This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer (raw, json) Hash identifier: t1koInrKDnr94cpYUZtufFiM1ejuwsUMGpdbGfcyXLc= Subject key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2AD0C8CCA13C9F0EDC4135CCCA15D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31651 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ad:0c:8c:ca:13:c9:f0:ed:c4:13:5c:cc:a1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d85d231ad54b8439c2aaed91a577586ac46000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:b0:32:17:a3:ac:0c:e6:aa:98:fe:04:e3: 96:bc:6a:29:e3:eb:4f:cf:50:89:0c:c2:fb:ee:17: 72:6a:dd:c7:c5:cf:e6:1a:d7:08:9a:cf:7a:f5:d2: b3:d6:33:62:15:c7:ee:8d:e1:53:1f:2a:33:b4:a3: 4d:7e:a9:6a:c8:4f:6a:84:5a:70:da:a0:8c:ae:09: 76:e3:96:a3:6f:1b:eb:a4:0d:3f:cc:1b:f8:93:90: 34:3e:27:d3:df:6f:3f:21:fa:1a:fc:92:02:24:b1: 8f:c8:10:62:52:9d:43:78:fd:7f:72:93:ab:1d:49: 59:1b:5c:bf:14:94:34:57:e1:ab:19:12:ec:43:7a: b8:f7:cc:bc:a9:89:f0:73:dd:ab:90:a0:1e:ab:d9: 53:7e:13:92:7a:b4:a6:2b:ed:92:6a:93:d2:f3:30: b0:a6:66:53:39:bf:04:d7:ea:1b:2a:3c:43:03:b6: 46:75:da:80:26:ca:40:1b:1c:d8:11:42:ff:e8:b7: 6a:6b:5f:86:5e:f4:fc:e3:cc:82:ab:ee:75:43:1e: 28:e7:4e:18:d5:08:a7:5e:c5:9e:d8:10:f8:c0:0b: f1:4d:cf:d5:e3:5e:4c:74:7a:c0:22:ac:5a:be:dd: b0:30:f6:67:3d:0e:2f:f0:18:c7:de:4c:f6:be:28: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 31651 Signature Algorithm: sha256WithRSAEncryption 61:9c:61:4a:a4:20:8d:a0:95:c4:23:3c:4a:bc:0b:e5:81:cb: 9c:3e:46:c4:3c:77:b2:d5:d4:98:ca:29:a5:7d:15:a6:f0:45: 01:af:0e:1d:aa:d5:34:bb:ab:46:88:1b:ec:86:fa:33:44:39: 95:98:5c:5e:cf:a6:82:fe:f1:95:88:88:bc:5f:52:31:79:bb: 4c:a6:90:ee:63:c8:07:d2:0d:b5:c1:c5:bd:cb:69:0a:48:7a: 5d:20:26:54:dc:99:bb:94:31:06:ed:46:10:69:ec:d4:01:c2: 97:f4:5a:f7:42:09:88:e6:45:9f:0a:75:f0:63:d0:7f:d4:68: 92:93:14:29:5d:db:b0:c1:f1:63:e8:5d:e4:63:21:c3:a3:a3: 8e:a6:e8:a2:a4:0f:69:2e:73:10:3d:3b:cb:f8:5a:5c:01:20: 42:48:49:3f:7e:4f:df:65:e9:37:61:66:a9:6a:1e:45:98:7c: 17:32:7a:ff:ed:3e:70:13:90:cd:69:3d:6f:26:cd:72:00:5a: 68:73:6d:8a:c0:b0:9d:37:99:0f:1d:52:7c:81:a8:ca:cc:03: 9a:69:58:29:f3:2e:06:8e:85:e2:29:9d:49:44:47:e0:9c:84: 43:0b:6b:9d:70:49:51:a9:c8:97:ec:15:ab:f6:4e:ea:6c:13: 8a:81:1f:a3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt4oq0MjMoTyfDtxBNczKFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQ4NWQyMzFhZDU0Yjg0MzljMmFhZWQ5MWE1Nzc1ODZhYzQ2MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D2wMhejrAzmqpj+BOOWvGop4+tP z1CJDML77hdyat3Hxc/mGtcIms969dKz1jNiFcfujeFTHyoztKNNfqlqyE9qhFpw 2qCMrgl245ajbxvrpA0/zBv4k5A0PifT328/Ifoa/JICJLGPyBBiUp1DeP1/cpOr HUlZG1y/FJQ0V+GrGRLsQ3q498y8qYnwc92rkKAeq9lTfhOSerSmK+2SapPS8zCw pmZTOb8E1+obKjxDA7ZGddqAJspAGxzYEUL/6Ldqa1+GXvT848yCq+51Qx4o504Y 1QinXsWe2BD4wAvxTc/V415MdHrAIqxavt2wMPZnPQ4v8BjH3kz2vijdxQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFCHYXSMa1UuEOcKq7ZGld1hqxGAAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzZhNmI1 NS1jYTAyLTQ1OGQtOGI1ZC03NGQ3NzMwMmIxODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNmE2YjU1 LWNhMDItNDU4ZC04YjVkLTc0ZDc3MzAyYjE4NC8xL0lkaGRJeHJWUzRRNXdxcnRr YVYzV0dyRVlBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnujMA0GCSqGSIb3DQEBCwUAA4IBAQBhnGFKpCCNoJXE IzxKvAvlgcucPkbEPHey1dSYyimlfRWm8EUBrw4dqtU0u6tGiBvshvozRDmVmFxe z6aC/vGViIi8X1IxebtMppDuY8gH0g21wcW9y2kKSHpdICZU3Jm7lDEG7UYQaezU AcKX9Fr3QgmI5kWfCnXwY9B/1GiSkxQpXduwwfFj6F3kYyHDo6OOpuiipA9pLnMQ PTvL+FpcASBCSEk/fk/fZek3YWapah5FmHwXMnr/7T5wE5DNaT1vJs1yAFpoc22K wLCdN5kPHVJ8gajKzAOaaVgp8y4GjoXiKZ1JREfgnIRDC2udcElRqciX7BWr9k7q bBOKgR+j -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:38 2026 by rpki-client