This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer (raw, json) Hash identifier: q6ExdDB94liuDilxMvezil1KtGLztWRSzDuZUoLmgNs= Subject key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783521DF4AD216FD27A708824F889CA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204807 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:21:df:4a:d2:16:fd:27:a7:08:82:4f:88:9c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:57:e2:65:b0:3b:87:13:d4:1c:08:b5:c8: 64:27:d3:30:b7:5c:45:4a:91:18:82:17:6e:17:ef: 4d:14:bf:fd:53:85:cc:9c:2d:20:2d:db:4c:c6:c8: 03:b6:11:60:ff:92:5b:b8:a0:73:29:f1:f7:20:cf: 10:44:62:bf:f1:c0:3b:06:d6:79:30:ca:8f:aa:20: 64:d3:91:9b:c2:59:80:28:17:0c:e4:04:80:9c:f2: e4:e2:2f:64:b9:0c:c0:1e:04:f5:76:1b:fa:9b:83: 13:e1:ef:2c:f5:09:de:ce:41:70:34:cf:f0:6f:93: 60:56:16:3a:57:5e:82:cc:78:07:dc:b4:20:0f:bd: 57:f1:5b:be:17:03:12:ae:c9:a7:45:d6:c7:54:4e: 6b:dc:60:3f:df:09:ce:5c:bd:09:68:48:82:fd:70: a3:3e:08:6f:0b:07:6d:32:14:a4:c2:20:00:fc:e7: a9:6d:82:cd:87:a3:78:27:bb:ef:ca:d4:dd:ce:6a: df:0d:db:0f:dc:21:35:11:7a:f9:bb:5b:4f:c0:6a: 50:b2:bb:ec:be:35:d3:36:dc:ca:06:a7:cf:97:0a: c7:9b:b1:92:3d:83:e4:ef:a2:27:44:06:a1:4a:3b: 39:c3:ea:de:90:80:cf:6a:c7:92:8d:ed:2e:96:6a: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204807 Signature Algorithm: sha256WithRSAEncryption 3a:3a:4e:53:ca:f3:51:33:44:4d:49:ab:e3:28:24:7e:b8:72: 55:b4:25:20:d5:e5:64:74:63:08:41:c3:5a:c6:58:8a:35:47: 6f:91:c3:64:af:53:f0:f9:ef:dd:34:9b:eb:7d:c9:c2:04:ad: 2b:9c:4a:87:29:de:99:c5:1d:f3:9e:77:3d:51:00:c4:6d:42: 08:b4:4e:50:d0:ac:10:a9:a8:7d:17:3b:f5:47:96:eb:39:6d: af:67:0b:b2:57:5e:94:2d:fc:b5:34:0a:85:03:ef:27:11:ee: ec:bc:11:e8:21:f6:25:e8:79:62:d2:2c:33:49:99:7a:b9:4f: f7:5a:02:39:01:46:c8:aa:64:38:68:d5:e4:18:77:5e:cc:ca: 15:0c:ea:4c:0c:31:c5:9f:75:68:f4:53:e6:ac:92:52:02:0f: ed:ad:62:ed:4c:05:48:7c:97:ae:0c:b8:6a:87:e5:c2:5c:55: 54:88:51:c5:0f:8f:4f:2d:25:2a:7a:94:d7:f7:0d:d1:9f:91: 94:fb:fe:4f:59:ae:14:b2:49:fc:44:37:bd:85:dd:5c:3f:94: d4:52:42:21:b5:db:bd:67:cb:0d:d0:45:49:d9:f5:8d:64:19: 23:57:bd:54:cf:b7:6b:7d:ab:40:8a:15:5d:19:aa:cb:a0:69: 0a:4d:f1:09 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NSHfStIW/SenCIJPiJynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFiYjg2NTkxMThkNzUyZjFlNzM1NDVmZDhhYzczYTdkMThiMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9X4mWwO4cT1BwItchkJ9Mwt1xF SpEYghduF+9NFL/9U4XMnC0gLdtMxsgDthFg/5JbuKBzKfH3IM8QRGK/8cA7BtZ5 MMqPqiBk05GbwlmAKBcM5ASAnPLk4i9kuQzAHgT1dhv6m4MT4e8s9QnezkFwNM/w b5NgVhY6V16CzHgH3LQgD71X8Vu+FwMSrsmnRdbHVE5r3GA/3wnOXL0JaEiC/XCj PghvCwdtMhSkwiAA/OepbYLNh6N4J7vvytTdzmrfDdsP3CE1EXr5u1tPwGpQsrvs vjXTNtzKBqfPlwrHm7GSPYPk76InRAahSjs5w+rekIDPaseSje0ulmpK/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2YyYThi ZS03MjFiLTQ1NjMtOWNlMi01Y2YyMTUwOTQwNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZjJhOGJl LTcyMWItNDU2My05Y2UyLTVjZjIxNTA5NDA1ZS8xLzFSdTRaWkVZMTFMeDV6VkZf WXJIT24wWXNody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgBzANBgkqhkiG9w0BAQsFAAOCAQEAOjpOU8rzUTNE TUmr4ygkfrhyVbQlINXlZHRjCEHDWsZYijVHb5HDZK9T8Pnv3TSb633JwgStK5xK hynemcUd8553PVEAxG1CCLROUNCsEKmofRc79UeW6zltr2cLsldelC38tTQKhQPv JxHu7LwR6CH2Jeh5YtIsM0mZerlP91oCOQFGyKpkOGjV5Bh3XszKFQzqTAwxxZ91 aPRT5qySUgIP7a1i7UwFSHyXrgy4aoflwlxVVIhRxQ+PTy0lKnqU1/cN0Z+RlPv+ T1muFLJJ/EQ3vYXdXD+U1FJCIbXbvWfLDdBFSdn1jWQZI1e9VM+3a32rQIoVXRmq y6BpCk3xCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:46 2026 by rpki-client