This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer (raw, json) Hash identifier: LU+bNu+YQ3Oj3B94ROjAxVCtH0xsU8lB75udMX/mhRU= Subject key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1211179EA8F961437AE47839F71B75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56821 IP: 2a14:9880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:11:17:9e:a8:f9:61:43:7a:e4:78:39:f7:1b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:a1:45:4b:57:00:4e:d7:41:18:d6:30:b3: bb:d4:eb:14:e7:66:58:19:bd:22:0e:c4:45:ec:95: 4d:0c:4b:41:10:ac:f4:70:db:9c:7a:d9:b1:5e:66: 62:87:17:4f:58:48:42:a8:7d:63:db:d1:f8:1e:48: 19:13:3c:61:25:28:8f:2a:dc:b4:83:0c:40:92:9b: 2a:44:07:6c:25:ca:05:bc:ef:a3:2e:39:9e:24:e0: 25:05:25:45:cb:58:df:7d:e9:e5:42:16:7b:39:c8: 7e:ce:0f:23:d6:a4:ca:e7:6f:67:44:db:66:5e:ce: f0:fd:e8:ba:6b:bb:b1:2d:41:04:ba:c5:df:35:c0: 77:ff:04:37:c0:61:21:87:fa:ec:42:d1:af:4e:67: 2d:9c:2f:1d:8b:bf:08:b4:61:fe:27:09:2a:52:d6: 21:b3:d1:7d:10:5a:ea:fd:67:cc:ac:25:14:b0:86: 68:ab:71:66:f4:cb:f4:2d:bd:99:39:3e:58:37:2e: 6f:1e:05:4b:ce:af:13:8e:b3:3e:7e:82:16:1e:b2: 9e:02:d4:22:4c:81:3b:d7:ca:e6:40:11:df:4f:4e: 35:8e:16:fb:02:87:b6:3a:fd:3e:f9:c4:72:c9:df: 03:c7:b5:58:d4:5e:39:25:99:d9:83:0a:4f:a2:83: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56821 Signature Algorithm: sha256WithRSAEncryption 16:65:a9:ba:46:3d:bf:c9:ae:dd:90:f5:43:7c:ff:9f:8f:b4: f7:66:6d:9d:a8:40:07:06:6d:02:33:cb:d2:a4:4f:8c:36:9f: 9e:29:e9:3e:8f:cb:9f:9c:28:ed:34:05:3a:e9:1f:62:ce:20: cd:96:b4:b7:13:da:8a:3d:e7:dc:f0:5f:98:f3:87:df:31:9a: 26:0b:0a:ad:98:00:88:3a:15:4b:4e:e3:b4:43:68:de:2e:f6: 2b:e2:0f:07:c0:5c:3d:58:ab:9b:47:4c:bf:c6:de:72:ac:b2: 7f:1b:73:99:da:b6:09:af:23:b2:f1:e5:dc:5d:75:ef:9f:7e: 8c:14:d1:5a:22:20:c5:c1:18:7f:1e:f5:f4:0d:b0:a0:91:b5: 5f:67:bd:0f:12:c5:a9:90:d8:43:50:db:a3:49:a4:02:1c:82: 1e:2f:9f:2b:bd:14:5d:fd:a2:0a:86:97:0c:2a:86:04:bd:de: d5:0f:25:e1:ed:4b:51:03:98:65:3a:bf:13:76:10:9a:a7:d1: e3:0c:7d:20:54:e6:e3:b6:56:1a:a1:34:8d:86:9e:41:65:6a: d0:09:87:19:a7:0e:86:25:ab:3d:57:cb:4c:8a:3a:d3:e9:7a: 56:9a:fa:e2:b6:8e:48:cb:73:28:4b:6c:98:9c:86:2a:ac:23: 8c:b2:40:84 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8EhEXnqj5YUN65Hg59xt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzg0Njc0ZWEwMDdhMTIwMzBhYzhkMmJlNTYwZGIyMWY0ZmMwYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0imhRUtXAE7XQRjWMLO71OsU52ZY Gb0iDsRF7JVNDEtBEKz0cNucetmxXmZihxdPWEhCqH1j29H4HkgZEzxhJSiPKty0 gwxAkpsqRAdsJcoFvO+jLjmeJOAlBSVFy1jffenlQhZ7Och+zg8j1qTK529nRNtm Xs7w/ei6a7uxLUEEusXfNcB3/wQ3wGEhh/rsQtGvTmctnC8di78ItGH+JwkqUtYh s9F9EFrq/WfMrCUUsIZoq3Fm9Mv0Lb2ZOT5YNy5vHgVLzq8TjrM+foIWHrKeAtQi TIE718rmQBHfT041jhb7Aoe2Ov0++cRyyd8Dx7VY1F45JZnZgwpPooME+QIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzRiOWE0 Yy04MDJkLTRiMWUtOTRmZS1jOGY1NmMxMjJmZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNGI5YTRj LTgwMmQtNGIxZS05NGZlLWM4ZjU2YzEyMmZlYy8xL0k0Um5UcUFIb1NBd3JJMHI1 V0RiSWZUOEM1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhSYgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMA3fUwDQYJKoZIhvcNAQELBQADggEBABZlqbpGPb/Jrt2Q9UN8/5+PtPdmbZ2o QAcGbQIzy9KkT4w2n54p6T6Py5+cKO00BTrpH2LOIM2WtLcT2oo959zwX5jzh98x miYLCq2YAIg6FUtO47RDaN4u9iviDwfAXD1Yq5tHTL/G3nKssn8bc5natgmvI7Lx 5dxdde+ffowU0VoiIMXBGH8e9fQNsKCRtV9nvQ8SxamQ2ENQ26NJpAIcgh4vnyu9 FF39ogqGlwwqhgS93tUPJeHtS1EDmGU6vxN2EJqn0eMMfSBU5uO2VhqhNI2GnkFl atAJhxmnDoYlqz1Xy0yKOtPpelaa+uK2jkjLcyhLbJichiqsI4yyQIQ= -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:35 2026 by rpki-client