This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer File: 1H2KqhDtz10IFAORU5l7-_TTW6k.cer (raw, json) Hash identifier: s+9zdS0Qk+OVx1IcdA8+QPPl3uXkB7V9UVzTxf4PZCU= Subject key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7065D936FD0AE109414373416A6A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213616 IP: 91.229.212.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:06:5d:93:6f:d0:ae:10:94:14:37:34:16:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:f6:b1:f6:de:1e:da:93:ba:f1:fb:a0:0b: c6:cb:9c:c6:b1:01:d9:d4:68:1e:79:fb:f9:df:6c: 44:71:9d:ad:64:31:5a:06:fd:06:61:ff:db:0b:e5: 62:87:73:fd:24:24:0f:05:7b:73:76:b5:0b:bd:b7: f4:eb:b5:47:48:95:91:43:01:70:5c:17:53:4b:f8: c2:37:e2:d8:82:27:d4:74:01:6f:18:29:75:d3:8a: 7b:2c:15:e5:5b:63:0f:4a:6c:d0:59:1b:59:49:08: 21:07:aa:29:e9:12:72:03:fb:65:a4:59:ea:23:f4: 61:ab:fb:28:8c:8c:e8:cb:1f:34:d3:07:49:26:3e: 7c:84:19:f6:f4:09:6b:2f:98:5b:79:f3:7e:58:12: 50:a7:c8:97:20:a6:4f:7c:cf:60:4f:24:7f:0f:46: 15:36:0a:f9:65:97:46:d5:74:05:30:9c:3f:40:5b: f9:75:2f:00:08:68:c1:05:aa:16:fc:26:12:1a:b2: cd:26:90:0c:e7:3b:61:08:54:2e:86:62:01:04:aa: 0b:be:18:8e:d1:1a:04:ae:83:35:db:59:84:47:2b: 61:b8:ab:0e:48:ea:6f:7a:dc:1e:99:5d:32:43:2d: 45:23:6c:2e:d0:bb:5d:2b:7c:a6:28:12:e3:9c:22: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.212.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213616 Signature Algorithm: sha256WithRSAEncryption 65:50:5d:38:eb:92:26:ff:0f:3e:8e:3f:18:34:7d:f8:06:e6: c9:63:c3:1a:ff:77:29:97:0e:95:f4:e5:cc:a6:c4:6c:3a:5c: 36:a9:dd:65:2c:1f:f3:eb:ac:75:fa:ce:ea:27:22:8a:ea:f9: a5:73:49:66:5f:a9:e6:24:5d:69:7f:33:3e:97:8b:99:e5:2c: ec:70:09:eb:57:ca:6a:4f:b7:4a:6c:ff:7b:b6:5f:4e:fd:c1: 0b:3a:25:6f:ea:4a:bd:dd:e4:f6:f0:18:2b:61:48:af:13:25: 7e:8a:69:a2:8c:9b:e1:24:32:73:e6:40:c0:5e:64:54:ce:3a: b2:99:54:ed:7d:d7:35:2c:6a:24:aa:4e:43:0f:fe:49:73:1e: f9:72:f4:e3:24:98:32:39:65:4f:9b:dc:37:53:8c:c3:18:4b: fd:18:15:87:e6:ca:cb:e7:ee:b6:e3:e6:36:15:1f:ce:c0:37: d0:d9:12:f8:de:7c:31:ca:2f:93:e6:7b:61:10:ac:67:c9:a7: b1:d3:8d:a7:e2:e3:af:32:93:89:22:37:9e:40:b7:04:70:49: 02:6d:68:f9:74:e4:fd:7d:c8:94:c8:e9:c5:fa:c2:a7:e0:0e: e4:4c:a7:7e:fc:e4:0e:eb:5f:1c:7b:0e:5b:c0:2b:25:b8:0a: 2e:1e:b1:c3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xwZdk2/QrhCUFDc0FqapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDdkOGFhYTEwZWRjZjVkMDgxNDAzOTE1Mzk5N2JmYmY0ZDM1YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WX2sfbeHtqTuvH7oAvGy5zGsQHZ 1Ggeefv532xEcZ2tZDFaBv0GYf/bC+Vih3P9JCQPBXtzdrULvbf067VHSJWRQwFw XBdTS/jCN+LYgifUdAFvGCl104p7LBXlW2MPSmzQWRtZSQghB6op6RJyA/tlpFnq I/Rhq/sojIzoyx800wdJJj58hBn29AlrL5hbefN+WBJQp8iXIKZPfM9gTyR/D0YV Ngr5ZZdG1XQFMJw/QFv5dS8ACGjBBaoW/CYSGrLNJpAM5zthCFQuhmIBBKoLvhiO 0RoEroM121mERythuKsOSOpvetwemV0yQy1FI2wu0LtdK3ymKBLjnCKzQwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNR9iqoQ7c9dCBQDkVOZe/v001upMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzZkY2M1 MC0wMjVjLTRjMjAtODY5OS1iY2VkNTc5YzBiN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNmRjYzUw LTAyNWMtNGMyMC04Njk5LWJjZWQ1NzljMGI3Yi8xLzFIMktxaER0ejEwSUZBT1JV NWw3LV9UVFc2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+XUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNCcDANBgkqhkiG9w0BAQsFAAOCAQEAZVBdOOuSJv8PPo4/GDR9+AbmyWPDGv93 KZcOlfTlzKbEbDpcNqndZSwf8+usdfrO6iciiur5pXNJZl+p5iRdaX8zPpeLmeUs 7HAJ61fKak+3Smz/e7ZfTv3BCzolb+pKvd3k9vAYK2FIrxMlfoppooyb4SQyc+ZA wF5kVM46splU7X3XNSxqJKpOQw/+SXMe+XL04ySYMjllT5vcN1OMwxhL/RgVh+bK y+futuPmNhUfzsA30NkS+N58Mcovk+Z7YRCsZ8mnsdONp+LjrzKTiSI3nkC3BHBJ Am1o+XTk/X3IlMjpxfrCp+AO5EynfvzkDutfHHsOW8ArJbgKLh6xww== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:07 2026 by rpki-client