This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer File: INShQtHjFwTrW88Dp4X2N4NVt5k.cer (raw, json) Hash identifier: Vx2tRCmvSSdpNK0JhUqeNQcg0fvon1g65SQBwxtu7TM= Subject key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA577FE106717AE8419EFE9A88D9F96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.243.64.0/22 IP: 2a0d:780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:77:fe:10:67:17:ae:84:19:ef:e9:a8:8d:9f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d4a142d1e31704eb5bcf03a785f6378355b799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:7d:38:04:69:0c:f4:e4:8e:05:7b:5b:4f: bc:e9:dd:02:43:db:02:c2:77:ac:39:36:d0:3f:58: cc:be:41:12:45:fb:45:66:c6:59:e1:f5:c3:79:79: f0:98:23:41:a0:88:9d:86:a8:34:a3:1d:21:bb:4d: c3:48:51:a7:68:63:d9:8d:4d:b1:07:63:de:b6:57: 53:8e:14:2f:b6:25:3e:dc:71:0c:59:a1:f7:1a:36: 4e:bc:1b:34:13:6f:16:6e:04:8b:ad:df:2c:61:c7: 86:46:02:78:0d:90:6a:84:74:0e:e6:52:37:2a:ee: 0c:5c:42:28:8a:a0:93:94:83:05:82:d9:11:3f:e3: 9e:d2:ec:e2:f7:45:b0:97:47:95:c9:fe:06:78:3a: 5d:6d:9d:ba:bd:43:a7:1c:8c:b7:1e:a1:1a:3e:bc: 23:69:c0:45:a5:4a:99:54:0b:e2:77:9c:6f:8a:f0: 9a:72:8a:4a:9d:10:d0:25:40:2b:a4:59:ae:3d:3a: 99:64:d2:1c:d9:e5:94:d4:42:27:0c:73:2d:da:b2: fd:ad:d7:97:bc:fa:c0:29:06:13:81:c0:1a:c1:a0: 82:65:22:36:a8:37:cd:e2:65:ee:a6:fd:c3:32:6a: 17:77:55:97:e2:92:c1:d2:fd:a8:d2:72:62:4b:8b: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.64.0/22 IPv6: 2a0d:780::/29 Signature Algorithm: sha256WithRSAEncryption 8f:68:8b:47:d1:d5:93:e2:d7:49:11:68:6a:56:bd:2a:5e:10: 53:b5:a8:93:4d:25:b0:d4:f9:08:0e:13:d0:ff:6a:b1:af:2d: 5f:de:a1:7c:ab:f0:8c:6a:de:6f:99:8a:8d:9e:4d:27:83:45: 51:8a:d4:ac:70:d9:80:c7:80:ef:97:2b:0a:97:62:e0:0c:11: d4:c2:5f:f7:cc:14:ab:8a:6a:eb:72:63:83:39:7f:8c:68:19: 40:eb:06:df:ab:69:1c:37:2c:5b:04:77:2d:e9:a1:58:7b:b9: 33:72:ac:0a:cf:dc:cb:68:11:24:e8:9f:1f:ba:d3:1d:c9:68: 53:97:be:e4:cc:d9:8a:fa:6f:c3:db:eb:4f:c0:2c:b5:a6:dd: 62:26:6d:2a:26:c0:f9:45:2d:83:47:dd:06:d6:86:ac:d9:96: 29:ac:6f:fe:f8:93:f7:3b:eb:74:25:de:35:54:fa:52:5e:28: f8:b2:78:8e:30:42:5d:72:c7:ce:29:bd:9a:39:4c:a1:f0:b6: 2e:e2:77:fe:ee:95:e9:e0:99:49:27:0a:f6:b9:f7:42:40:67: cd:06:13:a8:2c:19:43:7d:7a:15:39:f6:27:a0:de:74:d9:e5: 42:4f:9b:4a:a4:d2:81:ff:ca:6c:15:51:a4:ac:4f:52:1c:f4: f4:d5:e2:74 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pXf+EGcXroQZ7+mojZ+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ0YTE0MmQxZTMxNzA0ZWI1YmNmMDNhNzg1ZjYzNzgzNTViNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgB9OARpDPTkjgV7W0+86d0CQ9sC wnesOTbQP1jMvkESRftFZsZZ4fXDeXnwmCNBoIidhqg0ox0hu03DSFGnaGPZjU2x B2PetldTjhQvtiU+3HEMWaH3GjZOvBs0E28WbgSLrd8sYceGRgJ4DZBqhHQO5lI3 Ku4MXEIoiqCTlIMFgtkRP+Oe0uzi90Wwl0eVyf4GeDpdbZ26vUOnHIy3HqEaPrwj acBFpUqZVAvid5xvivCacopKnRDQJUArpFmuPTqZZNIc2eWU1EInDHMt2rL9rdeX vPrAKQYTgcAawaCCZSI2qDfN4mXupv3DMmoXd1WX4pLB0v2o0nJiS4uzcQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCDUoULR4xcE61vPA6eF9jeDVbeZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzA5OWU3 OS0xNmZiLTQwYmUtYTkxOC1kYjdjMWFmM2EwNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvMDk5ZTc5 LTE2ZmItNDBiZS1hOTE4LWRiN2MxYWYzYTA3My8xL0lOU2hRdEhqRndUclc4OERw NFgyTjROVnQ1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufNAMA0EAgACMAcDBQMqDQeAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPaItH0dWT4tdJEWhqVr0qXhBTtaiTTSWw1PkIDhPQ/2qxry1f 3qF8q/CMat5vmYqNnk0ng0VRitSscNmAx4DvlysKl2LgDBHUwl/3zBSrimrrcmOD OX+MaBlA6wbfq2kcNyxbBHct6aFYe7kzcqwKz9zLaBEk6J8futMdyWhTl77kzNmK +m/D2+tPwCy1pt1iJm0qJsD5RS2DR90G1oas2ZYprG/++JP3O+t0Jd41VPpSXij4 sniOMEJdcsfOKb2aOUyh8LYu4nf+7pXp4JlJJwr2ufdCQGfNBhOoLBlDfXoVOfYn oN502eVCT5tKpNKB/8psFVGkrE9SHPT01eJ0 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:10 2026 by rpki-client