This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer (raw, json) Hash identifier: 8PAR3af4fJgq+5IjZNXqQB8hz9Qw8ztdZmAoOMrRhpk= Subject key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EBA8B6CB1D97DF437D4FB9C0B0A9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59625 AS: 211145 IP: 185.84.68.0/22 IP: 185.240.16.0/22 IP: 185.244.176.0/22 IP: 204.154.200.0/21 IP: 2a03:7020::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ba:8b:6c:b1:d9:7d:f4:37:d4:fb:9c:0b:0a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:33:24:f0:72:70:39:79:46:05:98:87:f8: f6:3b:c7:83:e0:14:81:3b:02:93:c1:4f:cb:92:6d: e5:38:00:10:71:69:a3:06:a6:2b:58:90:49:39:1a: 5a:01:c1:4e:da:a0:67:76:8b:fe:6f:e9:8a:20:d4: 47:03:67:0a:1d:3b:ff:ef:45:63:1a:75:b5:2a:3e: 6e:c9:2e:1a:fa:55:26:ea:59:98:6e:4d:f9:eb:12: d0:a8:d3:51:c0:dc:98:ba:0c:35:1b:ba:8a:32:ad: 40:de:4a:b8:ce:9e:60:10:a4:b5:2f:85:f4:29:6e: ad:05:44:1a:07:de:4f:46:81:a4:1c:35:0f:c4:ba: 37:5a:a0:28:a7:54:98:bd:7a:2d:7c:60:4a:f0:80: 2c:fc:e1:8e:5d:6a:d6:21:36:49:ad:8e:bc:cd:72: 02:0b:49:c0:e3:8b:09:a7:7e:d9:d6:8a:f0:0f:17: e8:7b:96:31:d8:4d:a3:1a:1e:55:cd:fa:59:c2:86: ec:49:31:96:d2:57:30:bf:83:31:df:aa:dc:48:d5: 23:16:ec:67:77:85:bd:a7:d3:d8:13:1d:66:23:6a: dd:fd:18:92:25:41:c3:08:f1:01:62:73:4a:a2:35: 0f:a2:64:8c:b5:70:a0:3f:31:77:ec:a6:5c:91:b9: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.68.0/22 185.240.16.0/22 185.244.176.0/22 204.154.200.0/21 IPv6: 2a03:7020::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59625 211145 Signature Algorithm: sha256WithRSAEncryption 65:5e:4b:d1:b2:66:fe:83:0a:8a:01:28:d0:55:65:02:ed:ab: ab:e9:cd:af:ad:c2:79:24:0c:08:a2:ca:c9:49:93:d7:f4:f4: 00:fb:4c:2e:85:c9:f1:3f:63:ac:29:39:e9:85:72:56:6b:69: f9:d6:c0:f6:1a:62:36:cf:bf:ac:7e:2a:6e:1f:51:b1:3f:25: f7:4b:60:e9:be:9b:2d:d5:05:9d:a9:0e:b6:3b:e5:ee:dc:e2: 7b:75:9a:ef:bb:a8:56:db:e6:21:63:e6:a0:53:38:7d:b8:f0: e3:7c:ed:11:b0:99:39:97:8f:80:c3:f4:ec:42:5f:fa:85:9d: 36:fa:6f:ba:34:a3:ae:1e:7c:6c:4b:9c:cc:fc:f2:ba:d8:ab: 5c:9b:df:b1:da:3e:0e:82:5d:7e:f6:45:33:15:d3:0f:af:d8: b9:2a:17:08:cc:40:01:bd:e9:ce:e1:23:a0:30:14:e7:4c:b2: 22:e6:69:b2:23:38:8a:39:8a:09:30:c7:30:1e:7b:d9:3e:5b: af:fb:a4:5e:86:98:a0:af:30:14:20:ca:06:66:b3:54:7a:30: 64:e1:52:e9:11:dc:65:68:0c:c2:c5:29:bb:d1:1e:f6:47:c4: db:d6:56:2d:48:ef:5c:53:38:96:11:0c:ca:66:94:ec:ab:0e: 3d:cf:e4:c0 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt5frqLbLHZffQ31PucCwqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTdiNDkxZGNjYjU2MzIyMTZkODBiNDhmOGQ2Mjg2YjFlZmZkOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wczJPBycDl5RgWYh/j2O8eD4BSB OwKTwU/Lkm3lOAAQcWmjBqYrWJBJORpaAcFO2qBndov+b+mKINRHA2cKHTv/70Vj GnW1Kj5uyS4a+lUm6lmYbk356xLQqNNRwNyYugw1G7qKMq1A3kq4zp5gEKS1L4X0 KW6tBUQaB95PRoGkHDUPxLo3WqAop1SYvXotfGBK8IAs/OGOXWrWITZJrY68zXIC C0nA44sJp37Z1orwDxfoe5Yx2E2jGh5VzfpZwobsSTGW0lcwv4Mx36rcSNUjFuxn d4W9p9PYEx1mI2rd/RiSJUHDCPEBYnNKojUPomSMtXCgPzF37KZckbm0yQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFCF7SR3MtWMiFtgLSPjWKGse/9jXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2U5ZjI5 Yy05MjMxLTQ1MGQtYWRiMC02ZGUwNWEzMTYyMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZTlmMjlj LTkyMzEtNDUwZC1hZGIwLTZkZTA1YTMxNjIzOS8xL0lYdEpIY3kxWXlJVzJBdEkt TllvYXg3XzJOYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCuVREAwQCufAQAwQCufSwAwQDzJrIMA0EAgAC MAcDBQAqA3AgMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDo6QIDAzjJMA0GCSqG SIb3DQEBCwUAA4IBAQBlXkvRsmb+gwqKASjQVWUC7aur6c2vrcJ5JAwIosrJSZPX 9PQA+0wuhcnxP2OsKTnphXJWa2n51sD2GmI2z7+sfipuH1GxPyX3S2Dpvpst1QWd qQ62O+Xu3OJ7dZrvu6hW2+YhY+agUzh9uPDjfO0RsJk5l4+Aw/TsQl/6hZ02+m+6 NKOuHnxsS5zM/PK62Ktcm9+x2j4Ogl1+9kUzFdMPr9i5KhcIzEABvenO4SOgMBTn TLIi5mmyIziKOYoJMMcwHnvZPluv+6RehpigrzAUIMoGZrNUejBk4VLpEdxlaAzC xSm70R72R8Tb1lYtSO9cUziWEQzKZpTsqw49z+TA -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:31 2026 by rpki-client