This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer (raw, json) Hash identifier: NjPtShTHRBgL9dDsEApFSkfqVKvxd5Abu7LcSB+alyA= Subject key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED44ACB4C0A3977FB913F26FE046E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.157.174.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:44:ac:b4:c0:a3:97:7f:b9:13:f2:6f:e0:46:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b754b22c5540508d9629a311ef1e83543657c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:b1:59:b0:35:73:de:92:a6:8e:30:51:86: aa:45:d0:1b:2a:02:bd:32:f7:11:71:6b:6d:82:26: 6a:cb:bc:a1:5f:1d:61:17:d7:71:5f:48:97:f9:a7: a1:01:3e:5c:df:dc:78:52:2a:8a:c6:55:5d:87:75: 60:41:8b:3a:d4:29:47:0f:59:da:86:5e:cd:83:5a: b1:ef:1e:08:ae:7e:8a:dd:7d:f7:a3:3a:0c:a0:17: 6a:7a:43:24:5e:a0:87:0b:9f:ce:d6:e7:c8:a1:f0: 1c:df:19:d9:76:97:71:da:ed:30:a4:1e:e7:16:fc: dd:8f:89:91:d3:0e:36:b4:a0:01:ab:0c:a2:f7:6d: d5:3a:34:8f:e7:e9:fa:8c:85:75:3f:0b:53:c9:05: e6:a0:16:71:11:f0:32:8e:09:83:d5:dc:c8:42:c4: bb:06:a2:77:d4:2e:03:65:f7:8c:b7:85:92:94:dd: be:9c:8b:4c:c1:d1:94:8a:c6:a7:a3:a8:ea:4e:14: 92:da:98:42:4e:d7:bc:7a:f7:52:8d:9f:1e:a3:ad: 8f:4c:ea:39:23:aa:23:2c:e5:4c:08:01:89:59:9f: a0:84:43:e7:f7:69:b7:9c:cc:17:60:84:a3:db:a5: ad:df:aa:27:56:60:87:06:67:7b:a6:6c:c0:90:83: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.174.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ae:de:2b:6c:ce:33:58:97:6f:1e:ff:1d:cf:7a:be:12:66: f6:90:24:ac:e8:be:80:62:e7:6d:1c:7b:46:52:9c:e8:0b:d3: c6:b2:c7:e7:28:2e:02:54:7c:03:2f:33:38:4a:94:5c:26:91: e0:9f:6e:0c:7a:f6:50:ba:1c:78:f1:1f:e9:49:1d:4c:2f:dc: 00:29:1b:b3:46:38:c5:c3:48:9d:cc:6f:5f:cb:d1:33:5e:ba: f9:0c:e0:04:6b:ee:04:f7:65:21:d2:2e:cc:da:85:26:bb:11: dc:01:19:4e:f8:5b:95:73:8e:92:b8:89:c2:ee:b9:6f:af:04: ed:f3:71:94:83:6a:74:f4:66:27:9f:4c:65:49:b1:dc:60:7d: 8c:4f:ee:47:b7:86:df:62:1e:20:db:cb:b3:92:91:db:26:17: a0:83:67:7d:3b:ad:11:21:d4:31:81:c3:c8:63:63:b5:71:d1: 09:ba:e1:15:6c:35:d2:f1:e3:a8:9e:69:e8:00:e0:22:ca:fa: 0c:e6:b6:72:ae:27:15:da:74:20:1e:a5:ef:1d:4b:28:d3:da: 10:35:ff:4b:32:e4:9a:25:44:f7:fa:3e:b4:61:f2:99:a6:a6: c8:5f:e1:e3:12:f2:05:70:4d:bf:e5:b9:73:49:a0:78:36:69: b6:1d:38:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87USstMCjl3+5E/Jv4EbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzU0YjIyYzU1NDA1MDhkOTYyOWEzMTFlZjFlODM1NDM2NTdjNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovexWbA1c96Spo4wUYaqRdAbKgK9 MvcRcWttgiZqy7yhXx1hF9dxX0iX+aehAT5c39x4UiqKxlVdh3VgQYs61ClHD1na hl7Ng1qx7x4Irn6K3X33ozoMoBdqekMkXqCHC5/O1ufIofAc3xnZdpdx2u0wpB7n Fvzdj4mR0w42tKABqwyi923VOjSP5+n6jIV1PwtTyQXmoBZxEfAyjgmD1dzIQsS7 BqJ31C4DZfeMt4WSlN2+nItMwdGUisano6jqThSS2phCTte8evdSjZ8eo62PTOo5 I6ojLOVMCAGJWZ+ghEPn92m3nMwXYISj26Wt36onVmCHBmd7pmzAkINtnwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLdUsixVQFCNlimjEe8eg1Q2V8TuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2I1NTEz YS1iYTY5LTQ4YzQtOTVlZS01NmVjMTMyNjlhMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYjU1MTNh LWJhNjktNDhjNC05NWVlLTU2ZWMxMzI2OWExYy8xL3QxU3lMRlZBVUkyV0thTVI3 eDZEVkRaWHhPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALZ2uMA0GCSqGSIb3DQEBCwUAA4IBAQCRrt4r bM4zWJdvHv8dz3q+Emb2kCSs6L6AYudtHHtGUpzoC9PGssfnKC4CVHwDLzM4SpRc JpHgn24MevZQuhx48R/pSR1ML9wAKRuzRjjFw0idzG9fy9EzXrr5DOAEa+4E92Uh 0i7M2oUmuxHcARlO+FuVc46SuInC7rlvrwTt83GUg2p09GYnn0xlSbHcYH2MT+5H t4bfYh4g28uzkpHbJhegg2d9O60RIdQxgcPIY2O1cdEJuuEVbDXS8eOonmnoAOAi yvoM5rZyricV2nQgHqXvHUso09oQNf9LMuSaJUT3+j60YfKZpqbIX+HjEvIFcE2/ 5blzSaB4Nmm2HTjn -----END CERTIFICATE-----Generated at Tue Jan 27 13:21:20 2026 by rpki-client