This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer (raw, json) Hash identifier: Xye8joFCMLog1203+PT8WsAVN/5uPuGSivfHZh1kQ1o= Subject key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8536CBF7079FAF5294805C1A51BA30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208123 IP: 45.159.40.0/22 IP: 2a0f:6e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:36:cb:f7:07:9f:af:52:94:80:5c:1a:51:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f516df64b3941b046743411ed86ea6030d72fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:f7:e1:7c:9a:f6:f8:cd:2f:68:87:36:3e: 00:a7:c0:15:aa:da:2b:b1:05:1a:f3:0a:4d:df:48: 0d:05:1a:16:00:a2:d5:df:06:44:40:e0:11:8a:18: aa:ae:3b:bd:d0:76:2b:c0:ca:94:e9:b1:7e:39:45: fb:53:d9:bd:04:31:62:1a:03:a9:6b:18:a9:b1:25: 6a:7e:81:40:5a:d5:1a:08:ef:1c:c3:f9:c0:7d:02: ae:d3:e7:11:e8:90:cc:a6:95:2f:4e:a7:39:1c:45: db:3b:e8:bf:10:91:32:9f:5f:87:94:80:40:05:6b: 9f:d6:21:4b:54:a9:a7:bd:3b:c6:2c:51:03:42:eb: a5:86:5e:44:86:8c:58:57:30:5a:23:6e:be:14:52: 55:96:a8:83:61:36:44:83:d7:45:d9:d2:55:bc:ec: bd:18:56:26:05:05:22:a7:fc:7c:53:0b:6b:96:6c: 15:33:37:7d:57:40:1d:a5:27:8b:78:51:c4:a0:5e: c8:02:3f:42:a2:e4:72:9a:15:f7:8a:dc:15:40:75: bf:f2:7b:22:96:11:ef:76:ed:16:98:85:ad:4b:1c: 58:8a:b9:e6:7c:cb:3b:49:2c:0f:9f:94:32:82:bf: 6e:37:4a:86:e3:fb:79:6d:31:06:18:b0:96:7d:88: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.40.0/22 IPv6: 2a0f:6e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208123 Signature Algorithm: sha256WithRSAEncryption 7f:f7:1a:85:64:fc:0b:38:f4:76:9e:21:08:35:92:5f:88:9e: 25:99:62:2d:12:a1:d1:59:cc:b9:6d:57:84:0d:14:0d:78:aa: 2d:aa:0d:ac:ea:c7:96:4f:1b:07:cd:ca:86:c2:0c:06:17:8e: 52:92:55:d5:ee:4d:19:c6:52:d9:d4:08:32:72:c5:87:a7:a7: 71:c0:73:2c:84:c3:64:a2:e6:7c:21:c8:76:c6:17:a3:d0:d9: 5e:b9:59:6a:cd:4d:fd:35:a5:39:45:ef:46:ed:9b:a1:31:15: d2:58:14:25:3e:7d:89:b8:30:5c:40:23:49:4f:7e:5c:1d:b4: 01:a1:f3:17:d5:8c:86:c0:7d:ec:6b:ad:6e:82:8e:08:4b:69: 8b:d2:65:91:10:21:d9:e4:5a:74:77:bf:56:32:13:f6:53:cf: 3d:44:4a:c9:2a:48:b5:e4:b8:4e:83:fc:a8:ae:c9:ab:ff:5a: 01:b4:27:d7:8e:0b:98:cc:2a:4a:7c:2a:6b:30:a0:28:da:5e: 21:a8:d8:9c:87:c4:f2:02:54:97:f0:2d:4a:a6:59:b8:8b:09: ae:10:83:25:99:83:82:d1:99:d9:20:10:54:12:fa:ea:b9:dc: b6:aa:c1:18:0b:fa:77:ac:35:76:d3:da:77:24:e8:62:bd:50: b7:ed:4f:df -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hTbL9wefr1KUgFwaUbowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjUxNmRmNjRiMzk0MWIwNDY3NDM0MTFlZDg2ZWE2MDMwZDcyZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZf34Xya9vjNL2iHNj4Ap8AVqtor sQUa8wpN30gNBRoWAKLV3wZEQOARihiqrju90HYrwMqU6bF+OUX7U9m9BDFiGgOp axipsSVqfoFAWtUaCO8cw/nAfQKu0+cR6JDMppUvTqc5HEXbO+i/EJEyn1+HlIBA BWuf1iFLVKmnvTvGLFEDQuulhl5EhoxYVzBaI26+FFJVlqiDYTZEg9dF2dJVvOy9 GFYmBQUip/x8UwtrlmwVMzd9V0AdpSeLeFHEoF7IAj9CouRymhX3itwVQHW/8nsi lhHvdu0WmIWtSxxYirnmfMs7SSwPn5Qygr9uN0qG4/t5bTEGGLCWfYicTwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2FjZGY0 Zi1mMTBhLTQzMjMtODkzYS1iYTEwMmNkYjIzOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYWNkZjRm LWYxMGEtNDMyMy04OTNhLWJhMTAyY2RiMjM5Ny8xL0QxRnQ5a3M1UWJCR2REUVI3 WWJxWUREWEw3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ8oMA0EAgACMAcDBQAqD26AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMs+zANBgkqhkiG9w0BAQsFAAOCAQEAf/cahWT8Czj0 dp4hCDWSX4ieJZliLRKh0VnMuW1XhA0UDXiqLaoNrOrHlk8bB83KhsIMBheOUpJV 1e5NGcZS2dQIMnLFh6enccBzLITDZKLmfCHIdsYXo9DZXrlZas1N/TWlOUXvRu2b oTEV0lgUJT59ibgwXEAjSU9+XB20AaHzF9WMhsB97GutboKOCEtpi9JlkRAh2eRa dHe/VjIT9lPPPURKySpIteS4ToP8qK7Jq/9aAbQn144LmMwqSnwqazCgKNpeIajY nIfE8gJUl/AtSqZZuIsJrhCDJZmDgtGZ2SAQVBL66rnctqrBGAv6d6w1dtPadyTo Yr1Qt+1P3w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:18 2026 by rpki-client