This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer (raw, json) Hash identifier: Te+zLv2kZcE7VazSMD6abw78x9cnPckT1KoKLreX3hA= Subject key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36659E06C904A1DD2FB275D666A700 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202201 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:65:9e:06:c9:04:a1:dd:2f:b2:75:d6:66:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:31:34:f7:96:25:b4:1e:b8:9a:bb:ea:a6: 96:7f:32:6a:3e:59:40:40:8e:a1:5c:35:2f:ce:67: b9:02:cc:98:a2:9c:65:ae:23:15:11:7a:82:58:50: 06:9d:46:4b:7c:98:4e:d4:3f:05:e9:ad:f5:ca:c1: 93:ee:a2:fd:86:94:f0:26:63:98:85:d1:e7:bf:d3: e8:10:b0:04:4d:a6:15:98:d9:45:6b:15:71:e5:c3: f7:f3:d1:83:c9:da:9d:90:19:06:81:0f:83:bd:d4: 15:5a:f9:a9:d4:62:ac:3b:f3:8e:e4:18:9c:a5:be: 48:01:19:7f:83:37:34:81:22:4c:99:2c:3d:59:fb: 48:97:9c:e0:87:82:42:22:99:bb:50:ad:85:9e:36: 06:86:3b:21:e3:97:b8:02:09:21:aa:e8:b5:63:b6: f8:61:b2:a1:1f:75:d9:b8:2a:05:d3:b1:06:a8:18: 44:cf:b5:a3:fb:7f:78:88:0b:73:7c:02:d3:bf:2a: ff:e5:d7:15:7b:2c:ae:9c:62:84:61:26:9a:b5:e7: fa:12:2c:53:ad:22:11:be:e8:ca:2a:77:8d:f6:27: 27:39:da:4a:35:fe:ea:d6:bd:e9:b8:e2:4f:ea:ba: 1d:10:07:4a:41:5c:d5:d3:99:53:c0:06:bf:93:c9: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202201 Signature Algorithm: sha256WithRSAEncryption 5e:8f:ab:db:ae:a2:30:2a:5a:29:67:da:46:ea:bb:2c:c9:af: 4b:ea:1a:49:9b:70:72:fc:07:f7:56:9e:50:59:21:cb:69:ec: 46:66:16:94:85:2f:4e:b2:ef:38:50:01:a6:5c:a4:1e:2a:7c: 49:b2:fc:15:a8:0c:41:ff:da:4b:9e:a9:43:d0:5a:a4:c2:e3: e0:be:d1:c6:ef:cc:f1:ab:6a:3f:f7:9b:0d:ef:f4:c9:d6:c1: 6d:31:fd:d5:e6:a7:c1:d4:fe:a1:ef:8a:69:f8:9c:38:75:92: 98:81:74:9f:e4:60:60:32:9d:54:dd:29:3c:60:af:dc:c9:53: 01:95:e7:a9:bd:34:3d:8d:48:df:b3:3f:ba:bb:df:d4:82:63: 85:0f:60:f4:a5:5f:6c:24:b1:bd:e7:e2:e1:f2:69:76:28:1b: aa:45:2b:35:29:d9:ae:90:cd:1f:5c:e5:e9:af:19:e2:91:08: 35:33:d6:e7:23:0e:f9:d6:98:2f:14:05:dd:f1:a3:2d:c0:43: 18:f2:8a:db:9f:61:e5:ba:32:61:a0:b8:d7:3a:0c:99:57:79: cd:f5:f6:cb:b3:5c:29:18:5f:b3:11:cd:7d:69:7b:ac:f1:bc: ac:1c:e2:05:06:9d:cf:4d:b1:44:c7:92:6d:63:18:0e:9c:06: 63:79:40:61 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NmWeBskEod0vsnXWZqcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWNlMzExYzhlZDYwYmVmMWI1ZTRmN2QzYjg2NDEwNzgxNDQxOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvsxNPeWJbQeuJq76qaWfzJqPllA QI6hXDUvzme5AsyYopxlriMVEXqCWFAGnUZLfJhO1D8F6a31ysGT7qL9hpTwJmOY hdHnv9PoELAETaYVmNlFaxVx5cP389GDydqdkBkGgQ+DvdQVWvmp1GKsO/OO5Bic pb5IARl/gzc0gSJMmSw9WftIl5zgh4JCIpm7UK2FnjYGhjsh45e4Agkhqui1Y7b4 YbKhH3XZuCoF07EGqBhEz7Wj+394iAtzfALTvyr/5dcVeyyunGKEYSaatef6EixT rSIRvujKKneN9icnOdpKNf7q1r3puOJP6rodEAdKQVzV05lTwAa/k8kl7QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCHOMRyO1gvvG15PfTuGQQeBRBijMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzZiYWM1 NS05YWFhLTQ1MzAtOGZmNC02MDI3YTY4MzlhZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNmJhYzU1 LTlhYWEtNDUzMC04ZmY0LTYwMjdhNjgzOWFlNC8xL0ljNHhISTdXQy04YlhrOTlP NFpCQjRGRUdLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMV2TANBgkqhkiG9w0BAQsFAAOCAQEAXo+r266iMCpa KWfaRuq7LMmvS+oaSZtwcvwH91aeUFkhy2nsRmYWlIUvTrLvOFABplykHip8SbL8 FagMQf/aS56pQ9BapMLj4L7Rxu/M8atqP/ebDe/0ydbBbTH91eanwdT+oe+Kafic OHWSmIF0n+RgYDKdVN0pPGCv3MlTAZXnqb00PY1I37M/urvf1IJjhQ9g9KVfbCSx vefi4fJpdigbqkUrNSnZrpDNH1zl6a8Z4pEINTPW5yMO+daYLxQF3fGjLcBDGPKK 259h5boyYaC41zoMmVd5zfX2y7NcKRhfsxHNfWl7rPG8rBziBQadz02xRMeSbWMY DpwGY3lAYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:48 2026 by rpki-client