This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer File: 1yGexzg_oGEEgN36YsP4LEAM1W8.cer (raw, json) Hash identifier: z7TgAW0ppSa/FJvaNo1JiDj7GrPFQS31WiYxNi82hgc= Subject key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3519728EE9F8FBD01E0F70DE0C9D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58040 IP: 37.61.232.0/21 IP: 185.103.4.0/22 IP: 2a03:5b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:51:97:28:ee:9f:8f:bd:01:e0:f7:0d:e0:c9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:ac:6e:ae:f3:f7:83:d5:48:5d:e6:46:06: 1f:a3:fb:08:db:9c:e2:e0:c7:57:a1:e7:40:83:30: 0f:e7:41:6b:d4:7c:63:14:63:0d:91:d6:d7:a8:68: fa:59:67:19:59:ab:f6:73:78:e8:2b:e1:ed:79:2c: 0e:63:ca:9a:3f:14:11:9d:b0:d1:0c:6f:d1:e6:5d: 2d:a9:44:14:76:ba:61:93:f4:be:8f:f2:44:e7:be: 7d:b7:89:65:be:e4:92:6f:02:05:6f:be:30:11:a2: 3d:bf:f1:99:18:72:60:e2:14:ce:0d:91:5a:06:af: 2a:29:85:0f:ba:c9:c4:e5:fe:cf:13:53:d8:0d:0c: 58:da:75:08:41:38:d1:6d:3e:5a:1d:a1:5c:53:e7: 47:ca:66:ae:5c:c5:af:9f:9c:e8:10:4f:e6:ed:0d: 9f:e4:d0:cd:54:de:7d:22:0d:77:2b:65:53:a9:23: c5:88:e0:b7:98:f3:1d:4e:ae:e4:47:3b:5d:12:c0: 3a:be:75:4a:94:9d:ad:02:7c:2e:a7:f1:fc:22:2d: 41:4b:cc:74:ef:98:8f:af:94:88:cf:80:c5:53:41: b1:f5:2f:d8:c8:5e:74:e7:97:3c:fa:33:34:90:d2: c2:06:6f:b1:2e:fb:ab:cc:d4:0b:db:04:04:79:4d: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.232.0/21 185.103.4.0/22 IPv6: 2a03:5b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58040 Signature Algorithm: sha256WithRSAEncryption 80:32:72:3b:35:d7:9e:fe:09:4a:a1:25:07:22:34:a9:32:be: 92:36:29:ec:7e:2d:fb:27:7b:08:eb:ba:b9:75:08:7e:d5:28: 9d:59:21:00:ad:02:78:6e:41:72:9a:de:c4:f7:7f:49:94:6a: 4d:94:be:07:56:f6:b1:32:18:c1:6b:64:ea:11:4d:d2:37:fd: 7b:5f:a6:3a:3b:fc:ad:53:dd:db:3f:ea:20:15:b1:6d:8d:3a: 84:07:c5:d7:79:a9:92:c4:5f:ba:2e:df:58:c9:95:20:0d:1d: 76:95:1b:99:23:ba:d5:c4:50:d4:2b:c9:88:4b:51:ed:b4:de: 3d:fe:b0:72:b9:91:ea:68:8d:7d:4e:40:6a:88:76:ae:87:f8: 66:4b:f3:a0:91:49:83:1a:8e:b6:3b:ba:15:c4:bc:fa:27:76: 96:ce:6a:24:09:89:67:da:96:53:57:a6:b8:97:3b:70:bb:db: 07:c2:10:54:86:3e:c1:7d:c6:99:d9:21:2a:43:34:b0:57:d1: cb:66:5e:64:32:8d:ea:02:a6:9b:12:25:d1:ed:99:13:77:f6: f8:05:9d:90:d8:06:54:da:28:50:7d:da:d5:6c:08:e5:73:8e: 4c:96:70:b5:5d:26:9c:cd:92:11:82:14:b7:e2:a0:2d:19:b4: 99:01:d5:2e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4o1GXKO6fj70B4PcN4MnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzIxOWVjNzM4M2ZhMDYxMDQ4MGRkZmE2MmMzZjgyYzQwMGNkNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/usbq7z94PVSF3mRgYfo/sI25zi 4MdXoedAgzAP50Fr1HxjFGMNkdbXqGj6WWcZWav2c3joK+HteSwOY8qaPxQRnbDR DG/R5l0tqUQUdrphk/S+j/JE5759t4llvuSSbwIFb74wEaI9v/GZGHJg4hTODZFa Bq8qKYUPusnE5f7PE1PYDQxY2nUIQTjRbT5aHaFcU+dHymauXMWvn5zoEE/m7Q2f 5NDNVN59Ig13K2VTqSPFiOC3mPMdTq7kRztdEsA6vnVKlJ2tAnwup/H8Ii1BS8x0 75iPr5SIz4DFU0Gx9S/YyF5055c8+jM0kNLCBm+xLvurzNQL2wQEeU0yJwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNchnsc4P6BhBIDd+mLD+CxADNVvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2ZiZmZi Yy1hYjgyLTQwNTgtYjhiNy1kMGM4MmEzY2Y0YjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZmJmZmJj LWFiODItNDA1OC1iOGI3LWQwYzgyYTNjZjRiNi8xLzF5R2V4emdfb0dFRWdOMzZZ c1A0TEVBTTFXOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJT3oAwQCuWcEMA0EAgACMAcDBQAqA1tAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDiuDANBgkqhkiG9w0BAQsFAAOCAQEAgDJy OzXXnv4JSqElByI0qTK+kjYp7H4t+yd7COu6uXUIftUonVkhAK0CeG5BcprexPd/ SZRqTZS+B1b2sTIYwWtk6hFN0jf9e1+mOjv8rVPd2z/qIBWxbY06hAfF13mpksRf ui7fWMmVIA0ddpUbmSO61cRQ1CvJiEtR7bTePf6wcrmR6miNfU5Aaoh2rof4Zkvz oJFJgxqOtju6FcS8+id2ls5qJAmJZ9qWU1emuJc7cLvbB8IQVIY+wX3GmdkhKkM0 sFfRy2ZeZDKN6gKmmxIl0e2ZE3f2+AWdkNgGVNooUH3a1WwI5XOOTJZwtV0mnM2S EYIUt+KgLRm0mQHVLg== -----END CERTIFICATE-----Generated at Wed Feb 4 08:26:54 2026 by rpki-client