This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer File: ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer (raw, json) Hash identifier: RWlGFT+4va7M+sww0IFUs9548zRgf2E1IDprCOeT6GA= Subject key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783430238941EF212AD1DBB4B37F77F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2859 AS: 12381 IP: 185.41.172.0/22 IP: 192.36.0.0/16 IP: 192.71.0.0/16 IP: 192.121.0.0/16 IP: 192.165.0.0/16 IP: 192.176.0.0/16 IP: 193.180.0.0/14 IP: 193.234.0.0/15 IP: 194.14.0.0/16 IP: 194.68.0.0/16 IP: 194.71.0.0/16 IP: 194.103.0.0/16 IP: 194.132.0.0/16 IP: 2a01:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:30:23:89:41:ef:21:2a:d1:db:b4:b3:7f:77:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:70:27:c7:aa:4b:df:4a:10:95:2a:3d:0a: 98:22:25:bd:f2:89:7b:66:dd:80:ed:ab:4d:76:e5: bc:64:c3:42:b6:48:6d:98:70:5e:79:58:47:8c:c8: a9:96:9c:52:5b:30:58:23:47:58:15:3c:4b:78:39: 75:13:ab:6d:f1:56:24:df:d8:4e:3d:f1:76:2e:05: 17:98:f5:a2:95:26:ec:37:d6:1c:6d:09:9f:96:ac: 21:db:49:b6:14:fe:82:06:98:9b:26:4b:09:c8:a7: 0e:d1:ee:6f:9f:f4:93:d9:bb:d4:14:5f:69:f2:86: 5f:c3:5f:24:60:26:c0:64:e5:c8:30:f1:0d:30:dc: 7c:76:3e:96:e6:87:a9:da:56:db:99:69:97:37:eb: ca:db:3a:ed:ae:e5:24:fb:29:31:c2:b7:96:a3:04: 83:b3:27:a6:e7:96:4b:f8:03:21:63:d4:01:52:87: a4:b8:09:e0:2f:cb:d0:b9:3f:ad:68:44:2d:ee:a2: e2:d6:e5:b0:eb:69:a3:c8:74:02:ab:9f:a7:a2:c2: 98:da:ef:b6:80:96:22:b5:6d:86:82:22:cf:27:ab: 72:11:31:82:24:04:fe:b3:42:f5:69:62:58:66:12: 3d:9f:35:e0:b6:0a:f7:fc:ac:35:ef:3b:31:75:37: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.172.0/22 192.36.0.0/16 192.71.0.0/16 192.121.0.0/16 192.165.0.0/16 192.176.0.0/16 193.180.0.0/14 193.234.0.0/15 194.14.0.0/16 194.68.0.0/16 194.71.0.0/16 194.103.0.0/16 194.132.0.0/16 IPv6: 2a01:280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2859 12381 Signature Algorithm: sha256WithRSAEncryption 15:1f:c4:64:5f:7a:f4:95:0d:83:54:ae:31:e4:36:09:76:a8: 98:7c:53:b5:86:3b:97:f0:a6:2b:d2:fd:b1:e9:bf:82:26:e5: fa:ec:13:dd:6c:0f:c2:df:e3:4c:77:56:82:25:65:38:48:b1: a1:64:43:46:38:f2:72:62:99:8c:6a:af:8f:2c:ff:c8:e7:f4: ed:80:80:88:32:f3:c3:49:90:33:f2:74:27:2b:a0:1c:57:6f: 1d:e6:15:65:8e:76:c3:bb:4d:96:92:4e:01:26:9c:98:6a:7e: 5c:a2:d3:99:4c:b2:c5:51:33:78:6a:c4:28:47:ea:41:f3:d2: b1:df:03:d2:e5:a3:16:b9:99:0d:ce:0f:a8:a8:00:69:51:f6: 4e:d7:af:62:6a:6e:f5:f6:c2:18:da:59:3b:f7:57:ee:43:c6: 19:ef:8f:d5:48:9d:5d:2c:61:ef:7e:2c:5e:e0:ba:94:47:b8: 2c:b3:42:8e:52:3f:3f:73:e8:7a:61:ed:9e:74:81:42:69:58: d9:11:2a:83:83:62:ae:01:6a:cb:e0:8b:be:05:a4:62:1f:f1: 88:44:30:38:86:71:f3:07:d4:cc:81:37:aa:f4:ae:5c:b2:86: 22:b1:be:15:b6:c4:33:bb:0b:91:02:f7:e7:76:cf:55:c2:ee: 68:be:bd:c9 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt4NDAjiUHvISrR27Szf3fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyslwJ8eqS99KEJUqPQqYIiW98ol7 Zt2A7atNduW8ZMNCtkhtmHBeeVhHjMiplpxSWzBYI0dYFTxLeDl1E6tt8VYk39hO PfF2LgUXmPWilSbsN9YcbQmflqwh20m2FP6CBpibJksJyKcO0e5vn/ST2bvUFF9p 8oZfw18kYCbAZOXIMPENMNx8dj6W5oep2lbbmWmXN+vK2zrtruUk+ykxwreWowSD syem55ZL+AMhY9QBUoekuAngL8vQuT+taEQt7qLi1uWw62mjyHQCq5+nosKY2u+2 gJYitW2GgiLPJ6tyETGCJAT+s0L1aWJYZhI9nzXgtgr3/Kw17zsxdTezKQIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFCE1x/Vx7v62dASrbEX9R1VRra8bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzY4MGI3 OC05NmFmLTRhODUtYWMwMi05NDNkMDMzMjEzMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvNjgwYjc4 LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3JaMEJLdHNS ZjFIVlZHdHJ4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQCuSmsAwMAwCQDAwDARwMDAMB5AwMAwKUDAwDA sAMDAsG0AwMBweoDAwDCDgMDAMJEAwMAwkcDAwDCZwMDAMKEMA0EAgACMAcDBQMq AQKAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAgsrAgIwXTANBgkqhkiG9w0BAQsF AAOCAQEAFR/EZF969JUNg1SuMeQ2CXaomHxTtYY7l/CmK9L9sem/gibl+uwT3WwP wt/jTHdWgiVlOEixoWRDRjjycmKZjGqvjyz/yOf07YCAiDLzw0mQM/J0JyugHFdv HeYVZY52w7tNlpJOASacmGp+XKLTmUyyxVEzeGrEKEfqQfPSsd8D0uWjFrmZDc4P qKgAaVH2TtevYmpu9fbCGNpZO/dX7kPGGe+P1UidXSxh734sXuC6lEe4LLNCjlI/ P3PoemHtnnSBQmlY2REqg4NirgFqy+CLvgWkYh/xiEQwOIZx8wfUzIE3qvSuXLKG IrG+FbbEM7sLkQL353bPVcLuaL69yQ== -----END CERTIFICATE-----Generated at Wed Jan 21 09:00:53 2026 by rpki-client