This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer File: r1vEnV8BojWvkonPSSav_vevkrA.cer (raw, json) Hash identifier: 2RDGOn2RravHy5AnMm2ppXAOxMg+a/JnPBjM6PBhjow= Subject key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAD6D5DCD2F74D0F04703B46E1BED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.254.172.0/22 IP: 2a0c:5140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ad:6d:5d:cd:2f:74:d0:f0:47:03:b4:6e:1b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:c7:e2:51:bd:37:58:cb:98:66:19:39:32: 03:7f:0a:21:63:25:1c:df:81:fc:22:6b:33:64:74: 62:c2:4c:7c:5e:14:4a:9a:49:37:94:93:be:e8:12: 64:e9:00:f4:0d:56:e7:cb:8c:b4:ca:4e:d3:60:24: df:51:07:10:c4:da:ce:30:2d:6a:7a:87:c4:59:26: 24:f7:6f:18:45:8a:9a:b4:76:33:be:9e:49:47:08: f4:58:ac:4b:16:0e:9c:2c:03:50:ed:a5:23:6d:37: 1e:84:25:2f:80:e6:04:23:9e:a2:77:99:c4:e2:bd: 09:53:55:48:f7:eb:9f:1e:4c:be:81:41:d9:59:df: d3:dd:a2:40:90:df:66:a8:2a:cc:7f:4a:d3:86:6c: 8a:03:a9:62:0a:30:dc:ad:b4:68:b5:5a:1e:b0:20: 41:ca:49:a2:2b:a9:db:18:12:ba:8b:57:bb:81:9a: e6:bf:af:b8:66:6b:74:dd:a4:c8:43:ac:19:62:07: 82:43:22:a2:2c:95:f0:d2:33:a1:5b:46:af:50:c1: cf:dc:42:48:c6:8d:5b:cc:1c:3d:4f:ab:68:fb:20: 77:89:d1:48:44:9d:78:8b:a9:7a:a3:2e:76:3e:ed: 95:4f:b2:a0:bd:9e:1a:5f:17:3b:78:be:99:18:5a: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.172.0/22 IPv6: 2a0c:5140::/32 Signature Algorithm: sha256WithRSAEncryption 91:2b:cb:62:09:f9:cf:4f:0c:33:21:2e:8e:cf:c8:2a:68:ce: ee:33:d8:12:44:c8:f5:1b:f3:07:c3:88:ae:d4:c2:ee:3e:38: de:9d:64:48:e4:98:2e:58:a3:6c:cc:86:93:4e:3e:24:db:9f: 87:c5:05:d8:c0:3f:b8:ae:b7:f3:e3:95:1f:e6:7b:fd:ef:a6: 15:d7:1e:76:4a:72:5c:8b:33:48:35:fa:df:61:0d:f6:b1:20: 62:dc:24:dc:14:4b:0b:a3:e6:46:b8:c7:a2:ae:0e:74:b4:b2: 32:c4:62:2b:0e:4c:bd:c2:c5:7f:19:3e:64:72:da:16:59:99: db:95:df:1d:46:62:f8:18:f4:fa:b3:c5:eb:54:f3:b8:6c:f4: 48:be:68:4c:f8:77:81:7e:c1:64:b8:9e:ba:c4:f3:1d:53:34: 86:27:1e:85:e1:0e:e6:b6:c1:13:a8:7f:d8:ed:35:3a:76:3e: e9:da:d7:9f:d6:9d:19:ad:a3:ab:72:ed:85:14:b5:c6:38:50: 93:a3:3a:84:b7:ce:84:d6:3c:87:4e:49:1a:1a:81:03:de:e6: 6f:d8:35:ef:55:cc:fa:c0:b0:a5:3c:41:f5:57:2d:8b:0d:d5: d8:5e:01:e7:aa:56:72:17:b2:2f:72:82:5b:95:85:37:04:67: a9:e5:34:bc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87a1tXc0vdNDwRwO0bhvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjViYzQ5ZDVmMDFhMjM1YWY5Mjg5Y2Y0OTI2YWZmZWY3YWY5MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7H4lG9N1jLmGYZOTIDfwohYyUc 34H8ImszZHRiwkx8XhRKmkk3lJO+6BJk6QD0DVbny4y0yk7TYCTfUQcQxNrOMC1q eofEWSYk928YRYqatHYzvp5JRwj0WKxLFg6cLANQ7aUjbTcehCUvgOYEI56id5nE 4r0JU1VI9+ufHky+gUHZWd/T3aJAkN9mqCrMf0rThmyKA6liCjDcrbRotVoesCBB ykmiK6nbGBK6i1e7gZrmv6+4Zmt03aTIQ6wZYgeCQyKiLJXw0jOhW0avUMHP3EJI xo1bzBw9T6to+yB3idFIRJ14i6l6oy52Pu2VT7KgvZ4aXxc7eL6ZGFpCLwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFK9bxJ1fAaI1r5KJz0kmr/73r5KwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2YyZmJk OC1kNmUxLTQ3YWQtYWEyMS0xNDdlNDU3Mjg3M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvZjJmYmQ4 LWQ2ZTEtNDdhZC1hYTIxLTE0N2U0NTcyODczYS8xL3IxdkVuVjhCb2pXdmtvblBT U2F2X3ZldmtyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf6sMA0EAgACMAcDBQAqDFFAMA0GCSqGSIb3 DQEBCwUAA4IBAQCRK8tiCfnPTwwzIS6Oz8gqaM7uM9gSRMj1G/MHw4iu1MLuPjje nWRI5JguWKNszIaTTj4k25+HxQXYwD+4rrfz45Uf5nv976YV1x52SnJcizNINfrf YQ32sSBi3CTcFEsLo+ZGuMeirg50tLIyxGIrDky9wsV/GT5kctoWWZnbld8dRmL4 GPT6s8XrVPO4bPRIvmhM+HeBfsFkuJ66xPMdUzSGJx6F4Q7mtsETqH/Y7TU6dj7p 2tef1p0ZraOrcu2FFLXGOFCTozqEt86E1jyHTkkaGoED3uZv2DXvVcz6wLClPEH1 Vy2LDdXYXgHnqlZyF7IvcoJblYU3BGep5TS8 -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:45 2026 by rpki-client