This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer File: I7KazNTA1fX4N36n9GNDt2Brq3w.cer (raw, json) Hash identifier: 1G+wmahvTPldjH797YUlJGWiZ/AFgEXnA6/v3a7+8gw= Subject key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30C5C3E38521562627FDFE7620F14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206459 IP: 185.164.160.0/24 IP: 2a12:bd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0c:5c:3e:38:52:15:62:62:7f:df:e7:62:0f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:00:8d:00:70:79:3d:2b:de:39:f9:67:d4: 2c:65:44:7f:38:c0:12:ac:e1:59:f8:ff:19:ff:ec: 3f:14:24:85:6d:98:79:8d:2b:cf:10:40:c6:42:72: f0:94:ad:9e:a8:fe:5b:c8:79:e9:5e:48:70:2c:0e: dc:ca:b4:89:32:4e:f3:39:5c:d0:37:af:cd:08:c3: 87:a6:f6:34:53:9c:69:ca:94:e9:88:41:44:ae:81: bf:06:3b:3b:c3:cc:d2:3a:d9:23:bf:14:1c:89:54: 73:23:08:1d:dc:be:d7:48:32:0e:87:30:1a:cb:fc: 98:3d:2e:d6:68:5b:9c:a8:16:d5:00:e9:e3:0b:4d: 57:4e:23:cd:f9:61:2e:ec:33:a4:3e:cc:65:37:9d: b4:75:c6:6b:e6:5c:5c:92:d9:83:60:1b:5a:78:a8: 33:54:76:ca:69:72:5c:39:51:5c:50:40:d5:2b:0d: 14:c4:98:d6:a6:35:b3:76:8f:82:4d:94:d1:36:ad: 33:5a:16:85:4b:4d:ca:2e:9d:e8:07:75:80:29:db: 01:96:44:9c:97:e1:27:c4:eb:66:33:78:19:5c:36: 2b:bb:d2:25:6f:d5:ad:be:5f:96:45:b6:db:1a:aa: 68:dc:40:ae:5c:e7:0a:fd:ae:8a:fd:35:64:0a:72: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.160.0/24 IPv6: 2a12:bd40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206459 Signature Algorithm: sha256WithRSAEncryption 3e:50:60:9d:cc:9b:37:bf:27:be:af:1d:cc:4a:50:69:53:2a: 00:4c:2c:6d:f6:54:09:99:be:d7:e6:e6:71:1a:69:05:49:77: 6d:2d:e5:cb:01:a8:f0:59:9d:c2:36:02:66:f6:87:e5:f1:55: 59:24:3b:bc:69:49:f3:c3:2e:30:7d:81:72:3f:ac:e5:3e:4e: 10:2f:18:63:db:2d:a1:42:06:df:f5:6e:dd:61:55:8b:46:1c: 1b:15:0e:21:96:69:24:f0:0d:63:48:8d:38:c7:87:a0:db:31: dc:d8:0b:a3:bd:89:ab:99:51:72:2e:0b:cc:e3:56:91:b1:3a: 8a:a7:0c:52:9c:54:6c:cc:4a:4e:aa:66:e9:df:73:86:cc:ac: c5:52:39:48:43:ba:e0:65:e3:46:c5:b4:64:96:60:12:5f:aa: 55:35:24:47:37:3c:09:17:c3:07:37:73:f7:32:ed:b5:b2:23: ed:7b:1d:8a:76:d6:e2:1e:6b:79:9e:27:3c:fd:0d:45:55:0a: ec:f5:0e:1e:08:82:17:57:db:be:89:c4:d7:b0:89:86:4a:4e: cf:07:c7:ce:90:c7:89:5b:fe:fe:64:f2:cd:ab:49:1d:c8:4e: 48:de:f5:1d:46:36:27:53:ac:ed:8b:fb:d3:8f:c3:3a:d9:63: f0:b2:65:48 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4owxcPjhSFWJif9/nYg8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2IyOWFjY2Q0YzBkNWY1ZjgzNzdlYTdmNDYzNDNiNzYwNmJhYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfIAjQBweT0r3jn5Z9QsZUR/OMAS rOFZ+P8Z/+w/FCSFbZh5jSvPEEDGQnLwlK2eqP5byHnpXkhwLA7cyrSJMk7zOVzQ N6/NCMOHpvY0U5xpypTpiEFEroG/Bjs7w8zSOtkjvxQciVRzIwgd3L7XSDIOhzAa y/yYPS7WaFucqBbVAOnjC01XTiPN+WEu7DOkPsxlN520dcZr5lxcktmDYBtaeKgz VHbKaXJcOVFcUEDVKw0UxJjWpjWzdo+CTZTRNq0zWhaFS03KLp3oB3WAKdsBlkSc l+EnxOtmM3gZXDYru9Ilb9Wtvl+WRbbbGqpo3ECuXOcK/a6K/TVkCnLG/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCOymszUwNX1+Dd+p/RjQ7dga6t8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzgxMWRi OS1jYmUwLTRhODktYTIyMC0xMTc0YTQyODAzNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvODExZGI5 LWNiZTAtNGE4OS1hMjIwLTExNzRhNDI4MDM2Yi8xL0k3S2F6TlRBMWZYNE4zNm45 R05EdDJCcnEzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuaSgMA0EAgACMAcDBQMqEr1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmezANBgkqhkiG9w0BAQsFAAOCAQEAPlBgncybN78n vq8dzEpQaVMqAEwsbfZUCZm+1+bmcRppBUl3bS3lywGo8FmdwjYCZvaH5fFVWSQ7 vGlJ88MuMH2Bcj+s5T5OEC8YY9stoUIG3/Vu3WFVi0YcGxUOIZZpJPANY0iNOMeH oNsx3NgLo72Jq5lRci4LzONWkbE6iqcMUpxUbMxKTqpm6d9zhsysxVI5SEO64GXj RsW0ZJZgEl+qVTUkRzc8CRfDBzdz9zLttbIj7XsdinbW4h5reZ4nPP0NRVUK7PUO HgiCF1fbvonE17CJhkpOzwfHzpDHiVv+/mTyzatJHchOSN71HUY2J1Os7Yv704/D Otlj8LJlSA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:55 2026 by rpki-client