This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer File: 1IVV-aUnJ_a89xXLR1CipKbDUWE.cer (raw, json) Hash identifier: uJDctPcjQ9/rXLNO5HHZbyiDHI39CnXY8M8lQKLGKaY= Subject key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28719833FD3F0F01D7C27AE53CBBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33835 IP: 92.42.216.0/21 IP: 130.185.168.0/21 IP: 185.21.104.0/22 IP: 217.169.240.0/20 IP: 2a02:2440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:87:19:83:3f:d3:f0:f0:1d:7c:27:ae:53:cb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:95:1f:d5:62:c6:27:d4:d4:e5:f3:e7:2b: 99:67:22:70:83:67:7a:32:e3:ed:03:b1:17:6a:af: ba:76:f9:73:b5:be:20:68:fe:7c:ac:ed:67:78:21: c7:b4:7f:85:cb:53:32:a2:13:fe:40:f9:2e:01:51: 38:a5:72:8f:4c:a7:19:b2:d6:6b:09:42:87:69:b0: 62:39:53:a1:56:83:98:8b:1a:3c:75:0c:f1:2a:44: 1c:62:8a:16:e3:bb:23:81:7c:ca:fc:0e:41:5f:59: 0e:96:ee:fb:f8:60:83:83:69:3d:d5:33:8f:b3:74: bd:51:3f:e9:32:08:5e:ce:85:07:96:88:87:72:c8: 35:fc:cd:c3:f8:bf:04:f8:4e:e5:e8:21:ed:a1:10: ff:1a:a6:96:a5:31:03:9c:09:5b:19:32:b6:60:60: 0c:c4:fb:19:56:89:a6:1a:11:b3:4b:54:65:fb:29: 53:00:f7:14:f4:5c:37:99:3f:ab:bf:4b:d7:ed:eb: 1f:ab:a9:a0:da:e7:6c:ff:a8:74:fc:8c:e1:b5:d4: fa:40:c8:93:3a:7b:73:ee:51:16:6b:13:33:b9:a2: 9e:56:1d:cf:bd:df:3e:22:a0:60:cd:1b:c7:8a:69: 01:ce:89:1f:78:19:b2:ce:b1:c2:7c:2d:9b:30:9c: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.216.0/21 130.185.168.0/21 185.21.104.0/22 217.169.240.0/20 IPv6: 2a02:2440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33835 Signature Algorithm: sha256WithRSAEncryption 78:ea:81:14:ab:76:5e:b9:14:ce:cc:0e:cd:b1:38:60:bd:84: 7c:d5:84:98:6b:b9:1e:0f:0c:33:ac:33:ec:99:cf:f9:e9:c1: 7b:a0:9e:94:9a:07:3b:e1:9e:35:83:51:d6:84:ba:0a:84:93: 9c:8f:c3:c2:7b:cf:94:9e:f4:4e:3a:be:cb:f1:88:06:0d:56: 60:92:4c:76:3d:fb:5e:a2:c0:70:5b:fa:bd:26:62:0c:ca:f7: 71:49:d9:7d:5d:a1:47:c1:e8:b0:af:91:b8:5a:25:26:92:44: 18:85:63:b1:4b:7d:4c:f2:30:e3:39:bf:64:f8:ae:3c:cf:ac: c4:0b:a5:0f:d1:e7:d0:f3:a8:be:b5:9c:80:45:7b:5c:43:92: cb:d6:82:fc:62:b7:3c:7c:ea:63:ec:30:b4:02:e1:17:47:e0: 4a:30:da:5a:04:e0:3a:9c:93:16:57:f4:82:5c:68:3a:b1:84: 31:d0:9a:17:d0:17:f9:d2:05:e8:f7:a9:cb:a6:fd:e5:39:23: 25:aa:f3:08:e5:77:cb:30:dd:05:ae:21:6b:6b:64:4f:bb:3f: 09:bd:0e:09:6c:c4:80:a1:ad:07:10:e2:ad:52:3a:91:52:0c: 70:e3:5b:8e:1e:d3:4f:ad:c0:86:9a:a2:7f:ab:59:c0:e8:ea: 40:95:1d:1d -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4oocZgz/T8PAdfCeuU8u8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDg1NTVmOWE1MjcyN2Y2YmNmNzE1Y2I0NzUwYTJhNGE2YzM1MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hGVH9VixifU1OXz5yuZZyJwg2d6 MuPtA7EXaq+6dvlztb4gaP58rO1neCHHtH+Fy1MyohP+QPkuAVE4pXKPTKcZstZr CUKHabBiOVOhVoOYixo8dQzxKkQcYooW47sjgXzK/A5BX1kOlu77+GCDg2k91TOP s3S9UT/pMghezoUHloiHcsg1/M3D+L8E+E7l6CHtoRD/GqaWpTEDnAlbGTK2YGAM xPsZVommGhGzS1Rl+ylTAPcU9Fw3mT+rv0vX7esfq6mg2uds/6h0/IzhtdT6QMiT Ontz7lEWaxMzuaKeVh3Pvd8+IqBgzRvHimkBzokfeBmyzrHCfC2bMJyQmQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFNSFVfmlJyf2vPcVy0dQoqSmw1FhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2U0NTU3 Ny02NWIxLTRkNDMtODUzYS0wMmFiZjg1NzJmY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvZTQ1NTc3 LTY1YjEtNGQ0My04NTNhLTAyYWJmODU3MmZjYi8xLzFJVlYtYVVuSl9hODl4WExS MUNpcEtiRFVXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDXCrYAwQDgrmoAwQCuRVoAwQE2anwMA0EAgAC MAcDBQAqAiRAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCEKzANBgkqhkiG9w0B AQsFAAOCAQEAeOqBFKt2XrkUzswOzbE4YL2EfNWEmGu5Hg8MM6wz7JnP+enBe6Ce lJoHO+GeNYNR1oS6CoSTnI/DwnvPlJ70Tjq+y/GIBg1WYJJMdj37XqLAcFv6vSZi DMr3cUnZfV2hR8HosK+RuFolJpJEGIVjsUt9TPIw4zm/ZPiuPM+sxAulD9Hn0POo vrWcgEV7XEOSy9aC/GK3PHzqY+wwtALhF0fgSjDaWgTgOpyTFlf0glxoOrGEMdCa F9AX+dIF6Pepy6b95TkjJarzCOV3yzDdBa4ha2tkT7s/Cb0OCWzEgKGtBxDirVI6 kVIMcONbjh7TT63Ahpqif6tZwOjqQJUdHQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:50:53 2026 by rpki-client