This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer File: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer (raw, json) Hash identifier: P5eM2Fopgsw5pL62W2P2SFRIcwrotWI6mTmoJq9MAQA= Subject key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78350B33DAF4111A9045E8AB1678B6B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210028 IP: 185.89.99.0/24 IP: 194.12.56.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0b:33:da:f4:11:1a:90:45:e8:ab:16:78:b6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:89:be:79:c7:63:57:bc:52:3d:fa:05:c6: f8:32:18:12:95:49:18:e3:62:1b:1f:4a:72:dc:ca: e8:2f:51:5b:06:f3:05:fb:2f:1e:8c:af:a7:71:6a: ce:dd:79:30:b6:f9:44:fa:0e:d9:76:4c:ab:b7:c1: 1e:b2:7b:03:84:0d:e8:96:b2:64:d0:10:bd:a7:97: 1b:5f:f6:8f:05:49:97:4d:b4:d3:79:11:cb:f4:ba: be:42:b5:51:12:62:f9:79:c2:03:c2:39:81:41:45: 99:3e:a2:96:db:a5:5e:40:8b:33:9b:db:59:ba:67: 1e:70:82:71:ef:a3:f7:e8:55:bf:d7:d1:73:98:21: 16:85:06:7c:4a:0b:aa:e9:04:98:74:0a:24:f0:0f: 6c:6c:43:88:30:87:76:36:9e:ad:86:d6:d1:f5:95: 82:14:b3:03:3e:b0:8f:4e:ea:b2:b2:f7:11:17:e9: 7d:0f:1f:40:fa:64:6c:40:25:a0:83:87:95:60:62: 1d:2c:6f:2e:da:33:28:50:0c:58:6e:1a:a3:58:fe: 97:cb:6b:1f:14:98:32:df:7c:b4:00:46:73:a0:95: c2:0e:67:26:9d:1b:4d:0e:dc:82:98:03:7e:96:04: ec:cd:7c:94:f5:24:93:49:26:11:05:35:45:c4:0a: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.99.0/24 194.12.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210028 Signature Algorithm: sha256WithRSAEncryption 2b:87:1f:e2:ae:68:a3:59:f7:0d:ed:44:b6:e0:43:53:76:89: 7b:2d:0a:d3:32:2f:0d:d8:9a:a7:3a:ee:67:2e:2f:99:93:96: e9:e2:12:e6:d4:38:69:5c:09:34:32:ae:83:f4:66:d3:76:a2: 32:ce:4e:eb:3d:9f:76:72:43:a9:88:7b:46:b9:67:6e:68:0f: f4:5d:9a:b4:3b:29:8e:28:e6:40:04:a8:b2:2e:92:d5:b4:c6: 86:c5:fc:b9:48:50:88:a9:1a:84:97:69:65:99:27:f5:8b:81: c8:82:5c:29:0f:72:e1:c3:21:15:65:dc:8b:9b:b3:d9:f2:c7: dc:68:3e:79:0b:ea:b4:73:c9:2c:8d:b8:73:c9:11:00:69:bc: 6b:6d:3e:5c:27:36:9e:04:1a:cf:d0:fb:c8:29:8b:76:42:25: 61:5f:64:0d:a1:ca:d9:46:4c:a0:6f:8f:4c:50:88:29:a3:57: a4:68:5d:11:57:a8:a6:50:d7:e0:d9:6c:66:b1:a0:84:e2:17: d6:1e:bb:83:7e:07:b7:ef:12:6f:54:6e:72:aa:33:74:d1:56: 20:d0:46:b3:55:81:d8:d8:19:81:10:87:cc:09:76:9f:de:b5: 1e:e1:c8:0c:34:21:b7:7c:94:87:33:8d:3f:15:49:37:ea:45: d9:dc:80:4e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4NQsz2vQRGpBF6KsWeLa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjNkNTUyOWJkYTE3NzEzZWJlNmI0YzIyZjdmY2U0Y2I4ZjFlOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WyJvnnHY1e8Uj36Bcb4MhgSlUkY 42IbH0py3MroL1FbBvMF+y8ejK+ncWrO3XkwtvlE+g7Zdkyrt8EesnsDhA3olrJk 0BC9p5cbX/aPBUmXTbTTeRHL9Lq+QrVREmL5ecIDwjmBQUWZPqKW26VeQIszm9tZ umcecIJx76P36FW/19FzmCEWhQZ8Sguq6QSYdAok8A9sbEOIMId2Np6thtbR9ZWC FLMDPrCPTuqysvcRF+l9Dx9A+mRsQCWgg4eVYGIdLG8u2jMoUAxYbhqjWP6Xy2sf FJgy33y0AEZzoJXCDmcmnRtNDtyCmAN+lgTszXyU9SSTSSYRBTVFxArADwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNY9VSm9oXcT6+a0wi9/zky48eizMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzYyYjM0 Mi03YzIwLTQxZTMtOGYxYi1jZGNmNWY2YTRjMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNjJiMzQy LTdjMjAtNDFlMy04ZjFiLWNkY2Y1ZjZhNGMyNy8xLzFqMVZLYjJoZHhQcjVyVENM M19PVExqeDZMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuVljAwQDwgw4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwM0bDANBgkqhkiG9w0BAQsFAAOCAQEAK4cf4q5oo1n3De1EtuBDU3aJ ey0K0zIvDdiapzruZy4vmZOW6eIS5tQ4aVwJNDKug/Rm03aiMs5O6z2fdnJDqYh7 RrlnbmgP9F2atDspjijmQASosi6S1bTGhsX8uUhQiKkahJdpZZkn9YuByIJcKQ9y 4cMhFWXci5uz2fLH3Gg+eQvqtHPJLI24c8kRAGm8a20+XCc2ngQaz9D7yCmLdkIl YV9kDaHK2UZMoG+PTFCIKaNXpGhdEVeoplDX4NlsZrGghOIX1h67g34Ht+8Sb1Ru cqozdNFWINBGs1WB2NgZgRCHzAl2n961HuHIDDQht3yUhzONPxVJN+pF2dyATg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:12 2026 by rpki-client