This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer File: IMjVw3OmvzurIpOUNguG0Alq7L0.cer (raw, json) Hash identifier: qVH/Bmx/hEepQTQ/2B5Abx6qvlEN+TtIDQ4ST/48Uzw= Subject key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83EE8FF28D3BD499E2648792E4AD74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211742 IP: 2001:67c:293c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ee:8f:f2:8d:3b:d4:99:e2:64:87:92:e4:ad:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:59:0d:bd:17:fa:08:82:3c:f3:73:e0:14: 0f:c8:99:b6:39:b8:6a:65:26:d3:2b:ca:db:df:92: 13:75:86:f2:a9:67:55:fa:b5:8f:ca:6d:57:b2:54: e7:0e:95:e1:f2:f3:51:30:78:6c:4b:20:3c:08:98: af:66:23:0a:d8:3a:11:bc:7f:36:30:fa:ba:1f:b5: bf:0d:ac:fb:77:e8:5c:39:04:1e:39:67:59:78:61: 12:bb:29:79:b4:54:b3:24:76:48:de:4d:1b:8c:39: 9b:17:75:97:ab:00:36:4d:b1:d9:fa:fa:25:de:bc: 99:46:87:1c:38:89:97:14:91:84:a4:46:37:2b:b1: 3c:4f:b3:79:58:cb:07:fb:ff:4e:03:97:02:0a:ac: 14:52:54:d5:41:9c:65:17:40:1e:b9:8f:04:81:60: 41:88:70:24:df:24:43:e0:65:de:17:d1:df:eb:7e: 54:c1:01:b5:82:5a:0b:71:be:d2:40:eb:f9:ef:b9: ca:01:5d:50:16:74:a6:68:93:66:7b:07:de:28:05: 9c:0d:0e:f1:0d:1d:90:21:21:35:75:df:8c:9e:fb: 6e:64:cf:0c:12:3a:b1:37:13:42:ae:44:b7:1f:4f: 00:3d:11:87:c2:69:88:1a:74:a1:a0:85:c2:bf:d4: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:293c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211742 Signature Algorithm: sha256WithRSAEncryption 62:ce:07:6f:6f:ee:ac:ab:58:0b:b1:dc:63:0d:64:47:81:eb: 17:8b:97:fa:c4:f9:c9:da:ac:e0:24:5d:7c:6c:3d:c5:52:ef: e7:3a:41:7e:59:56:d4:0a:8f:0e:6c:e8:28:04:9d:9d:72:3c: e2:49:60:94:c4:ff:c4:04:d5:a4:ad:19:9a:9d:2d:45:e9:ce: 08:3a:79:dd:7f:11:dc:14:38:6c:4c:4c:02:8b:46:ce:6b:39: 1e:9d:85:cd:01:b7:fd:09:47:69:c1:1f:37:33:37:8c:58:9b: 3c:d6:3a:ab:62:ac:a1:da:a3:a8:b6:3d:cd:4f:5e:c6:2d:7f: 8a:4f:b2:b6:4b:62:d4:e4:d1:e8:c7:54:f8:4f:5d:cf:9f:4f: 4f:28:77:4d:10:21:62:9e:0a:59:70:f6:e6:23:1a:df:b8:7c: ce:2c:bf:46:41:ac:70:05:65:2f:3d:a1:a5:1a:a8:b5:80:e6: bd:38:01:30:fd:5c:15:ab:44:03:33:6c:bc:46:91:40:9d:11: 76:68:95:a2:68:eb:21:61:8b:23:4e:26:45:d6:08:e8:dd:20: ef:9e:24:9a:c6:e1:18:8c:28:1f:d4:cc:05:3c:9c:62:5d:3b: aa:a2:69:be:3a:68:98:f4:6d:15:a3:93:4a:84:68:c6:a2:3c: a4:9d:2c:b2 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/g+6P8o071JniZIeS5K10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGM4ZDVjMzczYTZiZjNiYWIyMjkzOTQzNjBiODZkMDA5NmFlY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w5ZDb0X+giCPPNz4BQPyJm2Obhq ZSbTK8rb35ITdYbyqWdV+rWPym1XslTnDpXh8vNRMHhsSyA8CJivZiMK2DoRvH82 MPq6H7W/Daz7d+hcOQQeOWdZeGESuyl5tFSzJHZI3k0bjDmbF3WXqwA2TbHZ+vol 3ryZRoccOImXFJGEpEY3K7E8T7N5WMsH+/9OA5cCCqwUUlTVQZxlF0AeuY8EgWBB iHAk3yRD4GXeF9Hf635UwQG1gloLcb7SQOv577nKAV1QFnSmaJNmewfeKAWcDQ7x DR2QISE1dd+MnvtuZM8MEjqxNxNCrkS3H08APRGHwmmIGnShoIXCv9QhCwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCDI1cNzpr87qyKTlDYLhtAJauy9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzhlOTg1 NS01OTg5LTQ4NmUtOTQzNi01MGE3YzkyNTkxZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOGU5ODU1 LTU5ODktNDg2ZS05NDM2LTUwYTdjOTI1OTFkMC8xL0lNalZ3M09tdnp1cklwT1VO Z3VHMEFscTdMMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCk8MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM7HjANBgkqhkiG9w0BAQsFAAOCAQEAYs4Hb2/urKtYC7HcYw1kR4HrF4uX +sT5ydqs4CRdfGw9xVLv5zpBfllW1AqPDmzoKASdnXI84klglMT/xATVpK0Zmp0t RenOCDp53X8R3BQ4bExMAotGzms5Hp2FzQG3/QlHacEfNzM3jFibPNY6q2Ksodqj qLY9zU9exi1/ik+ytkti1OTR6MdU+E9dz59PTyh3TRAhYp4KWXD25iMa37h8ziy/ RkGscAVlLz2hpRqotYDmvTgBMP1cFatEAzNsvEaRQJ0RdmiVomjrIWGLI04mRdYI 6N0g754kmsbhGIwoH9TMBTycYl07qqJpvjpomPRtFaOTSoRoxqI8pJ0ssg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:58 2026 by rpki-client