This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer File: 1zeCTg_6efGLn8SdbLDdgcmmyig.cer (raw, json) Hash identifier: QGgWFblPXZCdqPG+uiIEatgqVITILink8EQDsW5xYWk= Subject key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BD9A49C3FE5299C9F7AFFAC72D495 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58171 AS: 61150 IP: 46.18.111.0/24 IP: 91.232.229.0/24 IP: 2001:7f8:66::/48 IP: 2a0e:11c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d9:a4:9c:3f:e5:29:9c:9f:7a:ff:ac:72:d4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:63:e2:2c:05:b4:0b:7e:57:f6:6c:76:42: c8:63:e4:8c:f7:fc:51:ed:18:75:b0:f3:cf:9a:7d: 29:df:38:a4:26:79:8f:36:b1:a8:1b:16:6c:27:5a: e2:ee:9d:f7:c3:2d:02:26:d4:1a:b1:de:c7:d7:a5: eb:66:bb:fa:7b:54:78:d8:52:7b:f6:49:6c:9e:cc: 90:39:4e:6f:6b:a7:b0:b9:2a:d9:ed:69:fc:b5:cf: 4a:e5:a2:c1:33:af:ea:8b:2b:24:39:8d:85:7e:d4: 69:51:c8:c9:8d:83:ac:a6:c4:b6:d3:4e:cd:3a:0a: 72:a7:ea:f2:fe:7c:e4:d6:95:d9:56:2c:e4:36:5e: da:45:5c:45:94:3d:44:0b:97:4d:4a:19:24:87:d7: d0:70:a4:42:f8:cc:d2:09:4c:ec:09:dc:bf:6b:b0: d6:ba:59:4d:c4:ec:e4:d1:74:05:1d:6b:55:05:3e: 85:31:c7:32:52:70:86:40:07:ff:a6:5b:93:f9:07: fb:85:ba:e4:c1:8c:99:59:09:9c:f1:52:21:d6:6e: f3:92:1f:7f:10:75:97:a2:5a:62:90:61:ae:81:23: 94:b3:5f:4b:ba:3c:fb:88:84:b6:5a:6b:f5:f3:07: b5:06:d0:06:10:1c:8b:b8:1b:e9:a6:10:e2:38:7d: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.111.0/24 91.232.229.0/24 IPv6: 2001:7f8:66::/48 2a0e:11c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58171 61150 Signature Algorithm: sha256WithRSAEncryption 56:84:3f:45:e8:14:dc:f6:49:29:3d:d3:cd:51:b5:65:33:0d: 88:97:1e:5a:70:92:3d:23:ac:fc:00:de:a0:b0:03:52:c6:ea: 12:61:10:4a:b4:70:b6:54:1e:f0:5d:98:10:36:33:b9:6a:82: 01:82:7d:87:42:a9:91:7a:71:9e:4d:c6:58:71:9b:84:d7:80: 84:b9:03:c4:65:70:93:84:b2:2d:5a:76:ea:6f:4c:85:7d:8c: 66:53:cb:a4:bc:49:47:c1:d7:09:57:1c:0c:7f:19:0b:a3:e0: f8:e2:88:a0:5e:46:80:5e:75:ad:96:39:13:b5:e3:6a:ac:3d: c4:78:76:5b:04:f7:e8:91:78:09:70:2b:7a:65:ef:2e:4b:e3: 77:ed:76:b6:a2:79:57:40:64:74:85:53:80:40:ba:b8:e3:87: d0:b3:75:63:43:33:c7:16:c4:3f:c9:84:bc:16:b6:19:ae:2e: 57:54:c3:70:bc:b9:0d:fd:a6:6e:90:a7:a0:1f:d0:1c:d4:46: 3f:73:2b:92:d0:13:0d:df:d6:e0:96:64:36:f5:f4:fa:2c:74: 60:bb:20:0e:54:98:e0:98:c4:80:1d:d5:78:a7:8c:8d:57:da: eb:b4:29:c5:f3:63:63:8b:76:cb:f0:48:72:00:74:72:0b:aa: ab:48:92:ee -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt9W9mknD/lKZyfev+sctSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzM3ODI0ZTBmZmE3OWYxOGI5ZmM0OWQ2Y2IwZGQ4MWM5YTZjYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEJj4iwFtAt+V/ZsdkLIY+SM9/xR 7Rh1sPPPmn0p3zikJnmPNrGoGxZsJ1ri7p33wy0CJtQasd7H16XrZrv6e1R42FJ7 9klsnsyQOU5va6ewuSrZ7Wn8tc9K5aLBM6/qiyskOY2FftRpUcjJjYOspsS2007N Ogpyp+ry/nzk1pXZVizkNl7aRVxFlD1EC5dNShkkh9fQcKRC+MzSCUzsCdy/a7DW ullNxOzk0XQFHWtVBT6FMccyUnCGQAf/pluT+Qf7hbrkwYyZWQmc8VIh1m7zkh9/ EHWXolpikGGugSOUs19Lujz7iIS2Wmv18we1BtAGEByLuBvpphDiOH00+wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFNc3gk4P+nnxi5/EnWyw3YHJpsooMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzQ0NmQ0 MC01NzgyLTRkZTAtYTJjNS1iNjhmNWQ4ZjY1MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNDQ2ZDQw LTU3ODItNGRlMC1hMmM1LWI2OGY1ZDhmNjUxYS8xLzF6ZUNUZ182ZWZHTG44U2Ri TERkZ2NtbXlpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQALhJvAwQAW+jlMBYEAgACMBADBwAgAQf4AGYD BQAqDhHAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDjOwIDAO7eMA0GCSqGSIb3 DQEBCwUAA4IBAQBWhD9F6BTc9kkpPdPNUbVlMw2Ilx5acJI9I6z8AN6gsANSxuoS YRBKtHC2VB7wXZgQNjO5aoIBgn2HQqmRenGeTcZYcZuE14CEuQPEZXCThLItWnbq b0yFfYxmU8ukvElHwdcJVxwMfxkLo+D44oigXkaAXnWtljkTteNqrD3EeHZbBPfo kXgJcCt6Ze8uS+N37Xa2onlXQGR0hVOAQLq444fQs3VjQzPHFsQ/yYS8FrYZri5X VMNwvLkN/aZukKegH9Ac1EY/cyuS0BMN39bglmQ29fT6LHRguyAOVJjgmMSAHdV4 p4yNV9rrtCnF82Nji3bL8EhyAHRyC6qrSJLu -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:03 2026 by rpki-client