This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer File: ILSHOEKpBPGmlyATk-e6YmhC9K8.cer (raw, json) Hash identifier: AxqWW6A4br5NS5V86y8ercIhWXQNfyMmdNXa+RsSr10= Subject key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E6DE3700B19E51EBBD0F0A795DF89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50333 IP: 85.255.240.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6d:e3:70:0b:19:e5:1e:bb:d0:f0:a7:95:df:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20b4873842a904f1a697201393e7ba626842f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:91:ee:9d:a7:2c:fb:8a:32:ae:41:70:a8: a9:f0:01:9b:eb:35:3e:fb:d8:ec:95:93:83:2a:1b: cb:b9:66:c2:4f:b5:26:e5:b6:31:7d:21:29:33:f7: 7e:cb:a3:2d:a7:18:9c:c7:e1:99:14:db:35:32:df: 81:5b:32:0e:d9:13:18:50:7e:69:3b:22:dd:9d:6f: 3f:4b:c6:b5:d1:c3:a4:60:52:d6:f8:ae:24:dc:99: 4a:66:8f:30:8b:6e:9c:70:9b:2c:bc:5a:55:75:b5: 9f:3c:bd:72:75:f5:85:71:ad:29:ee:ee:9c:ba:4b: 28:9b:03:ec:a2:21:c6:89:40:b2:1d:7f:33:82:3e: 41:76:e4:b2:34:76:e7:3f:0e:ce:d9:87:6e:3f:33: 98:69:32:87:a8:12:59:86:ee:f8:8d:57:40:61:34: ae:8c:65:e6:33:76:b5:75:8b:70:7d:c9:18:47:e4: 1f:29:90:f6:3b:17:42:5b:d8:14:65:13:8d:09:9e: 21:c9:d9:ac:72:c1:8a:af:ce:b0:db:a4:e4:a9:89: 65:17:22:49:f2:49:ba:17:d4:dc:d2:bd:08:f3:eb: 0a:3c:67:1b:01:c3:3a:83:a5:c4:b1:42:37:c8:f8: 8a:97:dc:e1:30:b0:71:03:6f:7c:f9:65:e1:11:4f: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50333 Signature Algorithm: sha256WithRSAEncryption 20:82:02:78:86:f2:49:f4:54:6e:f2:51:eb:77:dd:52:c3:b7: 30:1e:a4:dd:c2:77:d1:94:67:25:f2:6c:77:d6:cd:0c:b7:c5: 16:5f:43:ad:5a:c2:04:8b:f3:46:24:40:e4:11:bf:b2:84:62: 61:a1:2f:83:c0:22:b6:15:61:49:87:50:7a:40:1e:65:d4:8e: 76:8b:cf:4e:a1:90:1d:09:22:6f:3d:ef:4c:dc:3e:f8:d8:97: 6e:82:1f:07:50:5b:bf:79:63:78:79:1c:a3:69:e5:d8:5a:70: ff:c3:24:75:f9:b5:dd:99:1b:78:6c:57:72:07:bb:e4:2c:a9: 59:8c:88:a9:6a:c6:4a:31:c5:d5:8e:75:05:e0:83:53:56:c0: 25:a7:21:31:6b:74:28:eb:97:9c:89:47:9e:ee:54:b9:52:04: 08:9f:44:67:f5:89:8f:66:26:58:63:90:ec:32:7a:7f:4b:7b: 31:f1:fa:57:33:34:b1:2c:9e:ca:db:ea:ba:33:99:e9:24:f8: b5:5c:86:cb:ca:c7:14:ae:46:07:dd:cc:98:44:51:57:cc:7c: a5:25:a3:22:60:75:29:db:2b:b6:8b:b2:47:66:d3:fc:ac:6f: 77:8a:6d:78:6b:ea:f3:c7:1a:c7:f8:e2:5c:7a:39:83:b0:8e: 73:cd:d8:24 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fm3jcAsZ5R670PCnld+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGI0ODczODQyYTkwNGYxYTY5NzIwMTM5M2U3YmE2MjY4NDJmNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4+R7p2nLPuKMq5BcKip8AGb6zU+ +9jslZODKhvLuWbCT7Um5bYxfSEpM/d+y6Mtpxicx+GZFNs1Mt+BWzIO2RMYUH5p OyLdnW8/S8a10cOkYFLW+K4k3JlKZo8wi26ccJssvFpVdbWfPL1ydfWFca0p7u6c uksomwPsoiHGiUCyHX8zgj5BduSyNHbnPw7O2YduPzOYaTKHqBJZhu74jVdAYTSu jGXmM3a1dYtwfckYR+QfKZD2OxdCW9gUZRONCZ4hydmscsGKr86w26TkqYllFyJJ 8km6F9Tc0r0I8+sKPGcbAcM6g6XEsUI3yPiKl9zhMLBxA298+WXhEU8THwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCC0hzhCqQTxppcgE5PnumJoQvSvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzhlMjkx YS1iNjU1LTQ2ZTQtYmRjMy1lZjViYTU0YWRiNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvOGUyOTFh LWI2NTUtNDZlNC1iZGMzLWVmNWJhNTRhZGI1OS8xL0lMU0hPRUtwQlBHbWx5QVRr LWU2WW1oQzlLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEVf/wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDEnTANBgkqhkiG9w0BAQsFAAOCAQEAIIICeIbySfRUbvJR63fdUsO3MB6k3cJ3 0ZRnJfJsd9bNDLfFFl9DrVrCBIvzRiRA5BG/soRiYaEvg8AithVhSYdQekAeZdSO dovPTqGQHQkibz3vTNw++NiXboIfB1Bbv3ljeHkco2nl2Fpw/8Mkdfm13ZkbeGxX cge75CypWYyIqWrGSjHF1Y51BeCDU1bAJachMWt0KOuXnIlHnu5UuVIECJ9EZ/WJ j2YmWGOQ7DJ6f0t7MfH6VzM0sSyeytvqujOZ6ST4tVyGy8rHFK5GB93MmERRV8x8 pSWjImB1KdsrtouyR2bT/Kxvd4pteGvq88cax/jiXHo5g7COc83YJA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:46 2026 by rpki-client