This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer File: 1i6pLsybDTVLX9cC4JkfFQown-Q.cer (raw, json) Hash identifier: FmF35qnkKBFlssYdHdmCypdRFyT1LVxD1j8QRm2hpx0= Subject key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED1718AB5560359153C98F00F9D3AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210010 IP: 193.0.161.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:17:18:ab:55:60:35:91:53:c9:8f:00:f9:d3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:9b:03:60:af:09:f9:b1:6e:f5:5d:0d:0c: c4:45:c2:ea:8a:00:fd:a8:28:bd:9b:0e:8c:92:68: 5b:8c:c9:33:b2:42:b3:05:b4:69:b4:eb:4a:4e:3c: 8b:f5:3c:c2:f6:8a:02:b8:60:73:8d:87:15:74:97: 99:bc:10:f0:89:60:b0:2d:04:28:bb:86:e4:1f:66: 6a:24:71:f7:d9:4c:92:a4:5b:ce:a0:e1:bc:33:c0: 45:74:e3:81:3e:30:56:c8:3a:46:8e:84:87:8e:f1: 72:42:a7:03:9f:e4:d2:e1:c3:cd:83:64:4b:b5:bb: 1c:63:50:40:71:75:0c:cf:3c:cc:d1:d3:d4:71:78: 8f:d4:6e:1e:5d:af:62:b3:58:f9:bb:f0:44:36:a6: 2e:c6:be:85:65:8e:a3:9b:f1:e6:97:88:af:01:ab: d9:d0:e2:19:89:79:20:c6:9a:b4:83:f4:12:2e:28: 93:9c:06:a5:e8:56:0c:63:98:22:15:6e:ea:90:99: 14:62:25:0f:18:52:e3:8e:b5:55:98:3a:4e:59:95: 3d:21:3c:7d:01:92:b5:9d:31:58:2c:57:79:21:28: fc:78:f4:17:c1:ec:e3:11:3f:e0:3d:46:1a:af:88: 15:72:d8:3c:99:63:44:fe:44:9d:08:24:74:94:5d: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.161.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210010 Signature Algorithm: sha256WithRSAEncryption 79:2c:9b:ff:39:2a:22:85:f1:a5:86:1f:dd:eb:be:35:c5:ad: bd:a4:e0:fc:f1:07:06:31:2e:2a:af:29:67:e8:68:5f:e8:2d: dd:82:56:a6:9b:c5:44:ed:0b:a0:47:b5:66:2a:15:90:66:3f: 54:0a:96:3b:08:84:0f:a4:dd:b2:64:c0:87:ff:10:24:d1:4b: a9:d0:28:78:81:a5:04:62:1e:c5:38:3c:36:ff:92:74:09:97: 7b:69:de:f0:b4:a1:ec:4c:cf:eb:69:08:1d:ab:a3:f6:24:b0: fe:28:d0:e9:73:96:ee:ee:82:09:1d:fa:eb:db:31:69:de:a3: 48:e9:c3:8f:aa:47:4f:d0:a8:0c:61:6a:0e:49:2e:bf:01:a9: 70:0a:0d:95:21:c0:1f:7f:a4:f8:d6:e9:79:85:7d:98:9d:a5: 0f:d2:75:c8:f8:69:7e:89:88:07:ef:7f:49:88:82:f0:6f:95: 29:4a:32:f2:02:1b:e7:8f:73:49:25:1a:27:bd:6a:31:61:32: 20:ad:ea:29:9f:63:8d:7c:ed:6e:1e:59:4c:fd:77:3d:ce:18: 50:44:19:81:5a:e0:45:12:d1:1a:61:db:40:bb:0f:82:4a:77: 80:f2:64:a1:eb:a6:80:de:9f:4e:94:06:ef:e5:c8:fa:4e:98: 14:81:8d:97 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87RcYq1VgNZFTyY8A+dOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjJlYTkyZWNjOWIwZDM1NGI1ZmQ3MDJlMDk5MWYxNTBhMzA5ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHWbA2CvCfmxbvVdDQzERcLqigD9 qCi9mw6MkmhbjMkzskKzBbRptOtKTjyL9TzC9ooCuGBzjYcVdJeZvBDwiWCwLQQo u4bkH2ZqJHH32UySpFvOoOG8M8BFdOOBPjBWyDpGjoSHjvFyQqcDn+TS4cPNg2RL tbscY1BAcXUMzzzM0dPUcXiP1G4eXa9is1j5u/BENqYuxr6FZY6jm/Hml4ivAavZ 0OIZiXkgxpq0g/QSLiiTnAal6FYMY5giFW7qkJkUYiUPGFLjjrVVmDpOWZU9ITx9 AZK1nTFYLFd5ISj8ePQXwezjET/gPUYar4gVctg8mWNE/kSdCCR0lF28XQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzdiNTgx NC03Yzc2LTQ5NWMtYTZlNy01NDU5NDc5NWVlYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvN2I1ODE0 LTdjNzYtNDk1Yy1hNmU3LTU0NTk0Nzk1ZWVhMi8xLzFpNnBMc3liRFRWTFg5Y0M0 SmtmRlFvd24tUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQChMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM0WjANBgkqhkiG9w0BAQsFAAOCAQEAeSyb/zkqIoXxpYYf3eu+NcWtvaTg/PEH BjEuKq8pZ+hoX+gt3YJWppvFRO0LoEe1ZioVkGY/VAqWOwiED6TdsmTAh/8QJNFL qdAoeIGlBGIexTg8Nv+SdAmXe2ne8LSh7EzP62kIHauj9iSw/ijQ6XOW7u6CCR36 69sxad6jSOnDj6pHT9CoDGFqDkkuvwGpcAoNlSHAH3+k+NbpeYV9mJ2lD9J1yPhp fomIB+9/SYiC8G+VKUoy8gIb549zSSUaJ71qMWEyIK3qKZ9jjXztbh5ZTP13Pc4Y UEQZgVrgRRLRGmHbQLsPgkp3gPJkoeumgN6fTpQG7+XI+k6YFIGNlw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:41 2026 by rpki-client