This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer File: IOuvVUyRRowQUkuvdC6ksaXQtJw.cer (raw, json) Hash identifier: ww4oK8pVrU/tAv91Pc7h0xxITm5ft9TpUnoGBIqzT9s= Subject key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113845D2E05BD53D1B67A7C99EF504 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212834 IP: 2001:678:de8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:38:45:d2:e0:5b:d5:3d:1b:67:a7:c9:9e:f5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:e3:06:b2:e3:d5:72:3f:f5:c5:e7:24:c6: 6f:ad:e4:0c:7b:3e:39:1b:d1:3c:42:b6:0b:2e:58: 46:cb:77:7f:00:d9:42:2b:6a:17:88:01:f5:18:2b: c3:14:12:5f:2b:ae:cd:2f:ff:c8:a4:09:f6:da:81: d7:57:b9:fe:ba:51:41:5a:7c:62:c4:0f:89:cf:dd: 76:1a:6f:9f:5a:a0:fd:35:17:f6:d9:fa:f1:75:59: fe:4a:35:39:1c:fb:0f:f9:7c:ca:01:76:8d:ff:c5: 0d:7f:59:34:4f:93:57:dd:ed:31:14:8f:f9:a4:79: ff:21:d5:ab:90:29:88:be:d0:98:13:d8:b5:46:90: 57:4c:74:46:dc:0a:5f:eb:42:ed:3d:22:c6:3b:02: 0b:56:4e:d6:8f:df:63:c7:3d:66:66:be:5d:4b:03: fe:1b:24:03:d8:70:10:55:8e:0c:c6:7f:0a:77:04: 56:fe:de:d5:fd:6a:f1:6c:30:09:0b:2b:3e:f1:81: 34:e2:47:0a:45:79:a7:6e:5c:ae:5a:98:d3:3a:34: 0b:44:32:d1:b4:83:37:73:ec:5c:f6:03:32:d7:a6: f1:65:ce:6a:56:2e:67:b4:d3:35:09:37:30:df:7c: d4:8c:2f:f9:b7:c6:af:17:96:c3:f3:87:91:3d:71: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:de8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212834 Signature Algorithm: sha256WithRSAEncryption 0a:b3:88:d1:d2:1e:78:6b:7f:fc:40:fc:ab:1a:36:2a:67:1d: 31:fd:3e:82:9e:91:7b:6c:82:a0:7c:9c:8c:80:fe:c2:5e:88: 30:99:da:4c:e1:c6:3a:47:36:d7:c3:70:6f:71:63:69:e6:2d: df:8a:3d:20:2a:1b:02:c1:46:63:4d:06:64:37:a0:12:30:50: ff:35:e6:55:08:fb:ca:6e:7b:fe:1a:2b:12:da:43:d5:d6:81: c2:ef:6f:aa:1c:e3:ff:5f:fd:8f:fb:ef:8e:e7:0e:4e:61:ac: 82:0b:62:c0:c9:06:7e:ef:a5:a0:72:55:74:47:d7:dd:11:29: ff:36:60:b1:05:17:0a:db:03:89:91:7e:1b:fc:f2:34:f9:ea: 0b:86:d0:c0:8b:2b:80:84:08:53:0c:bc:44:0e:81:00:4c:59: c1:2d:77:93:53:b2:ad:f0:d7:03:08:49:36:3a:ef:05:18:f3: 56:00:00:59:4f:f9:16:2e:3b:b0:5c:4f:2c:68:90:0c:ad:11: 59:76:d2:de:89:92:ec:72:9d:f3:e6:21:d1:c7:11:a3:c0:53: fa:70:ff:e0:44:4f:dc:c5:6b:aa:15:37:ef:41:92:29:92:b8: bc:d2:bf:44:32:8b:f9:a1:e8:d8:6a:03:d0:4a:e8:ae:a1:81: da:85:37:7a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5EThF0uBb1T0bZ6fJnvUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGViYWY1NTRjOTE0NjhjMTA1MjRiYWY3NDJlYTRiMWE1ZDBiNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLjBrLj1XI/9cXnJMZvreQMez45 G9E8QrYLLlhGy3d/ANlCK2oXiAH1GCvDFBJfK67NL//IpAn22oHXV7n+ulFBWnxi xA+Jz912Gm+fWqD9NRf22frxdVn+SjU5HPsP+XzKAXaN/8UNf1k0T5NX3e0xFI/5 pHn/IdWrkCmIvtCYE9i1RpBXTHRG3Apf60LtPSLGOwILVk7Wj99jxz1mZr5dSwP+ GyQD2HAQVY4Mxn8KdwRW/t7V/WrxbDAJCys+8YE04kcKRXmnblyuWpjTOjQLRDLR tIM3c+xc9gMy16bxZc5qVi5ntNM1CTcw33zUjC/5t8avF5bD84eRPXHliQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCDrr1VMkUaMEFJLr3QupLGl0LScMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzNmMWMz NS01YTY4LTQ3ODYtOTE4MS01OWYxOWZhMTBhMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvM2YxYzM1 LTVhNjgtNDc4Ni05MTgxLTU5ZjE5ZmExMGExYy8xL0lPdXZWVXlSUm93UVVrdXZk QzZrc2FYUXRKdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3oMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM/YjANBgkqhkiG9w0BAQsFAAOCAQEACrOI0dIeeGt//ED8qxo2KmcdMf0+ gp6Re2yCoHycjID+wl6IMJnaTOHGOkc218Nwb3FjaeYt34o9ICobAsFGY00GZDeg EjBQ/zXmVQj7ym57/horEtpD1daBwu9vqhzj/1/9j/vvjucOTmGsggtiwMkGfu+l oHJVdEfX3REp/zZgsQUXCtsDiZF+G/zyNPnqC4bQwIsrgIQIUwy8RA6BAExZwS13 k1OyrfDXAwhJNjrvBRjzVgAAWU/5Fi47sFxPLGiQDK0RWXbS3omS7HKd8+Yh0ccR o8BT+nD/4ERP3MVrqhU370GSKZK4vNK/RDKL+aHo2GoD0ErorqGB2oU3eg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:27 2026 by rpki-client