This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer File: Ib-54hnhX-2mrdKWObjXP1ws2AI.cer (raw, json) Hash identifier: //ACx4znhH0tiTAAr58oeHlNWoX2gVAzERH3sTRn2FU= Subject key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15265B24217BE6E949590193638931 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35378 IP: 37.123.200.0/21 IP: 77.91.0.0/18 IP: 89.150.50.0/24 IP: 91.236.187.0/24 IP: 95.171.96.0/19 IP: 176.241.72.0/21 IP: 185.14.112.0/22 IP: 194.164.13.0/24 IP: 195.234.57.0/24 IP: 2a03:5ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:26:5b:24:21:7b:e6:e9:49:59:01:93:63:89:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:e6:44:07:12:c0:26:05:ef:ca:ae:b8:a6: 6a:e5:b1:41:9c:0a:1e:12:9a:73:25:3d:6b:1c:33: 73:61:4c:fe:ed:89:b3:ef:34:b0:5b:37:2f:fb:21: 34:dd:66:a7:da:36:4e:11:0b:de:65:4b:c2:c2:f9: a4:65:7a:a3:76:c9:7c:9e:07:63:03:1c:d2:1b:81: 06:db:0e:11:f8:a1:0e:34:49:17:9b:ef:20:4e:09: f3:33:e4:d1:66:c2:f2:ed:49:60:cf:85:8c:78:e6: 2e:e1:f5:0f:1c:48:88:44:55:4b:26:81:15:8e:4d: c0:3f:a2:18:c5:e2:bc:0e:97:e5:49:bd:45:f6:f2: 97:fe:78:e1:f8:8b:d2:b5:5c:6f:c9:fb:54:c5:84: 8e:4c:f7:ff:5a:98:a0:32:53:61:80:34:56:4e:ff: df:7a:67:37:a1:d5:2d:d9:de:ca:66:af:5e:a5:a5: ae:61:d8:43:0b:24:7c:01:14:24:d9:93:3e:1b:53: fa:bf:d0:74:ce:68:8a:c8:9d:bc:fc:f6:d1:c9:e3: c6:bc:2a:9d:26:ac:c6:38:76:ca:55:6c:c9:8f:32: 4c:6f:7d:b2:69:a3:4c:4b:b4:c8:74:59:aa:b8:e2: 76:b2:b3:18:5a:29:26:d5:bb:57:ac:29:dc:2f:50: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.200.0/21 77.91.0.0/18 89.150.50.0/24 91.236.187.0/24 95.171.96.0/19 176.241.72.0/21 185.14.112.0/22 194.164.13.0/24 195.234.57.0/24 IPv6: 2a03:5ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35378 Signature Algorithm: sha256WithRSAEncryption 7c:91:37:38:5c:70:e4:88:39:d0:9e:db:ab:95:61:97:ab:dd: 3a:8b:70:0d:0f:98:20:4d:c5:75:fd:d6:4e:d6:91:38:67:cc: d4:68:6c:bb:ee:33:86:53:a1:d4:4c:a5:e4:f3:36:23:68:c7: 89:e6:8a:1d:e6:45:ad:40:cd:fe:25:93:b8:e6:81:39:77:cc: 52:56:91:91:f1:51:f2:f6:36:98:0e:3b:c5:68:8a:60:fc:39: 45:e8:2d:e1:65:8d:b7:17:57:c0:94:9d:9f:e8:6f:f0:eb:86: 83:e7:d3:ed:22:a7:a2:ef:ad:f3:ac:8a:89:5c:20:ca:88:fa: f3:12:95:cc:55:0d:ca:51:f5:42:f3:b8:f8:7f:82:fc:68:11: d2:ee:0b:45:0c:73:cc:91:57:f4:03:ae:9c:51:8d:c9:52:35: 28:5e:ee:64:80:f0:fc:6d:88:a9:42:ed:54:a6:17:15:96:1c: d3:f8:87:52:d9:07:9d:50:ec:29:05:4e:8f:3c:aa:2f:10:38: 04:dc:36:91:84:2e:6f:83:8e:23:04:f5:ee:8f:2a:6d:4c:f1: 17:6b:1e:84:30:85:42:e6:70:96:cf:01:d7:a9:85:51:72:15: ad:39:c3:98:b0:a4:3f:68:bb:fe:ad:ba:cb:f6:ab:7e:bc:ad: d1:4a:36:27 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt/FSZbJCF75ulJWQGTY4kxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWJmYjllMjE5ZTE1ZmVkYTZhZGQyOTYzOWI4ZDczZjVjMmNkODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsTmRAcSwCYF78quuKZq5bFBnAoe EppzJT1rHDNzYUz+7Ymz7zSwWzcv+yE03Wan2jZOEQveZUvCwvmkZXqjdsl8ngdj AxzSG4EG2w4R+KEONEkXm+8gTgnzM+TRZsLy7Ulgz4WMeOYu4fUPHEiIRFVLJoEV jk3AP6IYxeK8DpflSb1F9vKX/njh+IvStVxvyftUxYSOTPf/WpigMlNhgDRWTv/f emc3odUt2d7KZq9epaWuYdhDCyR8ARQk2ZM+G1P6v9B0zmiKyJ28/PbRyePGvCqd JqzGOHbKVWzJjzJMb32yaaNMS7TIdFmquOJ2srMYWikm1btXrCncL1D6wQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFCG/ueIZ4V/tpq3Sljm41z9cLNgCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2FhYWUz OC0xYjI4LTQ0OWQtYmU4Mi03M2ZkMmMwMzVlYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYWFhZTM4 LTFiMjgtNDQ5ZC1iZTgyLTczZmQyYzAzNWViNS8xL0liLTU0aG5oWC0ybXJkS1dP YmpYUDF3czJBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQDJXvIAwQGTVsAAwQAWZYyAwQAW+y7AwQFX6tg AwQDsPFIAwQCuQ5wAwQAwqQNAwQAw+o5MA0EAgACMAcDBQAqA17AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKMjANBgkqhkiG9w0BAQsFAAOCAQEAfJE3OFxw5Ig5 0J7bq5Vhl6vdOotwDQ+YIE3Fdf3WTtaROGfM1Ghsu+4zhlOh1Eyl5PM2I2jHieaK HeZFrUDN/iWTuOaBOXfMUlaRkfFR8vY2mA47xWiKYPw5Regt4WWNtxdXwJSdn+hv 8OuGg+fT7SKnou+t86yKiVwgyoj68xKVzFUNylH1QvO4+H+C/GgR0u4LRQxzzJFX 9AOunFGNyVI1KF7uZIDw/G2IqULtVKYXFZYc0/iHUtkHnVDsKQVOjzyqLxA4BNw2 kYQub4OOIwT17o8qbUzxF2sehDCFQuZwls8B16mFUXIVrTnDmLCkP2i7/q26y/ar fryt0Uo2Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:21 2026 by rpki-client