This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer File: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer (raw, json) Hash identifier: h24DIDaFm/jAO9iLPMLbWpxOlq4VeyShYatAf6UmTKU= Subject key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA532C38F772163BF387E5D518260DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57612 IP: 81.162.216.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:32:c3:8f:77:21:63:bf:38:7e:5d:51:82:60:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:e2:e4:f7:3c:76:3f:16:36:0b:e2:c1:a5: c5:7c:ea:e4:f1:45:de:ff:a5:cd:ea:52:c9:14:1e: bc:33:e1:cb:08:2c:1b:f2:bb:e0:2f:a0:60:40:75: 21:d7:d4:24:fc:0f:05:36:8e:16:ef:b8:25:0d:a5: 1a:bd:de:33:50:a9:76:ea:d9:df:67:72:ea:95:3b: f3:82:20:08:aa:c1:d8:6c:5f:5d:c7:ae:64:ad:0c: f3:48:f8:67:74:90:be:a0:7f:7f:30:91:12:ba:22: f7:c0:2a:be:09:35:ad:25:53:26:31:98:bd:d7:3f: 13:77:54:00:ec:9a:6d:32:99:6a:53:b7:7a:2f:a7: 9f:4a:c7:72:fc:db:e1:6b:77:ec:7e:58:a3:40:49: a7:57:77:8a:4b:1c:2b:7a:a9:44:60:16:66:f9:be: 5c:37:53:d0:f7:99:ad:0f:fc:6a:8c:7c:d7:ac:c5: 2b:62:08:f1:dc:d4:d5:ce:4a:49:84:51:f3:0b:15: 9a:56:65:1d:f4:7e:40:dd:57:29:b2:87:47:d7:2d: be:ba:83:3c:9d:1f:d1:96:41:5d:b2:5b:47:f1:27: 48:2e:28:05:04:a7:fa:ff:a8:46:d0:cd:95:18:54: d8:8f:20:d1:bd:90:a5:9a:60:c9:a4:65:66:aa:f1: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.162.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57612 Signature Algorithm: sha256WithRSAEncryption a3:3e:b5:64:16:0b:e8:f7:4d:64:60:d7:95:b4:cb:47:d8:33: f7:b8:c7:63:0b:c8:33:79:3f:43:b6:50:7c:f7:a9:92:7c:a2: 65:c2:a7:d2:f6:0c:37:46:b5:e6:49:22:9c:cd:95:e0:fa:50: 6d:b7:b4:73:f3:d3:11:fb:f7:09:64:e8:b2:6c:d5:82:5a:32: d4:08:43:81:13:2b:2f:9f:59:ab:b1:22:1d:dc:97:8d:69:ac: dd:c1:30:74:b3:c2:40:70:5f:d9:0f:13:29:47:7e:b7:6e:e4: 7f:6a:79:8e:12:e8:23:8a:fa:66:68:e6:cc:fa:09:ec:b2:a6: d7:4f:69:f1:56:92:ec:eb:ee:c0:d6:43:2d:57:32:9d:0a:c7: 1a:4d:a7:4c:28:74:d2:ba:b8:ec:37:24:48:45:84:bc:05:59: 12:92:cd:e9:3f:81:c9:46:ae:bd:ad:60:90:41:0f:41:95:9b: c4:b0:43:ae:42:1b:af:4a:41:95:71:af:58:5b:7a:b6:3a:7d: fc:db:69:44:8b:f5:10:65:ae:ba:53:ff:15:c5:c3:e8:3a:55: cd:ab:65:8f:e5:c8:0f:65:b4:8d:fb:b8:cb:f3:90:da:5b:93: bf:db:21:aa:74:e9:6a:2a:3c:f1:47:f1:88:2d:5a:ea:fb:3c: 41:dd:07:d1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pTLDj3chY784fl1RgmDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZiZjUwMDQ4NDBjMzNiNmIxZjIxMDlkYzI0OWJmNWIzOTBmMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnbi5Pc8dj8WNgviwaXFfOrk8UXe /6XN6lLJFB68M+HLCCwb8rvgL6BgQHUh19Qk/A8FNo4W77glDaUavd4zUKl26tnf Z3LqlTvzgiAIqsHYbF9dx65krQzzSPhndJC+oH9/MJESuiL3wCq+CTWtJVMmMZi9 1z8Td1QA7JptMplqU7d6L6efSsdy/Nvha3fsflijQEmnV3eKSxwreqlEYBZm+b5c N1PQ95mtD/xqjHzXrMUrYgjx3NTVzkpJhFHzCxWaVmUd9H5A3VcpsodH1y2+uoM8 nR/RlkFdsltH8SdILigFBKf6/6hG0M2VGFTYjyDRvZClmmDJpGVmqvFVGQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNZr9QBIQMM7ax8hCdwkm/WzkPMZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3Lzg1ZDU0 MC03YjBjLTRjMTYtOGNiNy1mNWI5OTI0ZDZjZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvODVkNTQw LTdiMGMtNGMxNi04Y2I3LWY1Yjk5MjRkNmNmMS8xLzFtdjFBRWhBd3p0ckh5RUoz Q1NiOWJPUTh4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDUaLYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDhDDANBgkqhkiG9w0BAQsFAAOCAQEAoz61ZBYL6PdNZGDXlbTLR9gz97jHYwvI M3k/Q7ZQfPepknyiZcKn0vYMN0a15kkinM2V4PpQbbe0c/PTEfv3CWTosmzVgloy 1AhDgRMrL59Zq7EiHdyXjWms3cEwdLPCQHBf2Q8TKUd+t27kf2p5jhLoI4r6Zmjm zPoJ7LKm109p8VaS7OvuwNZDLVcynQrHGk2nTCh00rq47DckSEWEvAVZEpLN6T+B yUauva1gkEEPQZWbxLBDrkIbr0pBlXGvWFt6tjp9/NtpRIv1EGWuulP/FcXD6DpV zatlj+XID2W0jfu4y/OQ2luTv9shqnTpaio88UfxiC1a6vs8Qd0H0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:46 2026 by rpki-client