This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer File: 1V0PiIjtySCGjGYWIvZDdE5uVsg.cer (raw, json) Hash identifier: xXy6X5LbOcz+CgevIbHLaLfXqL/mhl+zvM6JMcP8cyA= Subject key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED403372CAF2CCC493A81DF9B3A36C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51001 IP: 185.158.236.0/22 IP: 2a09:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:40:33:72:ca:f2:cc:c4:93:a8:1d:f9:b3:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d55d0f8888edc920868c661622f643744e6e56c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:6b:e5:bd:2e:44:df:ed:ee:ff:d9:2c:22: df:4c:6d:9f:46:02:64:02:8f:7a:22:4e:48:cc:47: 5c:9a:c0:aa:93:e0:56:67:4d:a3:c4:b5:ea:50:19: 6e:e1:b0:95:38:50:a0:5f:a2:db:b2:66:79:59:42: 8b:6c:a3:65:c3:5b:38:26:63:8d:1b:3b:50:d2:40: 46:3e:1f:f0:6e:d6:5d:2d:9e:fa:e6:a0:ec:da:d1: f5:48:31:29:ae:03:1d:ac:54:44:5e:37:68:76:f3: d0:33:ba:87:b7:dd:69:4d:a6:df:c9:b2:c0:33:7b: e5:3b:d2:3d:68:4a:ea:f4:2d:a4:14:4e:69:73:18: b1:f6:73:c8:5f:00:fd:a9:45:4d:3a:c3:10:0a:98: 97:af:30:a3:02:d6:07:62:79:2b:c7:d1:5a:f7:ac: 1f:ca:1e:e4:f6:8d:bf:3a:1f:da:8e:1a:ca:92:e1: ec:46:dd:56:56:ad:53:6d:59:66:b9:84:89:46:08: 60:20:17:80:e1:ce:e2:2e:3a:6e:be:78:65:d9:2d: 7a:ee:b2:ed:f7:7a:86:fd:61:da:f6:07:a6:f8:df: d3:b4:5f:bd:9d:dc:bd:ca:4d:9f:b5:05:d9:0c:71: f2:e5:8c:31:22:4c:d8:f0:fd:0e:98:c2:c9:ac:c2: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.236.0/22 IPv6: 2a09:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51001 Signature Algorithm: sha256WithRSAEncryption 36:76:f3:68:87:a0:f7:44:74:48:2d:91:14:af:95:b0:a1:0a: ae:4a:da:6b:6f:4b:2f:ef:23:69:72:be:9b:9b:08:30:fa:16: a0:a9:f0:a7:d3:f9:ae:13:06:a4:58:f5:ac:f3:ca:f0:7e:89: 51:6e:d0:df:68:ed:39:38:40:3b:c0:64:01:ce:15:dd:42:d9: b3:30:1f:9e:95:8b:50:2f:ed:3f:2b:30:ff:3b:50:38:a9:9e: 7a:6d:af:35:f0:28:4a:53:0b:ba:45:62:01:c5:c7:55:bb:7b: d3:2b:57:78:61:ce:5f:14:87:bf:12:e0:db:d6:52:cf:f4:8a: 6a:90:92:4e:47:a3:ed:47:69:9b:7e:2f:a9:ca:1d:b2:07:08: dc:6b:3c:45:51:7f:4f:4f:18:7c:f7:99:b0:7f:0e:c2:10:78: 62:19:95:89:d6:8d:a6:30:a5:05:88:2a:12:d7:58:ad:f3:25: 37:01:15:1b:9b:b2:11:e0:c1:ec:83:bd:a6:fc:de:53:d0:8a: f2:43:97:62:56:9c:1e:86:92:ee:12:1f:eb:67:cb:79:79:4e: 02:f1:6f:d1:8b:2f:e8:e9:8a:d5:77:a6:19:1d:75:1e:00:03: 59:cc:52:ca:9d:8d:89:de:cc:da:cd:0e:2a:56:87:cd:d5:21: 6f:1c:4e:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87UAzcsryzMSTqB35s6NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTVkMGY4ODg4ZWRjOTIwODY4YzY2MTYyMmY2NDM3NDRlNmU1NmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKRr5b0uRN/t7v/ZLCLfTG2fRgJk Ao96Ik5IzEdcmsCqk+BWZ02jxLXqUBlu4bCVOFCgX6LbsmZ5WUKLbKNlw1s4JmON GztQ0kBGPh/wbtZdLZ765qDs2tH1SDEprgMdrFREXjdodvPQM7qHt91pTabfybLA M3vlO9I9aErq9C2kFE5pcxix9nPIXwD9qUVNOsMQCpiXrzCjAtYHYnkrx9Fa96wf yh7k9o2/Oh/ajhrKkuHsRt1WVq1TbVlmuYSJRghgIBeA4c7iLjpuvnhl2S167rLt 93qG/WHa9gem+N/TtF+9ndy9yk2ftQXZDHHy5YwxIkzY8P0OmMLJrMIIawIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNVdD4iI7ckghoxmFiL2Q3ROblbIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzE5Mzk4 OC05NTcyLTQ1NWMtYTI2OC1kZTQwZGFhMjY4NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMTkzOTg4 LTk1NzItNDU1Yy1hMjY4LWRlNDBkYWEyNjg0ZC8xLzFWMFBpSWp0eVNDR2pHWVdJ dlpEZEU1dVZzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ7sMA0EAgACMAcDBQMqCa2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDHOTANBgkqhkiG9w0BAQsFAAOCAQEANnbzaIeg90R0 SC2RFK+VsKEKrkraa29LL+8jaXK+m5sIMPoWoKnwp9P5rhMGpFj1rPPK8H6JUW7Q 32jtOThAO8BkAc4V3ULZszAfnpWLUC/tPysw/ztQOKmeem2vNfAoSlMLukViAcXH Vbt70ytXeGHOXxSHvxLg29ZSz/SKapCSTkej7Udpm34vqcodsgcI3Gs8RVF/T08Y fPeZsH8OwhB4YhmVidaNpjClBYgqEtdYrfMlNwEVG5uyEeDB7IO9pvzeU9CK8kOX YlacHoaS7hIf62fLeXlOAvFv0Ysv6OmK1XemGR11HgADWcxSyp2Nid7M2s0OKlaH zdUhbxxO/A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:48 2026 by rpki-client