This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer File: i42FmAZNtajts6YIQGTNKhrYxuM.cer (raw, json) Hash identifier: vFBtiOBqC+n1zDdwOCPMW4Tr0KBH4rud5t0kl1QlwkQ= Subject key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF6F68014F430B004D9610F5DB9CD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51801 IP: 95.141.248.0/24 IP: 2a13:4880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f6:f6:80:14:f4:30:b0:04:d9:61:0f:5d:b9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:14:1b:1e:c4:ce:d0:fa:29:6c:04:1d:bb: c2:cb:6d:94:71:c4:c2:77:e3:5f:c2:89:62:13:92: e2:d5:ee:02:4b:7a:41:27:58:85:4c:18:67:fa:22: ae:76:21:c8:8e:f5:42:51:02:54:7b:b1:c7:a1:bf: 95:94:22:bd:04:4e:46:9a:18:82:9f:36:85:f7:8a: bf:71:27:28:0a:80:16:d1:9a:06:2e:2f:41:91:26: 2e:8f:c2:1c:78:54:ed:36:3a:73:ff:89:25:7a:c9: 9d:d7:6a:3f:4d:9c:06:fd:bb:98:90:d7:9d:fa:fb: 04:33:ed:b3:82:8b:60:12:ef:d9:55:37:58:ad:c7: 8d:fd:23:9f:da:82:95:e5:00:1d:30:b5:0c:ef:4d: 30:73:ee:0c:cb:0b:72:c3:49:08:86:13:bf:dd:34: 16:ef:63:dd:e7:cb:92:92:e2:fe:57:c0:c0:79:60: fa:15:c8:87:22:f1:1c:42:2a:ed:8b:04:fe:dc:fb: 18:1a:e5:79:8e:22:7f:dc:a8:b3:2e:4b:d7:7b:04: 11:86:3c:c1:21:92:93:91:d1:a9:d2:a5:8f:34:c3: 50:a0:ea:5b:97:d8:fc:60:97:ab:d6:14:cd:8e:f7: 7e:93:03:72:8c:3d:bc:14:22:ba:b7:27:ce:a5:75: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.248.0/24 IPv6: 2a13:4880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51801 Signature Algorithm: sha256WithRSAEncryption 24:3e:00:26:f1:5c:10:00:bc:d9:ea:dd:e0:3f:06:c6:cc:e3: 5d:68:bd:76:2f:66:34:66:ce:2a:b3:af:f3:77:3d:f2:f8:53: 0a:ca:a5:3b:80:43:b8:95:f1:56:95:b9:b5:c0:05:f7:81:8f: d0:a9:e9:83:80:39:0b:0f:ad:f2:2d:90:8a:08:03:a7:fc:d3: 33:31:38:7b:a1:a1:60:e7:c9:0c:66:f2:58:0c:ea:5c:a9:cc: 48:8e:2c:2d:9d:d5:5d:97:44:cd:7d:4b:8b:0c:37:3d:6d:61: 3c:0c:3e:cc:28:ff:c0:a8:28:0c:1f:3a:76:f0:61:d4:fa:24: c3:66:de:ee:49:ab:18:bd:7f:91:78:da:94:f0:d3:c9:ee:74: c2:5e:c8:47:29:c2:18:5d:23:62:08:ba:37:77:e0:48:61:ea: 73:b8:35:ee:e8:a9:56:e6:f5:06:4d:dd:45:73:25:94:76:b7: 45:43:e6:d3:77:f9:9f:00:85:14:5d:18:b0:bb:56:b6:45:40: 86:b9:e9:f7:26:2d:6e:0f:25:f5:5a:a2:58:fd:f3:3b:16:4e: bb:52:74:8b:e3:cc:47:38:1d:08:bb:38:b0:8a:ab:b4:d7:2e: b3:86:d2:35:4c:74:54:12:ba:45:60:c0:ca:00:2b:2d:49:63: 7d:a3:28:b2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fvb2gBT0MLAE2WEPXbnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjhkODU5ODA2NGRiNWE4ZWRiM2E2MDg0MDY0Y2QyYTFhZDhjNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEYUGx7EztD6KWwEHbvCy22UccTC d+NfwoliE5Li1e4CS3pBJ1iFTBhn+iKudiHIjvVCUQJUe7HHob+VlCK9BE5GmhiC nzaF94q/cScoCoAW0ZoGLi9BkSYuj8IceFTtNjpz/4klesmd12o/TZwG/buYkNed +vsEM+2zgotgEu/ZVTdYrceN/SOf2oKV5QAdMLUM700wc+4Mywtyw0kIhhO/3TQW 72Pd58uSkuL+V8DAeWD6FciHIvEcQirtiwT+3PsYGuV5jiJ/3KizLkvXewQRhjzB IZKTkdGp0qWPNMNQoOpbl9j8YJer1hTNjvd+kwNyjD28FCK6tyfOpXUNEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIuNhZgGTbWo7bOmCEBkzSoa2MbjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzQyM2U5 Yy00NDI1LTQ5NmUtYjIzNy02YjBlZjkxMDg2ODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvNDIzZTlj LTQ0MjUtNDk2ZS1iMjM3LTZiMGVmOTEwODY4OC8xL2k0MkZtQVpOdGFqdHM2WUlR R1ROS2hyWXh1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAX434MA0EAgACMAcDBQMqE0iAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDKWTANBgkqhkiG9w0BAQsFAAOCAQEAJD4AJvFcEAC8 2erd4D8GxszjXWi9di9mNGbOKrOv83c98vhTCsqlO4BDuJXxVpW5tcAF94GP0Knp g4A5Cw+t8i2QiggDp/zTMzE4e6GhYOfJDGbyWAzqXKnMSI4sLZ3VXZdEzX1Liww3 PW1hPAw+zCj/wKgoDB86dvBh1Pokw2be7kmrGL1/kXjalPDTye50wl7IRynCGF0j Ygi6N3fgSGHqc7g17uipVub1Bk3dRXMllHa3RUPm03f5nwCFFF0YsLtWtkVAhrnp 9yYtbg8l9VqiWP3zOxZOu1J0i+PMRzgdCLs4sIqrtNcus4bSNUx0VBK6RWDAygAr LUljfaMosg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:52:43 2026 by rpki-client