This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer File: 1XfOFDQjLYCBldDKcKs5HfsHry0.cer (raw, json) Hash identifier: 7zZBRoRb9IKrOJEzpKOU/eK+CGTwNcahwc9fTOV/Yjo= Subject key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC71C3431D8454D7EDB90E124B085 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59891 IP: 185.32.124.0/22 IP: 185.150.28.0/22 IP: 2a00:c1e0::/29 IP: 2a07:6d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:1c:34:31:d8:45:4d:7e:db:90:e1:24:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d577ce1434232d808195d0ca70ab391dfb07af2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:bd:32:8f:af:39:5e:11:d8:44:92:81:1b: 75:a0:54:9d:0f:be:72:92:bb:56:e7:fb:09:0e:76: a7:d4:d4:01:5d:bf:48:2f:b5:f4:a4:69:b3:0f:69: e0:ab:77:31:14:b1:e8:bd:0f:31:ba:e1:42:3f:f1: 57:c1:3d:ce:9a:4f:fc:d0:34:68:1e:96:68:db:c3: 48:4d:93:5c:51:8c:28:67:46:f4:2f:07:28:e6:5b: 55:9a:69:73:f7:97:41:ed:31:cc:38:3f:cf:13:42: b4:25:64:46:d2:e4:9c:1b:a0:cd:ba:d0:bf:8b:2e: 68:c8:5a:c5:04:59:af:44:99:f2:f1:5c:26:cc:52: a9:a4:be:c4:cd:80:09:ed:96:59:96:6e:f1:bc:80: 6d:b6:6e:13:52:b0:ea:f3:59:64:50:70:a5:b2:6b: 59:28:8f:2f:45:42:0a:5c:15:c3:38:35:cc:f3:fd: 3f:fd:97:63:eb:ba:e4:a2:9a:af:d8:92:1d:12:80: fd:00:66:0b:60:9a:6d:10:d7:f5:00:c0:f3:59:8c: 1d:8e:62:33:5b:e7:03:90:f3:b5:44:c5:98:c2:46: 4c:75:d7:ea:f3:96:a8:96:51:a4:60:67:da:83:30: 9d:ad:49:0b:01:c3:cc:42:5a:06:55:8a:30:84:e1: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.124.0/22 185.150.28.0/22 IPv6: 2a00:c1e0::/29 2a07:6d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59891 Signature Algorithm: sha256WithRSAEncryption 7b:e4:8e:8d:08:32:21:91:1b:e8:db:8b:e7:ee:03:e3:7b:0e: 40:f7:57:17:fa:74:a7:85:9b:be:b6:c9:64:e3:9a:12:f2:2b: 52:5b:fc:74:55:25:69:07:32:ae:01:9f:e6:2c:b4:e8:d8:09: 8b:09:a9:8c:e4:f8:f4:15:0f:3c:19:0a:db:81:74:2c:76:c2: 6d:2a:f7:38:f3:23:93:e1:c6:e5:7c:d2:9f:73:1f:f3:28:30: 0a:35:3b:ee:7a:39:6a:17:1b:40:d9:fb:0d:2a:d6:ae:06:36: 35:e8:bf:69:73:4b:e6:6b:3a:4c:c1:aa:50:ac:99:06:86:8e: 7b:db:66:84:4a:5c:23:64:11:89:be:60:36:00:b4:34:eb:5d: b6:2f:5a:73:d5:ac:92:06:7e:00:1e:d7:c3:8d:9f:d9:f7:d0: 0d:29:88:4c:db:bc:16:a1:22:ce:66:2b:09:44:6c:35:9f:54: 3d:f4:cf:6c:43:1b:75:10:8d:e8:44:69:e8:c1:b4:2a:86:d3: 0d:0b:9d:f4:15:b2:40:32:3c:56:59:81:e7:b5:46:da:2d:9a: 69:e4:7b:03:23:d8:1a:71:69:67:69:14:11:44:31:6a:dd:79: f4:df:bb:72:7f:d8:04:09:d3:77:03:41:67:b7:cf:81:9b:e0: a8:bf:0e:34 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt87cccNDHYRU1+25DhJLCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc3Y2UxNDM0MjMyZDgwODE5NWQwY2E3MGFiMzkxZGZiMDdhZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApli9Mo+vOV4R2ESSgRt1oFSdD75y krtW5/sJDnan1NQBXb9IL7X0pGmzD2ngq3cxFLHovQ8xuuFCP/FXwT3Omk/80DRo HpZo28NITZNcUYwoZ0b0Lwco5ltVmmlz95dB7THMOD/PE0K0JWRG0uScG6DNutC/ iy5oyFrFBFmvRJny8VwmzFKppL7EzYAJ7ZZZlm7xvIBttm4TUrDq81lkUHClsmtZ KI8vRUIKXBXDODXM8/0//Zdj67rkopqv2JIdEoD9AGYLYJptENf1AMDzWYwdjmIz W+cDkPO1RMWYwkZMddfq85aollGkYGfagzCdrUkLAcPMQloGVYowhOG1JQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFNV3zhQ0Iy2AgZXQynCrOR37B68tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzBkNjE1 ZS0yNGRiLTQ3ZWYtOWFhMy02MGU2YjE0OGQyOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMGQ2MTVl LTI0ZGItNDdlZi05YWEzLTYwZTZiMTQ4ZDI4Yi8xLzFYZk9GRFFqTFlDQmxkREtj S3M1SGZzSHJ5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuSB8AwQCuZYcMBQEAgACMA4DBQMqAMHgAwUD KgdtgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6fMwDQYJKoZIhvcNAQELBQAD ggEBAHvkjo0IMiGRG+jbi+fuA+N7DkD3Vxf6dKeFm762yWTjmhLyK1Jb/HRVJWkH Mq4Bn+YstOjYCYsJqYzk+PQVDzwZCtuBdCx2wm0q9zjzI5PhxuV80p9zH/MoMAo1 O+56OWoXG0DZ+w0q1q4GNjXov2lzS+ZrOkzBqlCsmQaGjnvbZoRKXCNkEYm+YDYA tDTrXbYvWnPVrJIGfgAe18ONn9n30A0piEzbvBahIs5mKwlEbDWfVD30z2xDG3UQ jehEaejBtCqG0w0LnfQVskAyPFZZgee1RtotmmnkewMj2BpxaWdpFBFEMWrdefTf u3J/2AQJ03cDQWe3z4Gb4Ki/DjQ= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:49 2026 by rpki-client