This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer File: IYCTB4hvuv261Th2Eu_-dxOHowA.cer (raw, json) Hash identifier: CVE54LZObxa7BzfAegj2dGFFirALfkW+HsrM0q3i47g= Subject key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE9B293299C87816D613BFFE3522A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216382 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e9:b2:93:29:9c:87:81:6d:61:3b:ff:e3:52:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21809307886fbafdbad5387612effe771387a300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:df:65:bd:f8:96:4a:74:f3:fb:f2:32:38: 64:9e:db:16:a6:7a:9e:63:2c:39:58:95:91:8e:01: 99:79:3d:0e:7e:53:24:81:93:6a:f1:3a:09:ce:2e: 02:09:bd:6f:3b:a2:87:83:a9:8e:29:29:08:3d:b8: e8:76:de:8e:cf:e6:4d:9c:e1:a4:be:4a:f1:0d:23: 51:6a:32:0a:d5:ff:d2:94:7a:66:73:34:02:73:02: c8:f8:80:19:b9:a4:7a:0f:c4:7f:4c:7f:c3:5a:b3: f4:ef:87:9a:0c:b9:5d:ab:33:13:b2:cc:f0:eb:60: a0:0e:74:9f:1d:72:bf:6d:0c:b0:16:7a:d3:ea:1a: 9f:2e:0e:c8:d1:3b:75:7f:06:6b:9c:50:ae:2f:62: 69:ac:73:37:10:7d:5a:30:e7:ab:0f:dd:47:d4:bc: ba:2b:18:fd:60:0e:e7:14:fc:26:58:70:3a:98:54: f3:a7:1f:bb:0f:b5:bc:00:73:45:fc:e0:28:b1:44: 1b:c2:fe:f7:75:5f:33:a2:b9:b7:50:9d:13:a2:d3: bd:18:d5:d6:54:2b:4b:a7:f4:28:52:6c:52:f9:a0: 08:19:42:e2:c6:67:19:dc:85:d4:d9:32:b8:d6:e4: f0:23:0a:ae:bc:8f:a2:75:9e:e8:50:1a:10:c1:bd: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216382 Signature Algorithm: sha256WithRSAEncryption 32:7b:46:86:a1:f1:58:22:4c:3a:c7:b4:85:45:34:14:47:c5: 00:9c:cc:4b:8c:06:ac:52:50:b6:4c:31:c5:1a:c5:0d:64:8a: d1:d4:44:d7:95:b1:e4:c6:1b:38:3b:86:79:1c:8e:53:9b:e2: c4:a3:83:1f:25:30:f3:d9:d2:dc:18:80:66:85:db:22:be:a1: 78:3b:94:c3:13:85:3e:c5:71:93:53:07:e5:96:7e:1a:52:4b: e0:a7:14:bf:2a:36:4e:cb:90:c2:b0:00:a1:f6:a9:cf:e1:a9: 63:55:b4:53:fa:07:dd:a7:28:71:63:8a:6b:c7:d9:39:a8:41: 0c:d9:10:b1:65:dd:7b:ed:9c:b1:5b:ed:34:b3:3c:f0:cd:88: f0:87:09:ff:8a:1e:c6:54:66:16:3f:1e:45:3c:52:33:33:a1: 92:d3:e8:98:8b:49:c7:d8:95:78:78:5e:bf:6a:7f:b2:7d:95: dc:fa:01:83:b9:51:43:c6:e3:31:0d:58:37:c2:ea:77:f0:da: cc:8c:67:12:97:c0:23:2d:7c:8e:77:0a:96:73:b8:3c:c7:5a: 58:fe:91:ef:7c:90:5a:f9:2d:e1:6f:d7:20:35:c1:c0:77:7e: a6:b4:ef:7f:5b:08:6a:a8:23:f0:ea:65:60:cc:d5:1f:ab:60: 8d:a6:1c:96 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6Wumykymch4FtYTv/41IqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgwOTMwNzg4NmZiYWZkYmFkNTM4NzYxMmVmZmU3NzEzODdhMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKHfZb34lkp08/vyMjhkntsWpnqe Yyw5WJWRjgGZeT0OflMkgZNq8ToJzi4CCb1vO6KHg6mOKSkIPbjodt6Oz+ZNnOGk vkrxDSNRajIK1f/SlHpmczQCcwLI+IAZuaR6D8R/TH/DWrP074eaDLldqzMTsszw 62CgDnSfHXK/bQywFnrT6hqfLg7I0Tt1fwZrnFCuL2JprHM3EH1aMOerD91H1Ly6 Kxj9YA7nFPwmWHA6mFTzpx+7D7W8AHNF/OAosUQbwv73dV8zorm3UJ0TotO9GNXW VCtLp/QoUmxS+aAIGULixmcZ3IXU2TK41uTwIwquvI+idZ7oUBoQwb2hUwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCGAkweIb7r9utU4dhLv/ncTh6MAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2E3Y2Jh YS1iYjlkLTQ3ZjUtOTIyZC1mNzA4ZGFkMGVlY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYTdjYmFh LWJiOWQtNDdmNS05MjJkLWY3MDhkYWQwZWVjYS8xL0lZQ1RCNGh2dXYyNjFUaDJF dV8tZHhPSG93QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNPjANBgkqhkiG9w0BAQsFAAOCAQEAMntGhqHxWCJM Ose0hUU0FEfFAJzMS4wGrFJQtkwxxRrFDWSK0dRE15Wx5MYbODuGeRyOU5vixKOD HyUw89nS3BiAZoXbIr6heDuUwxOFPsVxk1MH5ZZ+GlJL4KcUvyo2TsuQwrAAofap z+GpY1W0U/oH3acocWOKa8fZOahBDNkQsWXde+2csVvtNLM88M2I8IcJ/4oexlRm Fj8eRTxSMzOhktPomItJx9iVeHhev2p/sn2V3PoBg7lRQ8bjMQ1YN8Lqd/DazIxn EpfAIy18jncKlnO4PMdaWP6R73yQWvkt4W/XIDXBwHd+prTvf1sIaqgj8OplYMzV H6tgjaYclg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:15 2026 by rpki-client