This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.cer (raw, json) Hash identifier: 5mmUmGvBW510lB/fTPPjISbSQqSAuBKKA03B9jWb10s= Subject key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8485533A05520CA49F6CFB813D9BA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59745 AS: 215518 IP: 45.151.92.0/22 IP: 80.66.96.0/20 IP: 185.198.200.0/22 IP: 195.20.20.0/22 IP: 217.180.58.0/23 IP: 2a0a:8ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:85:53:3a:05:52:0c:a4:9f:6c:fb:81:3d:9b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:01:4e:eb:b0:2f:3c:b7:97:39:58:33:94: d7:a3:fd:ef:08:33:b4:ed:07:c7:10:10:7a:c9:95: a9:80:c6:7f:74:b2:33:c6:9d:88:32:01:09:55:0e: 14:4c:e0:6e:94:1a:9f:69:64:05:24:6c:e7:b7:45: 55:fd:bf:38:dc:f7:3b:e8:8a:b6:c1:9b:13:bc:ec: e0:4a:09:a9:eb:79:2f:a9:53:6b:17:6d:9c:06:82: 54:de:25:75:72:b4:92:42:59:cc:52:b5:78:7a:23: 69:88:02:6d:ac:4f:53:b0:b9:56:b5:32:8c:1b:91: 60:58:30:ec:6a:42:40:e0:ab:07:6e:8a:73:40:1d: 24:6f:70:82:95:11:03:d9:82:6d:5c:e4:03:35:5a: 43:ea:06:cd:a4:76:a8:1b:a8:9b:88:d2:d3:f6:a2: 9a:34:91:57:63:9f:e4:33:3f:c7:79:c8:6b:91:3f: 6c:73:bf:ed:2a:ea:da:46:e9:14:4e:ac:74:05:84: cb:f0:e0:45:c9:bc:e0:95:87:04:17:06:b2:6e:6a: c1:ad:bc:a8:6f:13:c4:c6:e2:b0:b4:72:e4:ef:0b: 7b:14:78:90:94:fc:a5:bd:4d:f0:6f:07:1c:ca:a7: 8e:1c:4a:ad:d6:ab:8c:5b:67:7b:d7:6b:f1:1b:ad: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.92.0/22 80.66.96.0/20 185.198.200.0/22 195.20.20.0/22 217.180.58.0/23 IPv6: 2a0a:8ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59745 215518 Signature Algorithm: sha256WithRSAEncryption 22:2a:01:13:ae:84:d2:07:c2:3a:0f:a2:d7:47:ef:26:81:bb: 41:d6:13:1e:11:0f:68:22:6d:45:74:5f:cc:dd:09:66:f8:80: 1c:7b:e1:b1:6a:78:a3:4a:d0:0b:ba:2c:32:14:ca:ff:a1:ac: 2d:7b:7a:97:7f:ee:fb:cb:fa:bf:94:01:20:7f:f9:ab:0f:c0: 27:88:59:e3:a0:1b:2f:e2:3b:34:00:68:99:64:3b:64:28:9f: f4:8f:ca:9e:5b:49:88:82:34:0c:28:6d:97:20:39:19:f7:16: 3d:c2:f6:ef:f1:c3:27:dc:7f:dc:62:cd:fc:6f:43:58:6f:95: dd:a7:78:f2:8c:5c:40:14:a6:01:93:84:bf:b0:95:9d:2c:6a: 3a:a8:ed:3d:7b:2f:94:62:04:fa:86:d3:f3:76:a7:cd:20:5c: 8c:e2:c5:b3:0f:d8:ca:5d:f0:ca:08:13:62:0d:09:3e:b1:1f: 1e:f7:13:cf:b8:58:ff:e4:b9:ea:ba:0d:66:61:4c:b5:7f:42: 53:99:39:c9:47:57:41:3c:41:ee:f8:58:57:dc:96:24:b9:83: 1e:9b:ee:e9:b3:d7:a7:94:e6:f3:58:5c:3f:e8:18:ee:b8:ae: 5a:b2:55:75:83:c8:e6:86:c9:c2:48:6c:b3:48:9c:e5:73:61: 43:94:16:e9 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/hIVTOgVSDKSfbPuBPZuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGMzYjEyYzhkNjM1MTkwZWM5Mjg0MzdiYmQ2Y2IwZThjMzhmOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7EBTuuwLzy3lzlYM5TXo/3vCDO0 7QfHEBB6yZWpgMZ/dLIzxp2IMgEJVQ4UTOBulBqfaWQFJGznt0VV/b843Pc76Iq2 wZsTvOzgSgmp63kvqVNrF22cBoJU3iV1crSSQlnMUrV4eiNpiAJtrE9TsLlWtTKM G5FgWDDsakJA4KsHbopzQB0kb3CClRED2YJtXOQDNVpD6gbNpHaoG6ibiNLT9qKa NJFXY5/kMz/HechrkT9sc7/tKuraRukUTqx0BYTL8OBFybzglYcEFwaybmrBrbyo bxPExuKwtHLk7wt7FHiQlPylvU3wbwccyqeOHEqt1quMW2d712vxG62bfwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzJmYjU5 My00M2Y1LTRkYjctOTgxOS0wZjlkNTdhNWQ0ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMmZiNTkz LTQzZjUtNGRiNy05ODE5LTBmOWQ1N2E1ZDRmYS8xLzFNT3hMSTFqVVpEc2tvUTN1 OWJMRG93NC1hay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLZdcAwQEUEJgAwQCucbIAwQCwxQUAwQB2bQ6 MA0EAgACMAcDBQMqCo7AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDpYQIDA0ne MA0GCSqGSIb3DQEBCwUAA4IBAQAiKgETroTSB8I6D6LXR+8mgbtB1hMeEQ9oIm1F dF/M3Qlm+IAce+GxanijStALuiwyFMr/oawte3qXf+77y/q/lAEgf/mrD8AniFnj oBsv4js0AGiZZDtkKJ/0j8qeW0mIgjQMKG2XIDkZ9xY9wvbv8cMn3H/cYs38b0NY b5Xdp3jyjFxAFKYBk4S/sJWdLGo6qO09ey+UYgT6htPzdqfNIFyM4sWzD9jKXfDK CBNiDQk+sR8e9xPPuFj/5Lnqug1mYUy1f0JTmTnJR1dBPEHu+FhX3JYkuYMem+7p s9enlObzWFw/6BjuuK5aslV1g8jmhsnCSGyzSJzlc2FDlBbp -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:30 2026 by rpki-client