This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer File: 81bN1aSc5sQqmjX6d7lyeBloiJY.cer (raw, json) Hash identifier: 25LzKFUDxJfHcUIxEuAnahY1NvoaxZ0/UDlO15gacjU= Subject key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7E18DF5CFB7054338DD14EA45A124 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210029 IP: 2.57.1.0/24 IP: 134.99.0.0/16 IP: 2a12:eac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e1:8d:f5:cf:b7:05:43:38:dd:14:ea:45:a1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:47:f6:70:99:19:86:10:1e:d1:62:76:f2: 1d:b1:c5:ea:bd:b9:a0:22:8a:29:f6:d1:09:48:f8: a6:cb:57:46:a9:f7:f7:8b:c0:d6:a6:47:45:59:ed: 40:52:6c:f5:2d:da:f3:3d:cb:dd:96:9d:75:f5:d2: 1f:6d:0f:d4:58:77:1b:b9:a6:8e:d0:b3:03:5c:96: 23:e4:bc:e1:84:3b:0a:be:7a:31:03:55:0e:21:62: b8:b1:fb:bf:be:64:fe:b4:00:ec:a7:d3:c1:b5:3b: 01:a1:b7:81:39:5b:8c:f7:ce:87:31:0d:20:f4:52: 39:06:70:82:44:d3:98:e1:2a:bd:2f:b2:fc:c4:ec: 1e:e0:2c:1e:fe:7d:26:63:64:b8:c0:19:cc:16:d9: 28:48:b8:e3:d3:df:3d:f6:fb:a4:ed:f0:f9:9b:64: 08:e1:92:de:7f:20:98:06:c0:db:d1:4e:f5:a5:4b: 7b:09:ad:9b:98:8d:0c:df:6e:e2:03:52:c7:82:61: 3f:d2:8c:a0:11:92:79:72:fa:a6:06:3e:2e:8c:27: 1a:49:d6:61:4a:f5:15:cb:f0:43:5b:e5:fb:ed:dc: e2:5b:a9:d0:6c:44:be:2e:84:bb:4a:cb:41:a5:5c: b2:39:96:0b:f3:eb:9e:f8:1e:c7:43:12:31:0d:92: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.1.0/24 134.99.0.0/16 IPv6: 2a12:eac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210029 Signature Algorithm: sha256WithRSAEncryption 8c:d1:f2:5b:a6:6e:1f:c0:b0:47:73:e4:fc:cf:18:cf:1d:a9: ea:96:a9:a1:3b:1a:8b:0e:38:c4:68:a5:8e:63:8d:28:25:2d: 85:ab:5a:d1:93:49:40:d2:46:90:93:f8:66:28:c1:c3:37:b6: c6:7f:9d:65:b8:67:3b:b6:dc:70:93:7f:c6:2d:c7:33:8b:35: aa:5f:a3:fd:d1:17:f0:f4:62:88:dc:7a:db:d8:03:3f:0f:ad: 40:78:74:17:5d:b9:1a:ce:af:e6:5e:2f:d1:16:e7:4d:42:74: c1:81:f8:5a:2a:20:5f:2a:f7:8d:32:94:76:e1:0d:32:6b:c8: c6:dc:61:53:01:9b:c6:d7:25:c4:b0:85:37:40:25:af:ba:53: 0d:6e:e7:c2:15:77:54:71:23:7f:a5:29:61:3f:a1:c5:ec:e1: 84:6f:48:5c:f9:25:0f:9c:a1:84:bc:7e:94:75:0c:83:37:df: ec:e9:4c:59:ef:5c:bb:ae:e6:1a:d6:62:77:0c:34:ff:48:e7: 4f:f5:16:da:76:95:ed:9c:52:b7:bf:a4:b7:47:00:90:99:90: 30:17:0b:07:c8:8d:cb:5d:c7:6f:16:89:dd:64:3c:9c:f3:9f: 12:2d:d1:ad:81:12:b1:12:89:95:e8:c7:5a:16:07:80:07:2a: 54:be:d4:b8 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt6x+GN9c+3BUM43RTqRaEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzU2Y2RkNWE0OWNlNmM0MmE5YTM1ZmE3N2I5NzI3ODE5Njg4ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVH9nCZGYYQHtFidvIdscXqvbmg Ioop9tEJSPimy1dGqff3i8DWpkdFWe1AUmz1LdrzPcvdlp119dIfbQ/UWHcbuaaO 0LMDXJYj5LzhhDsKvnoxA1UOIWK4sfu/vmT+tADsp9PBtTsBobeBOVuM986HMQ0g 9FI5BnCCRNOY4Sq9L7L8xOwe4Cwe/n0mY2S4wBnMFtkoSLjj09899vuk7fD5m2QI 4ZLefyCYBsDb0U71pUt7Ca2bmI0M327iA1LHgmE/0oygEZJ5cvqmBj4ujCcaSdZh SvUVy/BDW+X77dziW6nQbES+LoS7SstBpVyyOZYL8+ue+B7HQxIxDZJ7xwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFPNWzdWknObEKpo1+ne5cngZaIiWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzcyZDQ4 Yi04NjVhLTRlNmUtOTZmMy01NzY4ZDM3ZjdiYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvNzJkNDhi LTg2NWEtNGU2ZS05NmYzLTU3NjhkMzdmN2JiNS8xLzgxYk4xYVNjNXNRcW1qWDZk N2x5ZUJsb2lKWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwQAAjkBAwMAhmMwDQQCAAIwBwMFAyoS6sAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAzRtMA0GCSqGSIb3DQEBCwUAA4IBAQCM0fJb pm4fwLBHc+T8zxjPHanqlqmhOxqLDjjEaKWOY40oJS2Fq1rRk0lA0kaQk/hmKMHD N7bGf51luGc7ttxwk3/GLcczizWqX6P90Rfw9GKI3Hrb2AM/D61AeHQXXbkazq/m Xi/RFudNQnTBgfhaKiBfKveNMpR24Q0ya8jG3GFTAZvG1yXEsIU3QCWvulMNbufC FXdUcSN/pSlhP6HF7OGEb0hc+SUPnKGEvH6UdQyDN9/s6UxZ71y7ruYa1mJ3DDT/ SOdP9RbadpXtnFK3v6S3RwCQmZAwFwsHyI3LXcdvFondZDyc858SLdGtgRKxEomV 6MdaFgeABypUvtS4 -----END CERTIFICATE-----Generated at Tue Jan 27 12:47:41 2026 by rpki-client