This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer File: 088IhJGKUCOe9wUY7p_ATxquGSk.cer (raw, json) Hash identifier: eGD7MCIoladyjjHLiO7caWEdNdn1TSf36V/Z4XrU/8U= Subject key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100FF2CDCF25BE5BF669C02F66FDF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52037 IP: 46.37.96.0/19 IP: 91.205.228.0/24 IP: 185.92.44.0/22 IP: 2a03:8aa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0f:f2:cd:cf:25:be:5b:f6:69:c0:2f:66:fd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:df:2d:b2:57:b0:9f:16:2f:fc:77:f9:2d: c1:73:e9:86:30:a5:fb:56:1c:44:b2:57:e6:e1:c8: 3b:1b:21:c5:45:fd:ca:ad:06:15:34:8f:46:62:82: 41:ca:b1:da:bc:6a:7f:50:79:56:6d:9a:8c:ab:81: 89:84:2e:18:b7:37:ab:7f:07:57:bf:15:d6:cd:ef: c6:d4:14:6a:da:25:02:1d:28:c6:9a:bc:54:b3:5d: 04:0c:b6:46:a0:db:e7:a9:ff:36:e7:bb:53:eb:7a: c9:a6:2e:11:7c:b7:c6:43:c6:e2:d2:de:f0:54:b1: b5:e6:f5:e3:e7:43:3f:b3:2c:bd:46:44:02:7f:db: 9e:b4:59:29:fe:ec:61:91:0a:a6:5c:d9:c6:7a:00: e4:75:aa:aa:af:80:da:2d:bf:d7:2c:cf:2a:2d:1d: 34:6b:df:8c:2d:3a:5b:e7:44:77:ce:22:c9:78:2a: d9:1d:6a:36:ed:02:e6:73:2f:c5:01:22:55:8b:6a: b0:f2:e8:6f:f4:65:cd:35:cf:ed:6b:96:4b:7b:f7: e2:87:ac:da:3c:13:75:48:1a:65:39:37:f2:6e:2d: 06:e8:3e:26:13:20:23:00:51:b8:c0:af:0f:fc:a0: 36:ac:79:19:2d:5b:90:8b:11:82:6f:39:5b:47:a7: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.96.0/19 91.205.228.0/24 185.92.44.0/22 IPv6: 2a03:8aa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52037 Signature Algorithm: sha256WithRSAEncryption 97:44:53:13:44:03:bd:d6:d3:b4:11:4a:37:e9:de:66:12:9f: b0:e5:f1:d9:8f:2e:d8:63:ab:b4:9a:bb:24:da:73:76:12:49: 4d:0e:b7:ea:1e:9b:e5:23:46:5a:21:a2:54:ed:24:20:78:b2: 41:f3:8e:b7:3f:fb:70:1d:56:63:f3:5f:7c:49:91:c0:c0:74: 6a:e0:af:04:28:c1:a6:0d:a6:43:81:03:a6:14:9e:3a:9c:c6: 5e:43:26:cf:28:f2:38:a4:87:72:e1:b6:0e:e1:d6:64:71:d8: 5d:f1:3e:16:e4:0f:ff:e1:5d:b7:02:ce:34:9f:17:5e:ea:00: 2f:de:eb:7d:19:cc:e3:25:59:58:a0:ad:7c:60:c8:8b:d1:b5: 82:ca:a7:24:70:c1:87:aa:2a:21:e1:30:b6:48:e0:f9:3f:48: 0f:15:4a:5c:0b:ea:0a:95:ce:79:eb:03:94:3e:14:c6:5c:7e: 3b:b3:5f:78:1d:a7:33:95:90:61:71:9d:c2:0d:7a:44:61:51: 1e:21:73:2e:b1:af:9f:4c:59:1c:f7:14:f6:3f:bd:3d:e9:e3: 8a:02:1a:d8:f4:59:e5:55:54:de:d6:5b:0d:ad:cd:ad:3c:76: 4b:52:5f:ca:6b:d9:cb:7f:e3:54:4f:5b:73:05:04:21:b6:46: 3a:eb:3b:3b -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EA/yzc8lvlv2acAvZv32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvanfLbJXsJ8WL/x3+S3Bc+mGMKX7 VhxEslfm4cg7GyHFRf3KrQYVNI9GYoJByrHavGp/UHlWbZqMq4GJhC4YtzerfwdX vxXWze/G1BRq2iUCHSjGmrxUs10EDLZGoNvnqf8257tT63rJpi4RfLfGQ8bi0t7w VLG15vXj50M/syy9RkQCf9uetFkp/uxhkQqmXNnGegDkdaqqr4DaLb/XLM8qLR00 a9+MLTpb50R3ziLJeCrZHWo27QLmcy/FASJVi2qw8uhv9GXNNc/ta5ZLe/fih6za PBN1SBplOTfybi0G6D4mEyAjAFG4wK8P/KA2rHkZLVuQixGCbzlbR6eqOQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNPPCISRilAjnvcFGO6fwE8arhkpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2NkZmYx Ni00NThhLTQ3YzMtOGRmYS0yMzE1NDk0MDk3MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvY2RmZjE2 LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNPZTl3VVk3 cF9BVHhxdUdTay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFLiVgAwQAW83kAwQCuVwsMA0EAgACMAcDBQAq A4qgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDLRTANBgkqhkiG9w0BAQsFAAOC AQEAl0RTE0QDvdbTtBFKN+neZhKfsOXx2Y8u2GOrtJq7JNpzdhJJTQ636h6b5SNG WiGiVO0kIHiyQfOOtz/7cB1WY/NffEmRwMB0auCvBCjBpg2mQ4EDphSeOpzGXkMm zyjyOKSHcuG2DuHWZHHYXfE+FuQP/+FdtwLONJ8XXuoAL97rfRnM4yVZWKCtfGDI i9G1gsqnJHDBh6oqIeEwtkjg+T9IDxVKXAvqCpXOeesDlD4Uxlx+O7NfeB2nM5WQ YXGdwg16RGFRHiFzLrGvn0xZHPcU9j+9PenjigIa2PRZ5VVU3tZbDa3NrTx2S1Jf ymvZy3/jVE9bcwUEIbZGOus7Ow== -----END CERTIFICATE-----Generated at Mon Jan 19 18:23:30 2026 by rpki-client