This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer File: IKDFQA4CP5P1GOQwBMM7x50vayE.cer (raw, json) Hash identifier: TxwvH13MZfytp3VIqUnIPHwrnP22tJq/xvGFyuPBhBA= Subject key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834AD42A38D3DFE90FC64FFBA6CEEF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35202 IP: 5.180.116.0/22 IP: 2a0a:6400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ad:42:a3:8d:3d:fe:90:fc:64:ff:ba:6c:ee:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0f:4d:00:f4:c6:85:34:f8:c0:ba:49:a8:ce: 6f:6a:21:6c:30:f8:10:ee:2d:9b:46:f0:67:ca:bf: da:5b:a0:71:25:1b:85:66:52:c9:73:57:23:8a:a1: 3a:a9:9b:b9:fb:75:d6:cb:ae:26:44:a9:27:60:7f: 85:ba:3f:70:5d:e0:81:a2:96:24:fd:db:26:c2:b3: 55:44:22:d2:a3:9d:7d:ee:00:66:07:9e:a8:59:4a: c9:75:a5:48:04:81:e5:5a:44:30:b1:f6:ed:9c:a1: 49:17:a9:0f:4d:34:65:6f:51:5d:f4:29:6a:aa:07: 59:44:cf:81:08:a3:39:be:07:4e:d1:7c:d0:93:a4: fb:c8:4b:d3:97:9e:29:c5:5c:48:42:79:1b:c8:4a: 65:c0:7e:d3:09:ff:f9:62:0e:b1:13:8a:68:9d:b6: b8:5a:20:73:40:c6:2a:95:01:36:05:6d:52:86:8d: a6:25:9d:3f:88:d4:9c:25:f3:1e:11:e8:ac:0f:4b: 0b:7c:ca:dc:11:78:19:8d:95:19:71:62:fe:69:d4: b1:3f:37:1d:df:b3:71:ea:02:c1:13:cc:79:b0:66: 04:82:cd:9e:2f:62:68:f7:09:91:c5:5f:d4:2f:d8: f0:82:a4:fb:93:47:76:21:b1:45:6b:04:df:e9:3a: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.116.0/22 IPv6: 2a0a:6400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35202 Signature Algorithm: sha256WithRSAEncryption 50:cb:99:61:e4:cf:de:08:cd:f2:28:15:0c:87:23:5c:14:09: 44:f8:cc:60:c2:3a:e7:54:67:40:e6:e3:de:00:b6:55:e0:2e: ea:cc:5a:1a:3c:16:9c:1f:27:a3:aa:9d:bb:73:e1:06:c3:57: d4:36:f9:b2:da:26:c4:39:49:d8:e6:1a:fe:44:55:95:2e:08: dd:49:76:26:67:02:a8:e2:22:fc:4c:84:4c:fd:0c:20:e0:b2: fb:cc:2c:2e:9b:e8:86:66:1c:38:93:8e:f5:7b:e7:10:e1:9f: 5a:76:0e:09:21:6f:1f:6f:e7:19:1a:03:7f:0f:0b:70:b9:30: 65:09:12:1a:bf:71:98:2c:17:b1:5d:83:22:8e:02:52:a2:92: f4:0d:21:6e:93:0d:14:6f:29:7d:ad:39:f0:2d:36:fd:2a:1a: 53:4f:dd:d8:16:ee:20:de:6d:f4:68:c7:fc:32:4f:fa:15:59: ca:76:c5:cc:06:d5:d3:be:0a:52:a2:58:17:1f:0a:14:18:1f: 56:6f:6f:01:c0:f6:2f:b4:4d:a2:19:26:e3:ad:d1:4c:30:c4: 9f:c6:e0:71:a7:f3:a8:f5:b6:de:eb:88:81:80:a8:e9:fa:30: 92:c6:04:79:26:ff:fc:de:94:33:24:19:d9:5f:43:0a:c3:c9: 22:30:32:5d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NK1Co409/pD8ZP+6bO72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGEwYzU0MDBlMDIzZjkzZjUxOGU0MzAwNGMzM2JjNzlkMmY2YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q9NAPTGhTT4wLpJqM5vaiFsMPgQ 7i2bRvBnyr/aW6BxJRuFZlLJc1cjiqE6qZu5+3XWy64mRKknYH+Fuj9wXeCBopYk /dsmwrNVRCLSo5197gBmB56oWUrJdaVIBIHlWkQwsfbtnKFJF6kPTTRlb1Fd9Clq qgdZRM+BCKM5vgdO0XzQk6T7yEvTl54pxVxIQnkbyEplwH7TCf/5Yg6xE4ponba4 WiBzQMYqlQE2BW1Sho2mJZ0/iNScJfMeEeisD0sLfMrcEXgZjZUZcWL+adSxPzcd 37Nx6gLBE8x5sGYEgs2eL2Jo9wmRxV/UL9jwgqT7k0d2IbFFawTf6TpC5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCCgxUAOAj+T9RjkMATDO8edL2shMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2RmZWIx MC05NTI0LTQxYTUtYmJkMy0wNzY5YWE2MjcxZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZGZlYjEw LTk1MjQtNDFhNS1iYmQzLTA3NjlhYTYyNzFlNi8xL0lLREZRQTRDUDVQMUdPUXdC TU03eDUwdmF5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbR0MA0EAgACMAcDBQMqCmQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCJgjANBgkqhkiG9w0BAQsFAAOCAQEAUMuZYeTP3gjN 8igVDIcjXBQJRPjMYMI651RnQObj3gC2VeAu6sxaGjwWnB8no6qdu3PhBsNX1Db5 stomxDlJ2OYa/kRVlS4I3Ul2JmcCqOIi/EyETP0MIOCy+8wsLpvohmYcOJOO9Xvn EOGfWnYOCSFvH2/nGRoDfw8LcLkwZQkSGr9xmCwXsV2DIo4CUqKS9A0hbpMNFG8p fa058C02/SoaU0/d2BbuIN5t9GjH/DJP+hVZynbFzAbV074KUqJYFx8KFBgfVm9v AcD2L7RNohkm463RTDDEn8bgcafzqPW23uuIgYCo6fowksYEeSb//N6UMyQZ2V9D CsPJIjAyXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:36 2026 by rpki-client