This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer File: 1V05IYUKX_8H7KJgo275IQHy2Fw.cer (raw, json) Hash identifier: kL8Ep9s/3H3S1Y3M8qZjya/blYjJYlJMG8Q3vL1k+js= Subject key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113EE08C0BCA0368EFF364A1FB176A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44730 IP: 91.213.241.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:e0:8c:0b:ca:03:68:ef:f3:64:a1:fb:17:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d55d3921850a5fff07eca260a36ef92101f2d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:ba:c7:42:0b:e0:9e:6a:b3:f3:e2:fd:21: df:55:4c:1e:91:78:7b:ce:e1:e6:0f:18:c8:30:8e: 8c:cc:e8:58:b8:03:cb:6d:d0:72:0b:a3:c3:97:bd: 2a:38:81:41:31:22:69:d6:81:b7:da:0e:6a:24:e5: b9:0a:3e:7e:1d:94:ce:24:ff:89:a5:a5:0d:46:36: b4:7d:e6:79:2a:86:fe:ad:c7:19:a0:5d:21:d9:4d: 2e:78:95:94:20:8e:58:46:5b:9d:7d:b6:d3:84:96: b9:2a:1c:40:0b:b7:96:33:b5:12:1d:11:3c:46:93: b3:02:eb:3e:04:fa:8a:64:9a:8e:ac:67:ef:9f:ff: cb:66:28:6c:bb:50:d4:c7:02:84:a1:9d:fe:50:3b: ac:ff:58:11:8c:c0:05:3e:bc:87:fa:88:ae:b3:20: 42:6d:0b:7c:b8:5d:a4:76:aa:06:2f:be:60:18:23: f6:ef:9d:d1:5c:41:b5:2a:e6:a5:38:78:2d:96:55: b0:3b:c7:58:a7:76:40:62:eb:4f:70:20:a6:0f:b6: d5:1b:83:74:59:5f:52:e4:4b:45:d8:47:5c:13:fe: 23:0b:a2:d6:93:ef:18:7d:2f:1a:b2:9a:21:c7:50: 53:b0:be:2d:4d:a3:37:36:a1:6d:cd:f8:06:00:cd: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.241.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44730 Signature Algorithm: sha256WithRSAEncryption 3e:6f:6e:22:93:75:8a:7f:c0:9c:fa:07:a4:66:b4:61:c8:4e: 1c:df:87:b0:99:93:69:6e:a8:91:b1:24:3d:4c:68:16:f2:4d: 3f:31:3b:92:e9:e7:b0:3c:43:6b:87:55:fa:57:c4:5f:e2:d1: fb:23:d5:7d:75:89:44:10:38:17:e5:8e:72:79:f0:c4:72:6a: f0:3c:35:14:c1:89:0e:9b:9a:87:c3:a0:7d:30:09:fa:ce:70: d6:1a:cb:7b:b9:e4:e1:3f:77:93:9c:b1:0b:1a:d6:21:b3:2d: 51:15:1b:21:d7:b3:dd:32:c9:cf:72:ea:aa:9d:e6:e4:29:8f: 61:ea:c9:96:20:7a:8d:da:11:04:70:fa:e0:4e:fe:e1:ba:e8: 26:4e:39:b2:40:b8:dc:e3:46:df:1c:18:c3:5b:54:06:14:64: 2c:90:7a:e8:51:04:de:47:28:43:b3:50:7d:4d:35:15:62:12: f1:99:70:09:a0:6f:3e:65:68:45:05:a1:56:ee:b7:1a:9f:cf: 59:9f:a0:3b:33:42:df:8c:30:e2:54:1e:b8:61:5d:62:1e:e7: df:5d:15:68:9d:5c:56:1f:21:ef:da:b5:e8:6c:f4:dd:29:f8: d2:94:f2:d7:aa:77:21:ad:6e:18:64:aa:dd:40:ef:62:47:0a: 92:4e:dd:1d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ET7gjAvKA2jv82Sh+xdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTVkMzkyMTg1MGE1ZmZmMDdlY2EyNjBhMzZlZjkyMTAxZjJkODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlO6x0IL4J5qs/Pi/SHfVUwekXh7 zuHmDxjIMI6MzOhYuAPLbdByC6PDl70qOIFBMSJp1oG32g5qJOW5Cj5+HZTOJP+J paUNRja0feZ5Kob+rccZoF0h2U0ueJWUII5YRludfbbThJa5KhxAC7eWM7USHRE8 RpOzAus+BPqKZJqOrGfvn//LZihsu1DUxwKEoZ3+UDus/1gRjMAFPryH+oiusyBC bQt8uF2kdqoGL75gGCP2753RXEG1KualOHgtllWwO8dYp3ZAYutPcCCmD7bVG4N0 WV9S5EtF2EdcE/4jC6LWk+8YfS8aspohx1BTsL4tTaM3NqFtzfgGAM2wUQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNVdOSGFCl//B+yiYKNu+SEB8thcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2RkMTMz MS02MjJhLTQ4NDgtYjM0MC1kMzE2M2U5YjAxMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZGQxMzMx LTYyMmEtNDg0OC1iMzQwLWQzMTYzZTliMDEzNi8xLzFWMDVJWVVLWF84SDdLSmdv Mjc1SVFIeTJGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9XxMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCuujANBgkqhkiG9w0BAQsFAAOCAQEAPm9uIpN1in/AnPoHpGa0YchOHN+HsJmT aW6okbEkPUxoFvJNPzE7kunnsDxDa4dV+lfEX+LR+yPVfXWJRBA4F+WOcnnwxHJq 8Dw1FMGJDpuah8OgfTAJ+s5w1hrLe7nk4T93k5yxCxrWIbMtURUbIdez3TLJz3Lq qp3m5CmPYerJliB6jdoRBHD64E7+4broJk45skC43ONG3xwYw1tUBhRkLJB66FEE 3kcoQ7NQfU01FWIS8ZlwCaBvPmVoRQWhVu63Gp/PWZ+gOzNC34ww4lQeuGFdYh7n 310VaJ1cVh8h79q16Gz03Sn40pTy16p3Ia1uGGSq3UDvYkcKkk7dHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:51 2026 by rpki-client