This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer (raw, json) Hash identifier: fkNg0Dcd1Qvj92PoV0ocuX7dklsISzgxvYW6cOvGnic= Subject key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAFC8D304C1CEEF65385360F0F9077 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197156 IP: 46.255.88.0/21 IP: 178.255.48.0/21 IP: 185.60.156.0/22 IP: 2a02:21b8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:8d:30:4c:1c:ee:f6:53:85:36:0f:0f:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2e:a0:08:78:58:87:28:f7:66:f5:00:4e:8f: b8:03:af:50:48:f3:88:c3:c5:13:16:e7:e3:08:64: dd:f1:28:7f:d5:2d:e5:0e:ff:70:2c:15:8f:a9:74: 86:91:ee:20:2c:a2:ea:ca:7b:a1:16:e9:53:b3:c6: ff:c5:4d:06:f9:5e:9b:47:eb:b2:a7:ac:bd:2d:f2: de:36:ab:dc:97:7c:ff:fb:05:e0:35:20:10:0a:1a: 88:52:ab:d8:1d:7b:93:13:df:8f:d5:a3:89:2d:70: 29:06:ce:66:0d:ab:47:0c:aa:60:35:f8:79:56:84: 3a:4f:0b:be:8d:4f:27:82:c4:13:96:ca:4b:6c:ad: e9:e3:8a:10:1b:e2:ae:18:b3:d1:b9:46:70:24:27: 53:1f:16:3a:40:d2:c8:22:1d:80:a7:6a:7c:64:b2: 00:e3:8f:f2:97:98:9c:c4:e8:ba:a5:83:23:f1:e9: 8e:84:e7:03:6a:9b:cd:68:22:74:74:fd:3b:aa:7e: 92:8e:8b:9b:40:29:78:46:a4:e0:bb:45:c8:47:ec: 53:d2:5d:6c:42:2f:7d:67:98:9d:db:8e:ed:81:58: 2d:73:eb:32:5b:bc:e3:bd:2b:e4:ca:8d:bc:e7:64: be:18:68:72:b8:1a:4b:40:d9:b6:37:2d:31:d7:69: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.88.0/21 178.255.48.0/21 185.60.156.0/22 IPv6: 2a02:21b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197156 Signature Algorithm: sha256WithRSAEncryption 3d:9b:83:6f:dd:ad:61:94:ec:e2:a8:6e:5f:e8:12:48:95:b8: a3:ae:aa:94:7f:82:65:d5:9c:9e:91:66:44:72:d3:7f:ec:a1: ab:55:26:06:8b:fc:23:77:40:6a:a7:dc:e6:93:ef:7e:3d:46: 08:62:cc:9a:c8:b1:14:2d:1b:61:be:92:72:b7:b2:04:06:6d: 47:a4:e7:75:8e:e0:8c:71:d9:d2:cd:db:42:77:79:cb:4d:0f: 0a:57:67:14:77:5f:f0:c9:cd:6e:50:fc:a7:0e:6b:e9:3b:b9: 20:5d:f4:a9:71:a7:9d:08:90:c4:8d:c0:3c:98:94:c5:d0:e3: 4f:68:33:aa:9e:36:c6:f5:b9:45:5c:58:a8:2e:57:85:fd:14: 50:ae:70:d4:a4:9c:f8:4e:fb:c4:19:d2:c1:da:da:14:2c:20: 09:a1:88:c1:98:46:fa:bd:81:a0:cb:a4:ed:59:ff:da:01:27: 65:e7:b4:ee:6b:26:e8:0b:5e:b5:5b:1c:cf:ad:77:5d:50:39: a3:0e:51:f9:72:e2:d1:5b:ef:82:cc:9b:c8:be:9c:5e:0a:94: 60:d7:d8:33:0b:2f:9b:1b:74:5a:7a:3f:02:a4:a2:59:3f:38: 2f:a1:d4:03:08:71:28:01:05:af:7c:3a:fa:7c:d6:f0:aa:9b: 3e:ce:2f:55 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt26vyNMEwc7vZThTYPD5B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgxYzViM2NiN2VlYjFlNDk1ODIxNTVhMTkxOGVjNjEyZjk1YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C6gCHhYhyj3ZvUATo+4A69QSPOI w8UTFufjCGTd8Sh/1S3lDv9wLBWPqXSGke4gLKLqynuhFulTs8b/xU0G+V6bR+uy p6y9LfLeNqvcl3z/+wXgNSAQChqIUqvYHXuTE9+P1aOJLXApBs5mDatHDKpgNfh5 VoQ6Twu+jU8ngsQTlspLbK3p44oQG+KuGLPRuUZwJCdTHxY6QNLIIh2Ap2p8ZLIA 44/yl5icxOi6pYMj8emOhOcDapvNaCJ0dP07qn6SjoubQCl4RqTgu0XIR+xT0l1s Qi99Z5id247tgVgtc+syW7zjvSvkyo2852S+GGhyuBpLQNm2Ny0x12nCSQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFCGBxbPLfuseSVghVaGRjsYS+VrGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2RjZDE1 ZS1lYjEyLTQ2MzEtYjIyMC0wMjI2ZDQ1YTc1MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZGNkMTVl LWViMTItNDYzMS1iMjIwLTAyMjZkNDVhNzUzMi8xL0lZSEZzOHQtNng1SldDRlZv WkdPeGhMNVdzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDLv9YAwQDsv8wAwQCuTycMA0EAgACMAcDBQAq AiG4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCJDANBgkqhkiG9w0BAQsFAAOC AQEAPZuDb92tYZTs4qhuX+gSSJW4o66qlH+CZdWcnpFmRHLTf+yhq1UmBov8I3dA aqfc5pPvfj1GCGLMmsixFC0bYb6ScreyBAZtR6TndY7gjHHZ0s3bQnd5y00PCldn FHdf8MnNblD8pw5r6Tu5IF30qXGnnQiQxI3APJiUxdDjT2gzqp42xvW5RVxYqC5X hf0UUK5w1KSc+E77xBnSwdraFCwgCaGIwZhG+r2BoMuk7Vn/2gEnZee07msm6Ate tVscz613XVA5ow5R+XLi0VvvgsybyL6cXgqUYNfYMwsvmxt0Wno/AqSiWT84L6HU AwhxKAEFr3w6+nzW8KqbPs4vVQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:09:47 2026 by rpki-client