This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer (raw, json) Hash identifier: 7E9+gZDfVjHqSdRATMR/utvak9tR2E1poECwUw4bwsA= Subject key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759168ACB3F8613CDCABD927D7626A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.43.141.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:8a:cb:3f:86:13:cd:ca:bd:92:7d:76:26:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:ae:51:20:19:4f:22:4a:e0:43:54:f0:98: 4f:83:5d:b5:96:17:df:d6:1f:c4:49:c6:76:39:78: 19:d3:1e:13:19:d1:87:9d:80:84:8a:2c:9e:e6:1b: 3c:99:b5:37:09:7a:23:83:70:7c:0c:ad:cb:c2:63: f8:f8:4d:c0:9a:0c:80:c5:48:6e:62:0a:cb:cc:2b: d4:76:58:a0:0c:b4:17:4d:90:b8:d3:05:75:cb:fb: ad:ab:7f:61:c2:70:a3:69:02:77:e5:54:14:88:3f: 4e:47:8e:0d:d5:5f:7e:5a:ed:80:e6:be:ff:f5:64: 44:b7:18:9a:34:fa:1f:a8:07:75:ed:4a:a0:0d:44: 11:cd:53:d2:40:b0:89:22:7f:1b:da:56:ed:cc:bb: ac:ad:35:6e:df:da:b7:e1:a5:4f:cc:17:ef:10:88: 4c:48:66:58:7f:24:83:6e:e0:44:f7:56:85:3e:1d: dc:19:cc:39:12:5b:5b:b4:95:a8:11:2a:18:ff:69: ef:19:3d:bd:de:ab:a4:77:0d:6b:1e:c3:0c:6e:c1: 1f:c2:54:f7:86:7d:12:2d:fd:63:ef:74:12:d1:78: 58:37:b5:43:0f:8f:58:ef:c2:17:9e:35:8d:f9:82: a7:a4:66:c2:84:af:7e:bd:32:91:78:e4:29:ee:06: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:69:d2:25:be:2c:b4:09:80:07:f3:bf:d9:af:0a:0f:d7:84: ad:bf:5e:4e:60:44:37:f5:16:cc:66:f1:53:88:18:21:8f:88: ab:d7:8d:2b:6c:1f:ec:ae:15:a5:01:cb:8e:b4:31:23:10:72: 86:28:60:52:f6:e6:30:31:dc:5a:1a:7d:12:3e:4a:d4:4e:4e: 2e:f9:df:16:7b:65:7e:0c:26:36:82:6c:52:d9:03:fb:cf:05: cc:51:ab:cf:cb:8f:87:6a:f9:09:7f:20:ca:4d:eb:84:ba:2d: a8:02:50:7b:72:d2:f1:98:b8:d7:89:1e:2a:f8:ad:1a:6a:82: 60:57:2d:c7:ee:9e:d8:5a:05:a0:17:6b:9f:dc:61:b7:b4:2a: c3:30:92:a2:6a:bc:a9:dd:fb:bf:ab:03:5b:55:08:b1:80:e5: 61:d8:a5:c4:fa:69:b1:14:bb:22:23:25:95:ad:63:cf:9e:53: a1:fa:32:a8:e4:88:f5:7b:15:8f:e4:27:11:e4:4e:51:29:33: cd:0c:24:5e:a2:f3:76:b6:02:fc:1c:43:59:b5:13:ce:81:44: 01:f8:b9:46:c7:59:4a:df:65:3b:62:fa:a6:75:aa:c0:8c:af: ba:95:f9:88:d8:79:e5:16:75:75:56:a4:25:5a:50:f7:32:ea: d0:a9:6f:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WRaKyz+GE83KvZJ9dialMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTRhMGY0MjE5MDk0NGFjNmI0NWUwMGEyNGFlNDFhMzQ1ZmRjYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA266uUSAZTyJK4ENU8JhPg121lhff 1h/EScZ2OXgZ0x4TGdGHnYCEiiye5hs8mbU3CXojg3B8DK3LwmP4+E3AmgyAxUhu YgrLzCvUdligDLQXTZC40wV1y/utq39hwnCjaQJ35VQUiD9OR44N1V9+Wu2A5r7/ 9WREtxiaNPofqAd17UqgDUQRzVPSQLCJIn8b2lbtzLusrTVu39q34aVPzBfvEIhM SGZYfySDbuBE91aFPh3cGcw5EltbtJWoESoY/2nvGT293qukdw1rHsMMbsEfwlT3 hn0SLf1j73QS0XhYN7VDD49Y78IXnjWN+YKnpGbChK9+vTKReOQp7gZx4QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCFKD0IZCUSsa0XgCiSuQaNF/cs1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzBkNTdm Zi01NTMwLTQ2MGQtOGI1My1iNjY1NmNjMWJkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMGQ1N2Zm LTU1MzAtNDYwZC04YjUzLWI2NjU2Y2MxYmQ1OS8xL0lVb1BRaGtKUkt4clJlQUtK SzVCbzBYOXl6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSuNMA0GCSqGSIb3DQEBCwUAA4IBAQB8adIl viy0CYAH87/ZrwoP14Stv15OYEQ39RbMZvFTiBghj4ir140rbB/srhWlAcuOtDEj EHKGKGBS9uYwMdxaGn0SPkrUTk4u+d8We2V+DCY2gmxS2QP7zwXMUavPy4+HavkJ fyDKTeuEui2oAlB7ctLxmLjXiR4q+K0aaoJgVy3H7p7YWgWgF2uf3GG3tCrDMJKi aryp3fu/qwNbVQixgOVh2KXE+mmxFLsiIyWVrWPPnlOh+jKo5Ij1exWP5CcR5E5R KTPNDCReovN2tgL8HENZtRPOgUQB+LlGx1lK32U7YvqmdarAjK+6lfmI2HnlFnV1 VqQlWlD3MurQqW+T -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:05 2026 by rpki-client