This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer File: I0Rtp6cLznc-wrwWVarjDDwYQSw.cer (raw, json) Hash identifier: Had6em5t16X+XbnK1gKNoaYlFeGZPWuBASab2wF/wZc= Subject key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A335D240B2E90D10F87EEF7FD64E08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.11.232.0/22 IP: 45.91.188.0/22 IP: 45.142.52.0/22 IP: 45.147.60.0/22 IP: 45.153.236.0/22 IP: 77.83.44.0/22 IP: 77.83.68.0/22 IP: 80.76.36.0/22 IP: 84.252.84.0/22 IP: 95.214.100.0/22 IP: 171.22.188.0/22 IP: 185.15.176.0/22 IP: 185.164.64.0/22 IP: 193.36.124.0/22 IP: 194.110.88.0/22 IP: 212.81.40.0/22 IP: 2a0f:4cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:d2:40:b2:e9:0d:10:f8:7e:ef:7f:d6:4e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:43:2b:62:6f:4a:40:9c:79:c5:f6:83:0d: 0a:31:38:a5:72:33:4f:d6:16:26:2f:ee:2f:2a:6c: 21:d4:86:31:37:62:d6:30:69:6f:bb:14:79:50:0b: ac:f8:26:f8:6e:ec:0d:27:78:47:6f:06:fc:3b:e0: 10:73:7a:5d:d5:d3:97:d9:77:49:75:21:fe:7d:76: fb:6a:0b:b4:8f:6d:3e:37:f1:96:98:b8:eb:06:06: 47:9b:65:b5:d6:ed:59:1d:c9:4d:fb:d5:18:1c:b8: 3f:cd:db:c3:28:ef:89:8b:38:f2:f4:af:85:7d:bb: 28:01:88:20:2f:da:95:26:8d:c7:3f:da:40:3b:29: 4a:d2:ca:03:84:3a:8e:80:42:9a:05:f7:c4:57:88: 98:12:3e:be:e5:da:d1:a7:1e:87:6e:29:72:19:e1: d8:ed:95:9c:8b:d1:e5:18:54:12:9c:37:9a:d8:48: cd:fe:61:46:15:7c:b4:ff:5b:d5:33:c3:12:eb:2f: 84:0d:83:19:6c:9d:70:89:83:0d:bb:59:e3:ce:d0: 9f:15:ae:6c:f4:71:0d:25:5f:55:44:4e:5e:7d:3b: 7d:9d:6d:b6:f6:e6:09:5b:8e:6e:8c:5e:e8:e7:b8: ae:2b:a5:ad:5e:f8:b2:be:31:4c:3e:fa:91:ca:6f: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.232.0/22 45.91.188.0/22 45.142.52.0/22 45.147.60.0/22 45.153.236.0/22 77.83.44.0/22 77.83.68.0/22 80.76.36.0/22 84.252.84.0/22 95.214.100.0/22 171.22.188.0/22 185.15.176.0/22 185.164.64.0/22 193.36.124.0/22 194.110.88.0/22 212.81.40.0/22 IPv6: 2a0f:4cc0::/29 Signature Algorithm: sha256WithRSAEncryption 85:49:a0:2d:28:da:14:f2:ba:22:d0:24:de:65:cb:28:7c:31: 05:56:9f:c2:04:f9:8d:56:8b:7d:19:41:09:c2:94:e4:b3:7e: e0:50:6f:9c:6d:dc:c9:c4:78:e4:66:9e:1d:ab:a4:bd:c7:53: dc:e3:f1:90:0f:57:0a:8d:9e:f3:33:a5:f7:be:32:1a:f1:92: c4:fc:56:15:9e:b2:80:60:12:d8:a0:80:b1:74:96:1a:7a:b3: 2e:b1:23:6f:30:04:98:a9:7a:25:9d:d6:b7:2c:60:5b:26:59: d3:84:76:a0:d9:f0:92:fd:3d:99:a1:84:a5:9b:87:f4:b1:12: 86:21:28:5d:85:67:d1:6c:ad:f9:34:d5:0b:02:03:be:3a:c2: d3:f5:61:21:30:35:2d:84:c2:f4:42:f9:30:8a:fc:26:eb:09: 18:81:4b:7f:d9:d9:33:4a:c5:a5:d6:f3:98:2c:63:a6:7f:bc: ca:6e:4d:03:4a:8e:22:37:48:88:7b:56:71:dd:7b:5c:75:68: e4:21:db:b1:e1:86:6c:f9:86:61:e0:3c:a3:33:2e:fe:85:9b: 9f:ad:6b:15:b1:87:71:ce:e1:45:a5:a7:25:e2:84:84:9d:5a: 92:d4:ec:a0:9e:c9:bc:3b:78:fe:d0:d4:78:e8:91:ff:0c:e3: b5:03:20:29 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt4ozXSQLLpDRD4fu9/1k4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzQ0NmRhN2E3MGJjZTc3M2VjMmJjMTY1NWFhZTMwYzNjMTg0MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu5DK2JvSkCcecX2gw0KMTilcjNP 1hYmL+4vKmwh1IYxN2LWMGlvuxR5UAus+Cb4buwNJ3hHbwb8O+AQc3pd1dOX2XdJ dSH+fXb7agu0j20+N/GWmLjrBgZHm2W11u1ZHclN+9UYHLg/zdvDKO+Jizjy9K+F fbsoAYggL9qVJo3HP9pAOylK0soDhDqOgEKaBffEV4iYEj6+5drRpx6HbilyGeHY 7ZWci9HlGFQSnDea2EjN/mFGFXy0/1vVM8MS6y+EDYMZbJ1wiYMNu1njztCfFa5s 9HENJV9VRE5efTt9nW229uYJW45ujF7o57iuK6WtXviyvjFMPvqRym8hjwIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFCNEbaenC853PsK8FlWq4ww8GEEsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2YzNTQ5 Zi0xOGY3LTQ4YjAtOTAxZC0yNWNjOWQ2Y2ZiYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZjM1NDlm LTE4ZjctNDhiMC05MDFkLTI1Y2M5ZDZjZmJiOS8xL0kwUnRwNmNMem5jLXdyd1dW YXJqRER3WVFTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGIBggrBgEF BQcBBwEB/wR5MHcwZgQCAAEwYAMEAi0L6AMEAi1bvAMEAi2ONAMEAi2TPAMEAi2Z 7AMEAk1TLAMEAk1TRAMEAlBMJAMEAlT8VAMEAl/WZAMEAqsWvAMEArkPsAMEArmk QAMEAsEkfAMEAsJuWAMEAtRRKDANBAIAAjAHAwUDKg9MwDANBgkqhkiG9w0BAQsF AAOCAQEAhUmgLSjaFPK6ItAk3mXLKHwxBVafwgT5jVaLfRlBCcKU5LN+4FBvnG3c ycR45GaeHaukvcdT3OPxkA9XCo2e8zOl974yGvGSxPxWFZ6ygGAS2KCAsXSWGnqz LrEjbzAEmKl6JZ3WtyxgWyZZ04R2oNnwkv09maGEpZuH9LEShiEoXYVn0Wyt+TTV CwIDvjrC0/VhITA1LYTC9EL5MIr8JusJGIFLf9nZM0rFpdbzmCxjpn+8ym5NA0qO IjdIiHtWcd17XHVo5CHbseGGbPmGYeA8ozMu/oWbn61rFbGHcc7hRaWnJeKEhJ1a ktTsoJ7JvDt4/tDUeOiR/wzjtQMgKQ== -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:35 2026 by rpki-client