This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer File: IJ2ng837PLbZvILBktbXKrtKM20.cer (raw, json) Hash identifier: 1Fzcgzv7dSISKDCb3obUc+PkscZxRzguEM4FXEnzvbM= Subject key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F848D4D4EF8E2A49596AEF0165BF269 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62317 IP: 185.40.132.0/22 IP: 185.66.76.0/22 IP: 185.69.200.0/22 IP: 2a01:4b20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8d:4d:4e:f8:e2:a4:95:96:ae:f0:16:5b:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:08:98:bd:c3:15:d5:f5:6c:92:a9:be:79: dc:a4:71:d5:73:38:5d:71:f7:2c:0b:79:63:8d:1d: 3b:f1:5f:fe:09:47:ed:60:6a:e6:13:ae:02:0a:fd: db:b7:a3:b0:5f:48:52:cf:7f:ac:5c:71:a2:fa:71: 8c:f1:bf:eb:f2:b5:89:3f:94:d1:72:f1:37:a9:5f: 2b:35:a5:6d:f3:7c:06:14:19:80:ad:2f:3f:73:06: b5:9a:b8:97:77:40:79:4b:30:ad:4a:d9:65:fd:97: 8a:8a:6c:03:13:2d:c0:86:08:e9:6b:81:9f:ea:72: 0d:c4:fc:25:38:95:71:b5:1a:a3:f6:d4:a0:e0:aa: dc:a9:c7:45:19:88:63:62:bd:54:8b:60:e2:10:7e: 99:fc:21:2c:bd:8f:9e:e0:b2:93:27:24:53:1b:1b: 02:22:dd:34:00:a2:08:1a:df:f5:ea:c7:b9:b4:56: d6:40:14:40:87:08:e3:7a:83:fe:76:9e:5e:db:41: e5:bf:44:e1:69:ea:2b:8a:d8:78:f2:c2:0c:94:7d: 1b:9d:87:01:3c:c2:b8:c0:ac:b4:c6:45:20:eb:86: 9f:6c:25:55:8f:fe:a8:cd:4d:cd:db:74:3a:ec:24: 65:a9:d1:d9:3c:e5:5b:41:72:43:eb:53:09:96:22: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.132.0/22 185.66.76.0/22 185.69.200.0/22 IPv6: 2a01:4b20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62317 Signature Algorithm: sha256WithRSAEncryption 8e:2c:53:52:f6:2f:c0:ac:2f:e3:31:ba:93:9c:4a:a9:e8:d6: 09:22:af:38:d3:30:0d:6a:43:88:75:f6:57:6d:c3:b0:8d:f3: 4a:46:7f:f0:00:c3:39:ff:2e:1e:ae:25:66:23:b9:e4:ec:41: a2:c9:f1:c4:c8:8d:6b:dd:ae:69:f5:0f:7d:32:26:d4:94:a1: 27:aa:bd:cb:51:2c:29:6d:6e:e1:6a:83:f2:55:5b:b5:53:20: 11:74:64:ce:4e:9e:55:b7:21:2b:0c:02:d6:8e:36:57:ee:68: 49:e0:40:f5:5e:7c:96:38:12:4d:39:ef:62:d6:b6:2e:12:8a: e9:f6:f8:13:bf:05:ef:24:dc:db:60:08:cd:bf:fd:a7:16:b9: 66:1e:c0:0e:f6:42:1e:3b:f9:74:09:8e:71:ae:e4:be:3d:e5: c4:f5:78:2f:39:2f:59:e2:28:49:b7:79:db:7f:72:30:6c:94: 47:19:d3:86:20:93:bc:46:43:bc:bc:bb:19:c7:f2:d7:42:3b: ba:80:8b:ee:55:11:61:45:a5:57:8f:07:e6:23:7b:34:e2:fa: ce:bf:c1:ee:b4:dc:c0:e9:3c:95:7a:57:2f:14:31:5e:3d:37: d8:f2:a5:ef:9c:b9:68:92:a5:a6:83:fe:eb:b4:e0:61:a0:cf: 47:57:74:f5 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/hI1NTvjipJWWrvAWW/JpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDlkYTc4M2NkZmIzY2I2ZDliYzgyYzE5MmQ2ZDcyYWJiNGEzMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIsImL3DFdX1bJKpvnncpHHVczhd cfcsC3ljjR078V/+CUftYGrmE64CCv3bt6OwX0hSz3+sXHGi+nGM8b/r8rWJP5TR cvE3qV8rNaVt83wGFBmArS8/cwa1mriXd0B5SzCtStll/ZeKimwDEy3Ahgjpa4Gf 6nINxPwlOJVxtRqj9tSg4KrcqcdFGYhjYr1Ui2DiEH6Z/CEsvY+e4LKTJyRTGxsC It00AKIIGt/16se5tFbWQBRAhwjjeoP+dp5e20Hlv0Thaeorith48sIMlH0bnYcB PMK4wKy0xkUg64afbCVVj/6ozU3N23Q67CRlqdHZPOVbQXJD61MJliJxmQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFCCdp4PN+zy22byCwZLW1yq7SjNtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzVkNTlj Ni1mMDg5LTQ1MzAtYTA5Ny0yODQ2MWJlODk3NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNWQ1OWM2 LWYwODktNDUzMC1hMDk3LTI4NDYxYmU4OTc0MC8xL0lKMm5nODM3UExiWnZJTEJr dGJYS3J0S00yMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuSiEAwQCuUJMAwQCuUXIMA0EAgACMAcDBQMq AUsgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzbTANBgkqhkiG9w0BAQsFAAOC AQEAjixTUvYvwKwv4zG6k5xKqejWCSKvONMwDWpDiHX2V23DsI3zSkZ/8ADDOf8u Hq4lZiO55OxBosnxxMiNa92uafUPfTIm1JShJ6q9y1EsKW1u4WqD8lVbtVMgEXRk zk6eVbchKwwC1o42V+5oSeBA9V58ljgSTTnvYta2LhKK6fb4E78F7yTc22AIzb/9 pxa5Zh7ADvZCHjv5dAmOca7kvj3lxPV4LzkvWeIoSbd5239yMGyURxnThiCTvEZD vLy7Gcfy10I7uoCL7lURYUWlV48H5iN7NOL6zr/B7rTcwOk8lXpXLxQxXj032PKl 75y5aJKlpoP+67TgYaDPR1d09Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:18 2026 by rpki-client