed:71:50:0b:e8:35:14:fc:d4:76: e0:47:09:ba:68:a0:b6:74:fb:5c:84:89:c4:70:76:9e:0a:37: a3:0f:f4:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZt8gEeWKkTJP+naJCiibupAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA3NDcxNDE0MmY4Mzk3MDE0OGZhYjBlYzNlMjExN2MzOTNjNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXA7q0ua/30dUoLafLe2JVFlAPXz LfYCA5ukHmXyJZFfMnR4sm+e3e1XTuV5EyswFXorvNxzVZfUB4GJCQTcpyF7+iv9 lZU5aW5sQx5q2AnwFKxsoqNOBvBxxclvZIYq3yyBFipl+HzKcRxSRBIU6adamaCy 0P8zzYbOo/mn5Kal9w3257ZfJZaCRDJvhPhzLY1MZ36TPVV544Q7KXPRmyakmfNX qofK9KtIvSkgHqtFKv7K8feaF64ogVMLKEQCJ0QmlrUOU6yZrkksrupwS0ziih06 bKpiakjFMCJDfBzRhM7Kqv9aPTOEiPUSvvh++ZSBRfwtdNWcoIrc6oJi1wIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFNQHRxQUL4OXAUj6sOw+IRfDk8SRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2ExZmY0 Yy1hNThmLTRlZTMtOThlOS1kNzljZTJkZWVhNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYTFmZjRj LWE1OGYtNGVlMy05OGU5LWQ3OWNlMmRlZWE3MC8xLzFBZEhGQlF2ZzVjQlNQcXc3 RDRoRjhPVHhKRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHrBggrBgEF BQcBBwEB/wSB2zCB2DAkBAIAATAeAwQALusPAwQCZzZYAwQBZ34wAwQBZ9HkAwQA 2UFLMIGvBAIAAjCBqAMFAyoAmUADBQMqBOiAAwUDKgZLgAMFAyoGhUADBQMqBp3A AwUDKgc1wAMFAyoJI0ADBQMqCmzAAwUDKgrPwAMFAyoMUsADBQMqDYGAAwUDKg3F AAMFAyoN/YADBQMqDj3AAwUDKg5/wAMFAyoP+cADBQMqEAyAAwUDKhBUgAMFAyoQ e4ADBQMqET9AAwUDKhQrgAMFAyoUXIADBQMqFGWAAwUDKhRwgDANBgkqhkiG9w0B AQsFAAOCAQEAqr+wfzqgtNosGtnmjg8DablscvmfEyIARxqGLK0hND/AyjT1ewOI b1FjbF/eqsiPNbHVWXDnErryaR+4bD+CVoPs5cWwnF//ithzIRK2Uxxms3Yxe8DV q898wFk2kfR5gD07L+23ncpKx17GHA3rB5U1lfyf3HKNd00+JU9KragLRtRMeZAW s+eeVb6UopmudR0ehLkZH0p/33Q9nfOISRu+D8kZR24Mm/AwFpHinTU/igHHytU7 Ees7X7lnmWmHtJquBBZtFSEZXzWJSPSH+VS6v2rglBEo+Fggwqvz69HtcVAL6DUU /NR24EcJumigtnT7XISJxHB2ngo3ow/0yA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:52 2026 by rpki-client