This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer File: 1IVR4mFps7PhJPaWTicC6VdoJT4.cer (raw, json) Hash identifier: exwlvlcP3Y4Q8MY+uVrmM+uLK1bFMR9r1g9jz7ObHDw= Subject key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA62C947E23DAC543BEDF5443EE4D30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9031 AS: 203640 IP: 77.109.64.0/18 IP: 79.132.224.0/19 IP: 85.234.192.0/19 IP: 109.236.128.0/20 IP: 185.29.108.0/22 IP: 185.95.72.0/22 IP: 212.71.0.0/19 IP: 212.233.32.0/19 IP: 213.211.128.0/18 IP: 213.219.128.0/18 IP: 2a02:578::/32 IP: 2a04:4400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2c:94:7e:23:da:c5:43:be:df:54:43:ee:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48551e26169b3b3e124f6964e2702e95768253e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:2e:44:83:72:9b:96:46:3b:0a:6a:ba:20: 90:cf:73:13:14:ed:ab:de:0c:0e:81:be:b6:2f:1b: f6:2d:43:45:99:45:df:d2:32:f6:1d:47:59:56:65: 2e:7b:39:bc:6f:1f:58:07:f9:a9:48:03:8d:a5:6f: dd:ed:30:4f:e2:c7:69:27:18:ad:3d:de:81:2f:d6: 41:cb:3a:71:6e:da:1e:12:83:b5:f9:1f:80:47:8d: 6d:ae:32:3a:0f:06:0f:56:8d:25:ea:09:8c:30:ee: 1b:a3:02:63:0c:c9:82:c0:42:27:4a:4b:4e:2f:23: f4:f8:50:c0:55:7c:b5:97:a1:24:ed:56:42:cb:5a: db:ae:f3:67:aa:ec:f6:98:0d:fc:a3:5d:33:fc:6f: 0b:5d:03:7f:84:15:ad:f0:3d:94:5e:17:e3:d8:45: b0:9f:95:41:a2:81:81:6d:d7:79:3f:a9:66:53:23: 61:e3:9e:af:57:0c:79:48:c9:d6:e1:92:88:80:37: 38:18:5b:88:20:96:f4:1c:c9:fa:80:9e:a8:ea:9c: fb:6c:fb:05:ee:6a:0c:a4:36:d6:57:86:68:3a:ff: 22:47:d3:67:dc:0b:53:b9:75:0c:73:dd:f2:38:79: 12:3a:4d:43:99:ea:4e:71:8b:0b:e6:61:b5:99:29: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.109.64.0/18 79.132.224.0/19 85.234.192.0/19 109.236.128.0/20 185.29.108.0/22 185.95.72.0/22 212.71.0.0/19 212.233.32.0/19 213.211.128.0/18 213.219.128.0/18 IPv6: 2a02:578::/32 2a04:4400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9031 203640 Signature Algorithm: sha256WithRSAEncryption 38:bd:43:31:f7:ad:61:a0:8c:59:fd:03:9d:9f:96:06:48:42: 0e:a0:f9:9b:b1:63:1f:96:ee:a0:0f:ce:0a:c8:f9:0d:bd:2a: 10:8a:27:2b:51:c3:de:82:2f:c8:b1:72:ba:01:a3:ab:d0:76: 9e:ce:28:2b:9c:ed:8f:e2:f6:27:34:69:07:d4:68:85:67:34: 24:72:d9:7c:08:ae:2b:25:68:e2:79:5f:fe:e8:1c:b4:20:88: 1d:21:27:c9:fa:73:75:50:ae:a3:ae:d1:1d:1f:d7:84:1e:f7: 32:d2:a2:dd:da:50:ae:44:d4:1d:bd:41:83:c8:71:3b:c9:3c: 80:54:f2:f9:76:13:5e:eb:a6:66:1e:c6:ae:30:7f:64:6f:75: b7:9b:c5:97:af:81:60:67:c8:04:b4:76:3d:9e:21:f6:43:74: 2c:7d:04:44:26:46:f9:3f:f2:fd:7d:ec:a5:ff:d8:a0:a5:fa: 8a:7a:ef:61:6d:1c:18:d6:3c:26:6c:30:21:6e:4c:2b:e6:97: ac:90:f0:78:d1:15:6b:48:56:27:44:1a:e3:80:b5:43:4d:01: 9c:c0:90:db:4f:2b:38:d2:46:cc:eb:d4:a7:31:ac:16:6c:69: c4:74:3d:3f:35:27:7f:c5:73:01:15:a1:48:32:dc:44:ae:6c: 11:80:3c:3e -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt+piyUfiPaxUO+31RD7k0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDg1NTFlMjYxNjliM2IzZTEyNGY2OTY0ZTI3MDJlOTU3NjgyNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIuRINym5ZGOwpquiCQz3MTFO2r 3gwOgb62Lxv2LUNFmUXf0jL2HUdZVmUuezm8bx9YB/mpSAONpW/d7TBP4sdpJxit Pd6BL9ZByzpxbtoeEoO1+R+AR41trjI6DwYPVo0l6gmMMO4bowJjDMmCwEInSktO LyP0+FDAVXy1l6Ek7VZCy1rbrvNnquz2mA38o10z/G8LXQN/hBWt8D2UXhfj2EWw n5VBooGBbdd5P6lmUyNh456vVwx5SMnW4ZKIgDc4GFuIIJb0HMn6gJ6o6pz7bPsF 7moMpDbWV4ZoOv8iR9Nn3AtTuXUMc93yOHkSOk1DmepOcYsL5mG1mSlJcwIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFNSFUeJhabOz4ST2lk4nAulXaCU+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2VhZDI3 Ny04NGM5LTRiOGUtODc5ZS01ZjczMjY3MTAyYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZWFkMjc3 LTg0YzktNGI4ZS04NzllLTVmNzMyNjcxMDJhNi8xLzFJVlI0bUZwczdQaEpQYVdU aWNDNlZkb0pUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQGTW1AAwQFT4TgAwQFVerAAwQEbeyAAwQCuR1s AwQCuV9IAwQF1EcAAwQF1OkgAwQG1dOAAwQG1duAMBQEAgACMA4DBQAqAgV4AwUD KgREADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIjRwIDAxt4MA0GCSqGSIb3DQEB CwUAA4IBAQA4vUMx961hoIxZ/QOdn5YGSEIOoPmbsWMflu6gD84KyPkNvSoQiicr UcPegi/IsXK6AaOr0HaezigrnO2P4vYnNGkH1GiFZzQkctl8CK4rJWjieV/+6By0 IIgdISfJ+nN1UK6jrtEdH9eEHvcy0qLd2lCuRNQdvUGDyHE7yTyAVPL5dhNe66Zm HsauMH9kb3W3m8WXr4FgZ8gEtHY9niH2Q3QsfQREJkb5P/L9feyl/9igpfqKeu9h bRwY1jwmbDAhbkwr5peskPB40RVrSFYnRBrjgLVDTQGcwJDbTys40kbM69SnMawW bGnEdD0/NSd/xXMBFaFIMtxErmwRgDw+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:04 2026 by rpki-client