This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer File: IbnyqCas92elDlmynsH_CSz9PBw.cer (raw, json) Hash identifier: 0OO8dOPvYxc6QmTMHjPr8USmK6XwhicwodRX1LZDASQ= Subject key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73463C8FD727CF0A90EBA480AFED7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206215 IP: 167.150.22.0/24 IP: 167.150.220.0/24 IP: 2001:678:111c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:34:63:c8:fd:72:7c:f0:a9:0e:ba:48:0a:fe:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:d1:83:0b:5a:a2:d6:42:d1:36:25:fe:da: ce:f5:82:6d:7f:75:fe:de:59:8d:df:01:ca:57:89: 54:9a:94:05:ea:69:04:3b:b0:6f:12:3a:1f:10:e1: fe:9b:39:99:9d:0d:e3:5f:bb:91:75:53:7c:26:6e: c4:18:33:db:14:ed:a2:12:95:17:ec:c1:5d:48:8e: 42:05:5f:4c:9b:1a:7e:e9:b2:04:24:05:8e:d1:15: ce:49:a1:8e:da:f9:eb:55:d3:ef:74:01:21:40:8b: 4f:9c:f1:76:3a:46:49:ff:70:49:46:4c:fc:8e:90: f1:a9:1f:9c:83:54:09:8b:d1:08:3c:9b:60:49:09: 91:5a:1a:40:bf:f0:68:9b:67:0d:b6:0b:0f:93:54: f9:6f:e1:7a:2d:8f:45:2e:74:62:7c:da:83:53:ca: 0f:77:99:b3:0e:cc:0f:a6:e9:5c:92:3b:69:da:19: 43:83:fd:0e:c4:5a:77:cb:ad:56:60:40:72:02:15: 0b:84:9b:33:5a:6a:0b:6a:11:61:83:5f:04:a4:56: d5:32:85:2a:2f:7a:32:fb:04:2f:9d:ea:4a:54:fc: 35:cf:d7:66:a8:6b:e7:60:9f:6f:7d:99:72:22:9f: 76:db:e2:d0:ff:a4:cd:86:4d:e7:da:23:0c:c0:ad: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.22.0/24 167.150.220.0/24 IPv6: 2001:678:111c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206215 Signature Algorithm: sha256WithRSAEncryption 55:f6:82:5f:08:1a:3f:b0:02:d3:80:95:7d:38:c9:c1:1f:95: 16:60:58:3b:ed:72:0d:12:8b:bf:35:06:5e:8f:09:8b:06:a3: d9:c3:5b:e5:89:36:71:56:99:ba:43:96:94:86:9c:6a:3d:4d: 5b:93:7f:af:8c:74:ed:ab:32:5b:e8:0a:5f:51:d9:d4:6e:55: 90:e3:0a:93:f1:6b:6b:52:60:06:8a:01:4b:9f:f6:f4:f0:cd: 5f:3a:75:e6:d0:d7:bc:73:00:fc:6c:ec:cd:65:ea:fd:d3:cc: e2:8c:37:85:40:3a:9c:9d:fb:ca:9b:be:e6:c4:85:1d:3d:d4: c5:ea:2a:29:45:49:c2:7e:ec:9c:b6:5f:f3:59:5d:73:99:69: e7:ff:c3:c1:63:cc:6b:49:f1:55:05:02:53:c2:6d:de:38:32: 13:7b:d5:d6:31:d4:7e:e1:b2:9c:29:78:8c:7f:da:6b:66:1c: 99:a3:9e:5a:05:69:0f:fa:3c:5b:33:c4:04:50:14:5e:d7:b6: f6:bb:c1:22:09:c5:54:65:62:44:35:ea:6d:21:24:ad:ff:89: 38:e6:8b:51:a5:20:d4:3f:66:30:d5:4d:13:f2:01:af:5b:6a: 2c:3e:7f:5a:fc:72:e1:31:cb:70:23:17:a1:1a:ab:c1:1b:c6: 3c:9c:b9:28 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt3xzRjyP1yfPCpDrpICv7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWI5ZjJhODI2YWNmNzY3YTUwZTU5YjI5ZWMxZmYwOTJjZmQzYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoADRgwtaotZC0TYl/trO9YJtf3X+ 3lmN3wHKV4lUmpQF6mkEO7BvEjofEOH+mzmZnQ3jX7uRdVN8Jm7EGDPbFO2iEpUX 7MFdSI5CBV9Mmxp+6bIEJAWO0RXOSaGO2vnrVdPvdAEhQItPnPF2OkZJ/3BJRkz8 jpDxqR+cg1QJi9EIPJtgSQmRWhpAv/Bom2cNtgsPk1T5b+F6LY9FLnRifNqDU8oP d5mzDswPpulckjtp2hlDg/0OxFp3y61WYEByAhULhJszWmoLahFhg18EpFbVMoUq L3oy+wQvnepKVPw1z9dmqGvnYJ9vfZlyIp922+LQ/6TNhk3n2iMMwK1UiQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFCG58qgmrPdnpQ5Zsp7B/wks/TwcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2Q3MGY3 OC0wODJlLTRlYzItODEwMC03Y2RjYjUwZWQwZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZDcwZjc4 LTA4MmUtNGVjMi04MTAwLTdjZGNiNTBlZDBlNC8xL0libnlxQ2FzOTJlbERsbXlu c0hfQ1N6OVBCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAp5YWAwQAp5bcMA8EAgACMAkDBwAgAQZ4ERww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyWHMA0GCSqGSIb3DQEBCwUAA4IBAQBV 9oJfCBo/sALTgJV9OMnBH5UWYFg77XINEou/NQZejwmLBqPZw1vliTZxVpm6Q5aU hpxqPU1bk3+vjHTtqzJb6ApfUdnUblWQ4wqT8WtrUmAGigFLn/b08M1fOnXm0Ne8 cwD8bOzNZer908zijDeFQDqcnfvKm77mxIUdPdTF6iopRUnCfuyctl/zWV1zmWnn /8PBY8xrSfFVBQJTwm3eODITe9XWMdR+4bKcKXiMf9prZhyZo55aBWkP+jxbM8QE UBRe17b2u8EiCcVUZWJENeptISSt/4k45otRpSDUP2Yw1U0T8gGvW2osPn9a/HLh MctwIxehGqvBG8Y8nLko -----END CERTIFICATE-----Generated at Tue Jan 20 02:18:39 2026 by rpki-client