This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer File: IcOUybOja2n57l-JNqL1G5XqzrQ.cer (raw, json) Hash identifier: Uq6TnbzTL/+feafMvVcBLMBJiG4Bp0Ftg8K7yLXPF6s= Subject key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8566BD2D26CDE72872E9BF434686CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35314 IP: 45.132.208.0/22 IP: 83.139.202.0/23 IP: 83.139.212.0 -- 83.139.221.255 IP: 83.139.224.0/20 IP: 83.139.242.0 -- 83.139.245.255 IP: 85.31.160.0/21 IP: 2a0c:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:66:bd:2d:26:cd:e7:28:72:e9:bf:43:46:86:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:af:03:9f:fa:5f:a5:a2:f5:4c:d7:a3:d1: 39:aa:91:36:70:fb:dd:b0:13:2c:e4:69:63:96:db: 73:85:ef:2d:32:10:0e:1c:73:ff:88:4a:f4:14:f4: c8:18:f7:bc:19:59:c0:cf:8b:b7:93:5e:de:57:7e: d1:3d:ab:15:b5:8d:d4:9b:17:f4:fa:d4:12:3f:4a: 3d:03:6b:e2:f1:fa:3a:66:a6:af:4d:c2:89:4c:60: 2c:22:74:30:ea:fd:81:2d:dc:ed:ce:64:d8:6c:1c: eb:65:34:22:58:2c:2a:5d:bd:85:65:02:bf:3a:8b: 98:15:84:67:de:48:f6:1e:2e:d0:e2:e0:1e:de:a6: 74:41:9c:06:ec:6f:94:83:63:80:1a:2e:c6:5c:b2: c8:86:20:93:1a:65:55:b1:2f:cb:17:88:49:44:cc: b5:6b:93:bb:75:17:fb:06:39:64:71:fc:7c:d5:d7: 3c:7a:6d:f6:d0:4d:8f:a3:fe:04:4a:19:57:11:42: c1:09:1c:aa:e6:47:43:8e:f4:94:a7:64:d7:d8:97: cd:58:2d:8d:19:11:4c:3a:2d:90:18:ec:22:ce:17: ac:b9:60:01:83:5f:53:a6:57:58:25:11:b3:bf:37: 8f:c6:18:b5:b2:c7:57:76:1f:aa:c4:6d:f0:67:da: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.208.0/22 83.139.202.0/23 83.139.212.0-83.139.221.255 83.139.224.0/20 83.139.242.0-83.139.245.255 85.31.160.0/21 IPv6: 2a0c:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35314 Signature Algorithm: sha256WithRSAEncryption 20:ec:1c:07:ac:1e:4b:23:0c:1f:75:e2:4c:fa:59:0d:47:44: aa:47:ba:a1:69:80:26:88:08:df:6d:aa:5d:bc:08:68:84:94: 6f:c0:d7:24:b2:a6:0f:04:92:87:c6:78:98:90:d7:0a:d2:24: c8:69:f0:0b:57:da:82:78:ec:54:bf:61:f4:0c:9c:61:38:7b: f3:bb:99:09:b7:9e:32:b8:ba:36:0d:0e:3a:56:47:36:db:04: e0:35:ec:85:9c:7d:5f:ea:3e:7f:a6:5a:65:4f:2d:72:52:8d: 87:f6:e2:4e:0e:ee:3f:20:c3:51:9c:e6:25:16:c6:05:0b:7a: 1d:3f:ee:28:68:b3:92:19:70:22:38:77:75:64:44:6c:7f:d6: 39:54:04:18:95:5a:72:a8:45:5b:b2:6d:df:55:27:b8:13:67: 6c:46:14:9a:e3:b2:4a:47:f0:a9:b1:2d:04:e0:48:ab:5c:4e: e4:39:93:e1:a7:94:eb:07:36:7f:7b:00:d8:e6:e3:07:58:83: f5:e3:38:b6:07:d3:58:f7:d3:51:29:d4:59:29:5d:d7:5c:90: fd:7f:1d:ba:8b:8a:54:f0:bb:18:d9:18:d7:c4:3c:2f:50:2e: 22:10:14:13:25:e4:50:fd:e6:fa:91:4c:0e:2f:3b:a1:58:e5: 67:26:7d:ff -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt/hWa9LSbN5yhy6b9DRobPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWMzOTRjOWIzYTM2YjY5ZjllZTVmODkzNmEyZjUxYjk1ZWFjZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB+vA5/6X6Wi9UzXo9E5qpE2cPvd sBMs5Gljlttzhe8tMhAOHHP/iEr0FPTIGPe8GVnAz4u3k17eV37RPasVtY3Umxf0 +tQSP0o9A2vi8fo6ZqavTcKJTGAsInQw6v2BLdztzmTYbBzrZTQiWCwqXb2FZQK/ OouYFYRn3kj2Hi7Q4uAe3qZ0QZwG7G+Ug2OAGi7GXLLIhiCTGmVVsS/LF4hJRMy1 a5O7dRf7Bjlkcfx81dc8em320E2Po/4EShlXEULBCRyq5kdDjvSUp2TX2JfNWC2N GRFMOi2QGOwizhesuWABg19TpldYJRGzvzePxhi1ssdXdh+qxG3wZ9rlSwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFCHDlMmzo2tp+e5fiTai9RuV6s60MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzYxZmFj Yy02NjlmLTQ0NTYtOTYzZi0xZTQzNmRjYjg1YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNjFmYWNj LTY2OWYtNDQ1Ni05NjNmLTFlNDM2ZGNiODVjNS8xL0ljT1V5Yk9qYTJuNTdsLUpO cUwxRzVYcXpyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGCCsGAQUF BwEHAQH/BE0wSzA6BAIAATA0AwQCLYTQAwQBU4vKMAwDBAJTi9QDBAFTi9wDBART i+AwDAMEAVOL8gMEAVOL9AMEA1UfoDANBAIAAjAHAwUDKgxIwDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMAifIwDQYJKoZIhvcNAQELBQADggEBACDsHAesHksjDB91 4kz6WQ1HRKpHuqFpgCaICN9tql28CGiElG/A1ySypg8EkofGeJiQ1wrSJMhp8AtX 2oJ47FS/YfQMnGE4e/O7mQm3njK4ujYNDjpWRzbbBOA17IWcfV/qPn+mWmVPLXJS jYf24k4O7j8gw1Gc5iUWxgULeh0/7ihos5IZcCI4d3VkRGx/1jlUBBiVWnKoRVuy bd9VJ7gTZ2xGFJrjskpH8KmxLQTgSKtcTuQ5k+GnlOsHNn97ANjm4wdYg/XjOLYH 01j301Ep1FkpXddckP1/HbqLilTwuxjZGNfEPC9QLiIQFBMl5FD95vqRTA4vO6FY 5Wcmff8= -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:01 2026 by rpki-client