This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer (raw, json) Hash identifier: YvUuFK/ogn2dVp59WR6mTrzL7qWhiirUBzkeBHSzymE= Subject key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15C7395EDCC978429DCEEE97B012B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34827 IP: 45.158.124.0/22 IP: 2a0f:6080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c7:39:5e:dc:c9:78:42:9d:ce:ee:97:b0:12:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:d7:d4:fe:cb:90:00:fa:94:9d:e7:4f:a9: 13:b8:88:b8:24:8b:2b:b5:bf:a4:e3:a0:15:f3:e7: 75:c6:cd:6d:8d:0b:72:bc:1a:6c:77:06:48:4a:77: 5a:b1:3f:38:1d:3c:14:66:a5:9b:15:44:d7:86:c8: 78:fa:67:4c:1c:a0:23:87:f1:b2:30:7e:7f:33:22: 03:c2:a8:20:0c:c0:46:c9:10:0e:d0:62:4c:b2:0b: 01:3c:42:ae:1f:8b:52:d5:9f:13:e6:d1:fd:ad:1b: 90:c5:6c:4c:51:83:52:14:4e:2f:c4:b9:ba:ad:13: 13:24:7b:ed:2e:ba:f1:a5:2f:37:56:1f:7f:56:fc: 9d:55:42:7f:2d:c2:bb:1e:47:4b:15:9d:60:a4:a0: d2:0d:ea:c3:cb:37:43:50:93:67:94:e5:7b:41:c0: a5:90:03:ae:2e:e8:c7:43:bc:4c:57:73:99:92:59: ba:d0:c3:13:8e:d8:3f:c7:1a:f6:67:db:cd:b6:96: d9:b5:9b:ce:d6:52:6a:3e:f1:0d:c2:84:e4:f0:26: b9:e1:c1:41:66:66:44:49:cc:c5:ba:e6:e1:18:55: b1:eb:21:e9:f6:c3:46:82:b5:9d:5c:39:9d:a5:ad: 54:18:12:b9:d8:b5:80:9d:fb:9c:6e:21:0d:1d:f2: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.124.0/22 IPv6: 2a0f:6080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34827 Signature Algorithm: sha256WithRSAEncryption 12:1f:9f:6a:8f:2e:f5:c7:36:10:28:00:28:04:a4:b0:45:7a: e8:62:af:13:48:09:25:69:9f:a1:c5:8b:63:92:bd:05:c5:a8: e1:5f:27:fa:3f:17:7c:a3:83:bb:5a:ff:d8:31:eb:4d:f5:c0: d7:af:cf:fa:c2:cf:5d:05:48:13:29:1e:11:61:f6:42:62:21: 51:86:c6:51:84:49:2a:18:a3:ec:2d:f1:35:bb:29:df:e6:24: c2:b8:26:15:82:6c:97:13:5c:7b:17:dc:14:81:f0:5a:ee:37: 90:67:81:0a:4f:7b:00:ae:de:c1:ab:0d:34:be:f8:dd:9c:61: 70:7c:c0:53:dd:e7:a0:6d:ef:a9:56:2d:29:bd:7a:f3:31:0c: 48:6d:cb:e0:2a:9a:95:f5:97:74:96:7e:76:dd:4c:86:e3:87: fb:5c:f8:ab:01:05:22:84:5c:3c:ef:ba:67:28:82:9d:f6:d4: 67:66:6c:42:e7:bf:74:6b:46:3a:ef:e6:59:17:58:90:05:8d: de:7a:2b:7d:e9:d5:83:43:83:11:a2:26:37:b4:d9:4e:d5:f6: b2:5c:a4:6f:7d:b6:7e:b4:13:85:df:92:86:d3:ae:aa:d3:08: f2:16:b2:35:fd:fa:ca:d8:40:ac:56:e7:29:c0:f7:42:85:a7: 30:3b:d1:d2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/Fcc5XtzJeEKdzu6XsBK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjUxNWVhZDA5NWVlZDlhYzRjYWJjNWFiNGFkMGI1ODY3ZDlmMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoADX1P7LkAD6lJ3nT6kTuIi4JIsr tb+k46AV8+d1xs1tjQtyvBpsdwZISndasT84HTwUZqWbFUTXhsh4+mdMHKAjh/Gy MH5/MyIDwqggDMBGyRAO0GJMsgsBPEKuH4tS1Z8T5tH9rRuQxWxMUYNSFE4vxLm6 rRMTJHvtLrrxpS83Vh9/VvydVUJ/LcK7HkdLFZ1gpKDSDerDyzdDUJNnlOV7QcCl kAOuLujHQ7xMV3OZklm60MMTjtg/xxr2Z9vNtpbZtZvO1lJqPvENwoTk8Ca54cFB ZmZESczFuubhGFWx6yHp9sNGgrWdXDmdpa1UGBK52LWAnfucbiENHfIirQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH9RXq0JXu2axMq8WrStC1hn2fAbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzVjMmE1 OS02MDI1LTQwMGUtYWIyOC1mMGE2MjRkNDA5MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNWMyYTU5 LTYwMjUtNDAwZS1hYjI4LWYwYTYyNGQ0MDkxMi8xL2YxRmVyUWxlN1pyRXlyeGF0 SzBMV0dmWjhCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ58MA0EAgACMAcDBQMqD2CAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCICzANBgkqhkiG9w0BAQsFAAOCAQEAEh+fao8u9cc2 ECgAKASksEV66GKvE0gJJWmfocWLY5K9BcWo4V8n+j8XfKODu1r/2DHrTfXA16/P +sLPXQVIEykeEWH2QmIhUYbGUYRJKhij7C3xNbsp3+YkwrgmFYJslxNcexfcFIHw Wu43kGeBCk97AK7ewasNNL743ZxhcHzAU93noG3vqVYtKb168zEMSG3L4CqalfWX dJZ+dt1MhuOH+1z4qwEFIoRcPO+6ZyiCnfbUZ2ZsQue/dGtGOu/mWRdYkAWN3nor fenVg0ODEaImN7TZTtX2slykb322frQThd+ShtOuqtMI8hayNf36ythArFbnKcD3 QoWnMDvR0g== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:18 2026 by rpki-client