This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer File: 1nXJVO45yR5SX2izBxygV41qW64.cer (raw, json) Hash identifier: hDdnea1OiFTG8InjtUTl9jskXcZIUtZjB8bI/L00Xks= Subject key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A369779C4DF478325BCF20F8B08603 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214272 IP: 192.162.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:69:77:9c:4d:f4:78:32:5b:cf:20:f8:b0:86:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:e0:93:7a:70:cb:20:1c:91:ce:bd:86:91: 35:22:09:82:98:54:fc:73:97:26:a6:70:cb:03:2e: 35:5f:7c:09:b3:98:54:84:02:d0:7a:20:1e:ae:58: 15:a2:b7:3c:4e:76:30:17:cd:2a:5c:81:e8:c5:13: 7a:f9:56:7b:30:fe:91:c5:35:54:53:3c:92:15:71: b3:4e:05:35:96:47:a4:9a:28:d0:b0:29:74:22:4b: e6:ef:ee:c5:7b:b8:2f:c3:36:5c:e2:9e:c1:ed:01: 2d:13:a4:ab:ae:9b:70:40:04:cd:70:5a:e2:d1:f3: d1:02:33:79:14:de:25:92:ef:44:66:74:b0:ab:8a: 95:b9:d2:fa:57:e8:da:2a:72:a9:88:a8:e6:8b:56: 7c:15:65:9a:ea:4e:f1:dc:23:b5:2a:93:9c:cf:95: bc:35:bf:13:90:24:a2:20:a9:e1:02:83:81:1a:35: 70:c7:65:c8:7b:db:fa:a0:8b:f6:19:e9:59:e3:60: b5:97:7f:28:de:c6:7b:a9:48:48:fe:91:f4:3a:1b: 47:e6:61:03:8a:14:f2:43:7f:86:d0:33:0e:01:d6: 29:66:e1:0e:c9:01:e5:68:3b:da:2e:2c:fd:a0:50: e6:86:50:d2:17:a4:61:bb:d3:ed:2a:98:d8:d9:8b: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214272 Signature Algorithm: sha256WithRSAEncryption 75:08:80:26:cd:b5:f9:6a:1f:23:8d:91:8b:a4:54:5a:91:ef: 3d:e0:e7:40:53:96:61:c0:93:78:e9:f5:9a:04:e5:93:47:54: a5:ac:76:f8:18:78:23:d9:fe:5d:c0:a7:cd:b8:db:46:86:88: 74:0f:40:0d:90:58:c2:8f:0f:c8:ea:f5:4b:db:ba:55:c5:40: b6:9f:5f:49:d9:5d:bf:94:42:a1:7e:5c:92:b1:6d:dd:0e:17: c6:5b:23:8a:77:09:d7:72:1c:2a:15:18:e2:f2:68:34:db:af: 4d:a3:8a:e8:15:b8:bc:ee:e7:b5:a0:ee:ff:c4:99:c2:5c:18: 09:25:6c:d6:e5:65:3a:2b:5b:bd:b4:32:27:d1:98:f8:aa:83: f2:0e:78:00:b6:93:3a:3a:71:81:eb:f5:67:4f:c7:8e:dc:3c: 69:ae:94:a1:8e:f3:9d:eb:35:fa:32:9f:0d:f5:64:2a:c7:59: bc:8f:f2:1e:f8:2d:de:f5:68:94:8c:cb:8e:aa:58:75:23:04: 92:cc:f1:be:4a:8e:b0:ee:76:b3:46:68:8d:60:33:42:7f:0d: 98:9a:ad:8b:9c:63:c4:2c:72:5e:4a:a6:9e:41:67:6f:55:03: 22:9c:42:b2:da:d4:43:2e:5e:80:68:51:c6:c8:f6:3d:16:27: ca:37:cb:0f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4o2l3nE30eDJbzyD4sIYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjc1Yzk1NGVlMzljOTFlNTI1ZjY4YjMwNzFjYTA1NzhkNmE1YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Lgk3pwyyAckc69hpE1IgmCmFT8 c5cmpnDLAy41X3wJs5hUhALQeiAerlgVorc8TnYwF80qXIHoxRN6+VZ7MP6RxTVU UzySFXGzTgU1lkekmijQsCl0Ikvm7+7Fe7gvwzZc4p7B7QEtE6SrrptwQATNcFri 0fPRAjN5FN4lku9EZnSwq4qVudL6V+jaKnKpiKjmi1Z8FWWa6k7x3CO1KpOcz5W8 Nb8TkCSiIKnhAoOBGjVwx2XIe9v6oIv2GelZ42C1l38o3sZ7qUhI/pH0OhtH5mED ihTyQ3+G0DMOAdYpZuEOyQHlaDvaLiz9oFDmhlDSF6Rhu9PtKpjY2YvM7wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNZ1yVTuOckeUl9oswccoFeNaluuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzQzYzM0 Yi1lOGQwLTQ1YTItOTQwZS01NzE3Y2Y1MmM3OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvNDNjMzRi LWU4ZDAtNDVhMi05NDBlLTU3MTdjZjUyYzc5YS8xLzFuWEpWTzQ1eVI1U1gyaXpC eHlnVjQxcVc2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwKJgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNFADANBgkqhkiG9w0BAQsFAAOCAQEAdQiAJs21+WofI42Ri6RUWpHvPeDnQFOW YcCTeOn1mgTlk0dUpax2+Bh4I9n+XcCnzbjbRoaIdA9ADZBYwo8PyOr1S9u6VcVA tp9fSdldv5RCoX5ckrFt3Q4XxlsjincJ13IcKhUY4vJoNNuvTaOK6BW4vO7ntaDu /8SZwlwYCSVs1uVlOitbvbQyJ9GY+KqD8g54ALaTOjpxgev1Z0/Hjtw8aa6UoY7z nes1+jKfDfVkKsdZvI/yHvgt3vVolIzLjqpYdSMEkszxvkqOsO52s0ZojWAzQn8N mJqti5xjxCxyXkqmnkFnb1UDIpxCstrUQy5egGhRxsj2PRYnyjfLDw== -----END CERTIFICATE-----Generated at Thu Jan 29 11:30:32 2026 by rpki-client