This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.cer (raw, json) Hash identifier: //L2fmnEP35Dya0EQoJvXMsjNk3fmv9qXwSYeI4YJ0Q= Subject key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6C96C06B7920E1EDAABE735CC3182 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210685 IP: 91.217.163.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c9:6c:06:b7:92:0e:1e:da:ab:e7:35:cc:31:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:51:e3:3a:58:da:2c:38:aa:42:e9:6d:e0: 89:e8:a6:66:f1:72:67:06:41:ea:61:49:fd:49:e2: 38:1a:4c:a7:63:f4:6b:31:d5:d2:5b:60:84:be:12: a6:0e:10:39:5d:d4:c3:d2:4d:54:fc:39:95:cc:e2: 98:b3:90:5e:6e:ec:3e:c0:85:1f:9a:1f:c5:95:7a: dc:b3:e0:e7:87:99:3e:38:f9:fb:d6:c6:83:49:78: 0e:e1:66:b4:c5:2a:02:52:c6:aa:7f:f9:08:d1:ab: 5a:13:33:61:09:d5:cd:ba:c1:03:ab:9a:45:de:e2: 12:da:7a:93:0c:a2:5e:73:ac:19:c4:44:46:72:bb: 0a:f9:65:3a:27:ca:b2:9e:c0:a8:0a:a9:bd:54:e1: a2:62:cc:c8:eb:9c:de:96:f8:c2:74:fa:9d:a4:71: f3:9e:e0:55:a9:9b:68:9d:60:43:e7:65:da:be:71: 81:bb:68:90:98:bd:f4:ee:d1:57:af:c9:36:95:74: 2c:3e:03:a0:1b:52:f2:80:27:29:63:5b:52:c4:16: 79:62:75:75:17:0d:f9:03:3b:0b:03:64:ca:3a:2a: 7e:ab:f8:d1:42:27:ab:dd:83:6a:a3:5c:28:01:ce: 2b:b6:c9:d0:7e:88:a4:fe:de:4e:2a:95:8b:20:5a: 8d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.163.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210685 Signature Algorithm: sha256WithRSAEncryption 93:48:49:c3:82:a5:88:d9:f4:bb:83:b1:b9:9f:17:0d:8f:a6: 80:3e:08:dc:35:8d:b2:d7:3f:c0:18:7c:74:11:3d:39:d1:1c: e0:0a:4f:0f:9f:df:ce:d1:22:07:a5:28:92:5c:5b:fa:81:3f: 06:9d:8b:7e:a7:31:d4:9b:59:a5:36:b1:0b:82:71:bf:6e:c6: fb:67:b6:1c:3e:bf:38:ec:f2:69:b4:41:9b:8c:1b:26:67:85: 85:b2:17:49:cb:30:50:bd:fc:0f:76:69:65:7e:23:11:ee:9d: 06:ac:c6:f9:06:29:1b:b3:b7:2d:88:1b:e7:73:b6:89:47:35: 18:90:f2:3c:d3:10:68:7c:ed:21:fc:01:de:6a:b0:ac:ff:31: 04:2c:1c:d3:2b:e9:ac:0a:f2:e0:fe:dd:a3:e1:92:42:16:9c: 0a:15:1a:ed:13:7e:ad:49:77:01:7a:03:b0:85:06:a1:d3:4f: 8e:e0:ea:77:64:67:a6:64:21:4f:ab:dd:b9:67:49:88:a5:76: 2a:fe:91:5c:59:5c:c6:70:18:bf:1b:d0:9c:36:7f:7e:57:bf: da:3a:22:f7:57:23:00:1d:3f:11:47:5c:7a:8d:4d:04:0f:03: ee:2d:41:49:3d:a4:05:77:b4:54:76:61:29:e1:d3:0c:54:3c: b9:32:a5:0c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xslsBreSDh7aq+c1zDGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjAyYTA3M2ExYWJjNjQ0MzU3YTVmOTczOGVlYjY3NmE0YTkzZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbNR4zpY2iw4qkLpbeCJ6KZm8XJn BkHqYUn9SeI4GkynY/RrMdXSW2CEvhKmDhA5XdTD0k1U/DmVzOKYs5Bebuw+wIUf mh/FlXrcs+Dnh5k+OPn71saDSXgO4Wa0xSoCUsaqf/kI0ataEzNhCdXNusEDq5pF 3uIS2nqTDKJec6wZxERGcrsK+WU6J8qynsCoCqm9VOGiYszI65zelvjCdPqdpHHz nuBVqZtonWBD52XavnGBu2iQmL307tFXr8k2lXQsPgOgG1LygCcpY1tSxBZ5YnV1 Fw35AzsLA2TKOip+q/jRQier3YNqo1woAc4rtsnQfoik/t5OKpWLIFqNpwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNYCoHOhq8ZENXpflzjutnakqT3GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzcyYmQ4 OC1hMGI0LTRkZTQtYTY1Ni0yOGExNTQwNDQ1M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzJiZDg4 LWEwYjQtNGRlNC1hNjU2LTI4YTE1NDA0NDUzZS8xLzFnS2djNkdyeGtRMWVsLVhP TzYyZHFTcFBjWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9mjMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM2/TANBgkqhkiG9w0BAQsFAAOCAQEAk0hJw4KliNn0u4OxuZ8XDY+mgD4I3DWN stc/wBh8dBE9OdEc4ApPD5/fztEiB6Uoklxb+oE/Bp2Lfqcx1JtZpTaxC4Jxv27G +2e2HD6/OOzyabRBm4wbJmeFhbIXScswUL38D3ZpZX4jEe6dBqzG+QYpG7O3LYgb 53O2iUc1GJDyPNMQaHztIfwB3mqwrP8xBCwc0yvprAry4P7do+GSQhacChUa7RN+ rUl3AXoDsIUGodNPjuDqd2RnpmQhT6vduWdJiKV2Kv6RXFlcxnAYvxvQnDZ/fle/ 2joi91cjAB0/EUdceo1NBA8D7i1BST2kBXe0VHZhKeHTDFQ8uTKlDA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:15 2026 by rpki-client