This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer (raw, json) Hash identifier: Wsy8a8dOhSgca/gt7IlyYSmoKL4S9nNyJGAuxW4m0A8= Subject key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8899D6FA6BE441A00EDD96E7C244 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47164 IP: 185.174.180.0/22 IP: 185.227.104.0/22 IP: 2a0b:b100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:99:d6:fa:6b:e4:41:a0:0e:dd:96:e7:c2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:8d:79:2b:4f:34:18:4f:29:5f:19:9d:db: 87:36:89:89:c7:0a:38:77:b6:64:9e:67:f6:99:aa: 17:96:39:1d:79:a1:6c:87:70:c6:43:45:d0:4e:c3: 24:3f:70:26:6d:10:60:4a:a3:de:c1:8f:dc:0a:85: 5a:48:67:c4:98:f5:49:4d:fe:0c:55:be:7b:cb:6a: 68:47:b1:66:80:41:88:a9:78:95:f3:5a:93:df:79: bb:9b:c0:fa:89:28:8c:a3:58:95:50:cd:aa:b3:41: ef:ab:22:2b:f2:eb:4f:09:97:a6:a3:11:b4:50:ba: 86:17:95:34:b0:0f:ce:dd:9c:84:0f:cd:33:5e:39: 5d:84:18:f0:fd:d6:c6:3b:02:74:92:cb:52:36:23: df:56:86:49:7c:40:88:df:e4:02:fa:af:43:fc:b5: 83:cf:67:f1:01:0e:85:4f:a5:ad:c2:eb:1f:a3:45: f8:26:ba:fc:c4:f3:7d:b0:81:ff:16:28:23:f7:41: bb:a3:5f:b9:ae:39:1c:5d:a1:e5:d2:89:a1:32:8c: 9d:da:d5:6b:af:13:68:42:9d:4f:d6:a8:78:01:f5: 22:aa:ca:0c:65:4b:bf:e4:3b:99:4a:5a:2c:81:f4: 9d:5d:6c:e0:7c:e5:4f:17:eb:75:5d:f7:8e:5d:f7: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.180.0/22 185.227.104.0/22 IPv6: 2a0b:b100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47164 Signature Algorithm: sha256WithRSAEncryption 1f:8d:9b:11:ff:4f:7a:f9:83:54:bc:ba:49:9f:4b:d8:30:da: 82:50:18:94:b8:05:b9:6f:d8:af:62:6d:e1:27:56:43:69:e4: c3:70:0c:5f:ef:70:65:21:b5:e0:6c:3b:85:eb:cb:18:2b:4e: f8:9b:57:a8:d9:00:eb:00:c5:69:3b:51:d7:12:45:61:c9:70: 2a:2f:c7:1f:7d:33:08:d1:cf:81:58:6b:60:b4:82:c5:fd:14: 5c:d4:a6:b9:ae:a3:d3:df:99:dd:d3:9b:53:1a:51:e3:0f:a8: a3:ad:de:cc:ec:07:2a:d3:e6:04:22:17:7c:61:4c:b4:81:35: ba:35:1e:ad:d8:ed:c8:e6:e9:4f:39:c2:91:ee:9c:14:bd:c5: 9e:a7:c6:ef:c1:9c:d6:39:7c:c7:65:05:62:33:c8:71:87:5e: 17:5f:82:c3:4d:5d:49:34:35:5e:1f:78:a1:ac:22:79:e6:a8: 63:89:30:13:0c:31:82:80:03:ff:33:34:13:64:fd:03:87:a0: 2d:66:35:4b:5c:c9:76:e1:aa:95:c7:25:99:15:a4:cb:73:e3: 1d:3d:9c:07:eb:ce:89:ae:09:78:b1:4e:34:36:c6:b7:99:82: 20:54:64:72:99:ad:97:0b:89:a0:bf:21:26:00:3e:38:c8:bf: 8c:3b:e9:fa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W4iZ1vpr5EGgDt2W58JEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2E3YjU5M2M4MDRhNjgzZjBjOGZhM2VkYTkzMzVhZjkyYTg5MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKqNeStPNBhPKV8ZnduHNomJxwo4 d7Zknmf2maoXljkdeaFsh3DGQ0XQTsMkP3AmbRBgSqPewY/cCoVaSGfEmPVJTf4M Vb57y2poR7FmgEGIqXiV81qT33m7m8D6iSiMo1iVUM2qs0HvqyIr8utPCZemoxG0 ULqGF5U0sA/O3ZyED80zXjldhBjw/dbGOwJ0kstSNiPfVoZJfECI3+QC+q9D/LWD z2fxAQ6FT6Wtwusfo0X4Jrr8xPN9sIH/Figj90G7o1+5rjkcXaHl0omhMoyd2tVr rxNoQp1P1qh4AfUiqsoMZUu/5DuZSlosgfSdXWzgfOVPF+t1XfeOXfeKgQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCOntZPIBKaD8Mj6PtqTNa+SqJBEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2RkZjU1 OS00MzNiLTQwOGYtYTViMi0zZmI1YWRkZTYwNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZGRmNTU5 LTQzM2ItNDA4Zi1hNWIyLTNmYjVhZGRlNjA0MC8xL0k2ZTFrOGdFcG9Qd3lQby0y cE0xcjVLb2tFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCua60AwQCueNoMA0EAgACMAcDBQMqC7EAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4PDANBgkqhkiG9w0BAQsFAAOCAQEAH42b Ef9PevmDVLy6SZ9L2DDaglAYlLgFuW/Yr2Jt4SdWQ2nkw3AMX+9wZSG14Gw7hevL GCtO+JtXqNkA6wDFaTtR1xJFYclwKi/HH30zCNHPgVhrYLSCxf0UXNSmua6j09+Z 3dObUxpR4w+oo63ezOwHKtPmBCIXfGFMtIE1ujUerdjtyObpTznCke6cFL3FnqfG 78Gc1jl8x2UFYjPIcYdeF1+Cw01dSTQ1Xh94oawieeaoY4kwEwwxgoAD/zM0E2T9 A4egLWY1S1zJduGqlcclmRWky3PjHT2cB+vOia4JeLFONDbGt5mCIFRkcpmtlwuJ oL8hJgA+OMi/jDvp+g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:55 2026 by rpki-client