This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.cer (raw, json) Hash identifier: PGsV7+UQm7lZ/sXBv6n0g5KFpslLSLKf4y4kBgkc31c= Subject key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C343DB06A989C91327186FB54B1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208595 IP: 45.94.156.0/22 IP: 176.105.232.0/24 IP: 185.91.72.0/22 IP: 2a0e:2fc0::/29 IP: 2a10:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:43:db:06:a9:89:c9:13:27:18:6f:b5:4b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d643aec22f819cf01f2c6363035d97f8e0e38233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:f6:d6:41:22:6e:8f:6d:3c:cf:f2:6f:c7: d5:6f:04:8d:98:03:61:0b:78:f6:e9:f7:1b:62:d7: 38:8d:ab:a8:f4:a8:ee:fc:e5:7c:f8:69:9f:89:c7: f8:ff:03:ac:b8:bc:02:07:d0:d0:f3:37:c8:a4:55: 3d:5f:6b:23:b0:76:ce:a2:8d:64:51:0a:a8:a3:bc: 9e:cc:ea:e5:e9:ef:76:99:f5:f0:17:f0:4a:69:f5: 24:65:23:05:65:1f:1a:a4:c1:18:3a:82:ad:3d:f7: f5:98:30:31:75:e8:1c:12:e6:1a:90:5f:a9:a7:87: db:2b:28:56:1b:dc:7f:fb:0c:5f:dc:9e:97:16:99: 4d:6c:12:96:d1:a9:a8:5f:ae:be:59:90:c4:5b:31: e0:1d:c8:4e:7f:ac:cc:33:ce:c6:fc:21:dd:d8:cd: fd:0b:4d:d1:80:9b:bc:f6:dd:3a:d6:9d:5a:22:7a: 89:6d:f6:c5:3d:24:17:d4:a1:59:2a:4f:56:d7:f1: 74:c3:ce:44:35:56:46:75:ec:fb:ae:c2:70:cc:31: 00:f7:79:de:cb:24:7e:74:28:ab:61:9e:8d:c7:00: f4:3c:97:cd:38:a1:e2:87:2c:6c:c6:7f:f4:d1:f3: b7:c9:a2:77:91:02:43:94:1d:de:74:8a:8b:c2:fd: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.156.0/22 176.105.232.0/24 185.91.72.0/22 IPv6: 2a0e:2fc0::/29 2a10:8340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208595 Signature Algorithm: sha256WithRSAEncryption 3d:fa:b2:72:e6:08:45:3d:0d:4f:a6:42:c3:a8:fd:27:72:c5: a6:f4:52:39:c2:f5:42:aa:c2:0c:0b:02:59:80:c2:6a:17:d1: aa:a7:a3:e7:c7:c5:82:00:8a:92:6e:d7:eb:01:f0:5e:f8:4b: e8:eb:26:a3:cc:cf:61:da:18:80:bf:9b:17:a8:26:3f:e1:a4: e3:78:34:31:fe:9f:ce:95:27:6a:36:9c:f1:6d:c4:bc:14:ed: ab:dc:08:9a:79:b0:f3:1c:e8:2c:80:1f:bc:15:d9:7e:a9:9f: dd:3f:20:00:a8:40:de:61:29:be:69:cf:49:04:ad:6a:8b:12: c0:c7:7d:e2:f8:29:2f:6f:80:2c:b0:1f:45:8d:39:71:d5:35: 58:49:f4:2e:a5:87:3f:a8:07:95:6c:c0:55:99:61:b1:7d:cb: 0c:5c:e4:dc:87:be:73:2b:e3:00:9e:7a:18:d1:7a:3c:d7:64: cd:05:4f:42:85:69:06:f8:59:d6:94:39:3f:3b:60:3a:b8:16: 6b:8f:bd:06:f0:43:55:f6:bb:e9:0b:3e:c4:d7:ac:70:60:7f: 3c:96:c9:d1:d0:5f:30:5d:e3:39:1d:dd:f3:31:e6:e2:90:64: 6b:8a:86:00:d0:e4:64:77:dd:03:41:02:46:94:b8:03:75:c5: 11:f3:32:24 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt3WMND2wapickTJxhvtUsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjQzYWVjMjJmODE5Y2YwMWYyYzYzNjMwMzVkOTdmOGUwZTM4MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q721kEibo9tPM/yb8fVbwSNmANh C3j26fcbYtc4jauo9Kju/OV8+Gmficf4/wOsuLwCB9DQ8zfIpFU9X2sjsHbOoo1k UQqoo7yezOrl6e92mfXwF/BKafUkZSMFZR8apMEYOoKtPff1mDAxdegcEuYakF+p p4fbKyhWG9x/+wxf3J6XFplNbBKW0amoX66+WZDEWzHgHchOf6zMM87G/CHd2M39 C03RgJu89t061p1aInqJbfbFPSQX1KFZKk9W1/F0w85ENVZGdez7rsJwzDEA93ne yyR+dCirYZ6NxwD0PJfNOKHihyxsxn/00fO3yaJ3kQJDlB3edIqLwv12VQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFNZDrsIvgZzwHyxjYwNdl/jg44IzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2UyOWE1 Ny02Yjc2LTRhMDYtYTExNi1mNmYzMjNmZDk2ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvZTI5YTU3 LTZiNzYtNGEwNi1hMTE2LWY2ZjMyM2ZkOTZlMC8xLzFrT3V3aS1CblBBZkxHTmpB MTJYLU9EamdqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCLV6cAwQAsGnoAwQCuVtIMBQEAgACMA4DBQMq Di/AAwUDKhCDQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLtMwDQYJKoZIhvcN AQELBQADggEBAD36snLmCEU9DU+mQsOo/Sdyxab0UjnC9UKqwgwLAlmAwmoX0aqn o+fHxYIAipJu1+sB8F74S+jrJqPMz2HaGIC/mxeoJj/hpON4NDH+n86VJ2o2nPFt xLwU7avcCJp5sPMc6CyAH7wV2X6pn90/IACoQN5hKb5pz0kErWqLEsDHfeL4KS9v gCywH0WNOXHVNVhJ9C6lhz+oB5VswFWZYbF9ywxc5NyHvnMr4wCeehjRejzXZM0F T0KFaQb4WdaUOT87YDq4FmuPvQbwQ1X2u+kLPsTXrHBgfzyWydHQXzBd4zkd3fMx 5uKQZGuKhgDQ5GR33QNBAkaUuAN1xRHzMiQ= -----END CERTIFICATE-----Generated at Tue Feb 3 02:14:20 2026 by rpki-client