This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer File: R1oGyte9DD25-KOB8euc1sdaqyg.cer (raw, json) Hash identifier: XlZURXG3hCAqdl5sHaAsDsyRc6TkJiH0noaCGQFqtDc= Subject key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAF0E3818DD7C65F5ED25E34CF37F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8270 AS: 49412 IP: 188.95.176.0/21 IP: 193.34.142.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f0:e3:81:8d:d7:c6:5f:5e:d2:5e:34:cf:37:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:c3:8f:12:8f:4b:bf:6f:26:81:36:00:0d: 3e:73:9e:5b:16:4d:c4:a3:94:f6:ce:b8:e5:b1:3d: 2e:f6:91:de:fc:f6:fa:2f:a4:ec:18:04:68:57:03: cc:b4:c1:cf:22:f3:53:82:f4:51:01:82:5e:cd:6e: 7c:f9:ec:aa:c0:2a:be:42:2f:17:da:42:db:49:39: 61:89:78:98:e8:0b:70:39:d7:35:b5:d7:ba:88:8b: 1f:f0:ee:dd:a4:8a:4d:94:34:59:4a:e0:2b:13:ce: b8:26:63:05:5a:eb:7c:bf:88:5a:b7:8f:17:42:69: ee:e7:3e:6e:5b:1a:86:e8:da:c0:97:8a:64:1b:a5: be:d5:25:3c:e7:93:17:86:59:08:27:dc:91:ad:40: 1a:c0:9c:03:fa:20:e1:f4:33:59:22:c6:72:eb:72: c4:29:b6:e1:ce:59:54:4e:aa:9b:39:ca:4b:d9:04: 29:e5:13:34:fe:35:5c:05:50:6b:d6:6c:bc:9b:d4: e3:76:4e:98:99:89:ea:65:b7:13:9e:59:a5:9e:e6: d1:78:d2:d6:b5:c3:46:84:10:d7:f5:7e:d8:5b:fb: b3:1c:1a:30:81:93:c1:9a:37:5d:6d:ee:6c:0f:29: db:34:96:c3:93:47:ce:69:23:94:f6:86:8f:ca:46: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.176.0/21 193.34.142.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8270 49412 Signature Algorithm: sha256WithRSAEncryption 26:32:7e:5e:36:0e:40:c1:28:be:43:5c:ab:52:62:1a:9b:75: cf:01:a5:52:a4:43:d7:2e:0e:f3:f0:32:f7:0b:63:98:d7:c1: 98:4e:bb:4e:16:49:51:ec:2b:11:b6:f1:91:2c:93:9d:35:4f: 97:5c:e4:3b:30:6e:20:1a:0f:bb:07:da:e2:b0:3f:5f:b5:8f: 45:65:87:3e:80:24:60:db:41:71:8b:fd:a5:16:7c:e8:8c:a9: 54:94:3a:f9:90:c3:28:0b:20:f1:6e:71:63:8b:2d:4f:50:ed: c9:0c:e1:b2:8b:8b:89:ef:34:d8:8f:9f:4b:f5:af:7d:2f:42: 31:01:64:7f:09:84:e4:aa:43:ea:8a:5d:d5:39:b3:1f:85:31: 29:2a:b1:31:03:5d:b4:54:ee:a2:29:9f:1d:0f:96:ac:60:0c: 90:a8:f2:00:00:34:3e:ef:09:56:36:1c:ed:ea:52:33:70:91: 90:ae:bf:26:01:35:31:4d:a3:fd:14:36:5d:bd:cf:86:50:78: c8:19:d5:97:9d:a6:56:7b:d2:29:7e:93:82:81:47:5d:4c:c1: 00:ed:8b:9a:23:e6:b8:d2:ae:67:47:32:32:40:ea:e3:96:be: 92:e4:d9:0a:68:4c:39:a5:6f:77:45:1f:95:14:79:e9:03:04: 63:13:58:e9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt9yvDjgY3Xxl9e0l40zzfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzVhMDZjYWQ3YmQwYzNkYjlmOGEzODFmMWViOWNkNmM3NWFhYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK3DjxKPS79vJoE2AA0+c55bFk3E o5T2zrjlsT0u9pHe/Pb6L6TsGARoVwPMtMHPIvNTgvRRAYJezW58+eyqwCq+Qi8X 2kLbSTlhiXiY6AtwOdc1tde6iIsf8O7dpIpNlDRZSuArE864JmMFWut8v4hat48X Qmnu5z5uWxqG6NrAl4pkG6W+1SU855MXhlkIJ9yRrUAawJwD+iDh9DNZIsZy63LE KbbhzllUTqqbOcpL2QQp5RM0/jVcBVBr1my8m9Tjdk6YmYnqZbcTnlmlnubReNLW tcNGhBDX9X7YW/uzHBowgZPBmjddbe5sDynbNJbDk0fOaSOU9oaPykbkqwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFEdaBsrXvQw9ufijgfHrnNbHWqsoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2JkZmQ3 MC0zMDY3LTQ3M2QtOGY2NS1iNTUzMjIwMjhiYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYmRmZDcw LTMwNjctNDczZC04ZjY1LWI1NTMyMjAyOGJiOC8xL1Ixb0d5dGU5REQyNS1LT0I4 ZXVjMXNkYXF5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDvF+wAwQBwSKOMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAiBOAgMAwQQwDQYJKoZIhvcNAQELBQADggEBACYyfl42DkDBKL5DXKtS Yhqbdc8BpVKkQ9cuDvPwMvcLY5jXwZhOu04WSVHsKxG28ZEsk501T5dc5DswbiAa D7sH2uKwP1+1j0Vlhz6AJGDbQXGL/aUWfOiMqVSUOvmQwygLIPFucWOLLU9Q7ckM 4bKLi4nvNNiPn0v1r30vQjEBZH8JhOSqQ+qKXdU5sx+FMSkqsTEDXbRU7qIpnx0P lqxgDJCo8gAAND7vCVY2HO3qUjNwkZCuvyYBNTFNo/0UNl29z4ZQeMgZ1ZedplZ7 0il+k4KBR11MwQDti5oj5rjSrmdHMjJA6uOWvpLk2QpoTDmlb3dFH5UUeekDBGMT WOk= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:28 2026 by rpki-client