This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer File: IeQhptlumdY_fPtJnKcRfIIwTqo.cer (raw, json) Hash identifier: uoD5IbtV81vx9eUziGsiA4YVoLnhDtkU1pOmctcshto= Subject key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C7F4A1B973B4762975A683E7C35A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210178 IP: 194.61.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c7:f4:a1:b9:73:b4:76:29:75:a6:83:e7:c3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:53:96:99:be:89:3e:ad:69:20:1f:41:88: b0:b3:53:02:1e:ab:eb:67:9f:71:e0:9c:19:8a:bc: e6:90:5c:3c:ef:ab:10:15:96:99:3b:07:63:7b:69: e5:49:35:8e:8f:11:ae:91:c7:bf:a9:92:ff:4d:49: ea:ec:bd:61:14:0e:80:60:c3:97:46:4f:7d:f6:3c: a3:78:8b:02:e7:94:48:99:4f:85:a2:19:44:06:85: ba:f7:e0:6e:e3:9b:45:77:5a:b4:ca:76:54:e8:f5: e2:60:8a:3f:16:74:10:82:02:75:d2:b0:05:0f:e4: cf:ca:ae:77:95:b9:8c:27:74:87:a9:1b:ea:a3:83: 38:e8:99:54:58:04:d4:41:d3:77:f3:0e:6f:08:d6: 30:7b:ab:43:1e:75:17:9e:a3:38:34:62:5a:93:2f: d7:96:28:a9:32:11:d0:e2:30:38:4b:da:83:1a:67: 04:cc:3d:c1:60:84:35:33:f9:bf:5d:e6:26:90:88: a9:1f:86:ef:e0:41:ba:fc:52:a5:63:a5:b9:af:be: 00:7c:0b:b2:dd:1d:e8:1b:2c:67:bd:f3:25:eb:a4: 5f:cb:50:a4:54:86:3e:89:75:fb:59:5b:be:59:1b: d7:cf:15:67:1a:90:50:bf:d9:4e:95:fa:b5:fb:53: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210178 Signature Algorithm: sha256WithRSAEncryption 54:9b:08:0d:cd:34:b8:7f:47:98:67:ac:a2:8d:6b:54:94:93: ea:88:d9:70:59:42:e6:04:1e:29:c3:00:00:72:bd:18:d9:85: 05:a9:f9:0e:a4:d0:9c:69:75:1e:37:b3:87:cc:22:4f:64:8a: b6:99:a9:7a:1f:58:33:9b:64:0b:9d:23:27:cc:7e:11:e4:3b: 19:d4:ef:a5:00:6e:4e:70:ae:1f:43:fd:7e:8e:30:ad:ec:4d: db:42:e3:70:53:7e:3d:15:29:3a:7c:bb:7c:19:57:4c:2a:5b: 00:4b:50:5c:a8:a3:c1:cf:7a:f2:d6:84:a2:b3:86:19:1e:43: 1e:2f:e8:9a:49:b9:60:77:f3:bf:1a:90:34:ef:cd:7f:89:60: 08:2a:34:31:2c:f1:de:c4:94:78:0a:27:78:fd:99:3b:43:c9: fb:f3:80:27:cd:99:97:5e:f5:e3:3a:15:22:90:41:a6:a2:d5: 25:ce:91:a3:e2:40:40:3e:88:3b:d7:6b:0e:08:d4:95:16:3c: da:8f:b4:52:54:de:0c:0e:15:cb:6c:8b:eb:7a:21:20:f3:64: f8:f6:f9:03:63:89:9d:7e:34:02:9e:13:db:2a:08:99:d5:bf: a0:e8:77:e8:99:ac:2e:a4:34:fc:89:31:d0:6d:68:c0:1e:17: 43:8e:40:a5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EMf0oblztHYpdaaD58NaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWU0MjFhNmQ5NmU5OWQ2M2Y3Y2ZiNDk5Y2E3MTE3YzgyMzA0ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/BTlpm+iT6taSAfQYiws1MCHqvr Z59x4JwZirzmkFw876sQFZaZOwdje2nlSTWOjxGukce/qZL/TUnq7L1hFA6AYMOX Rk999jyjeIsC55RImU+FohlEBoW69+Bu45tFd1q0ynZU6PXiYIo/FnQQggJ10rAF D+TPyq53lbmMJ3SHqRvqo4M46JlUWATUQdN38w5vCNYwe6tDHnUXnqM4NGJaky/X liipMhHQ4jA4S9qDGmcEzD3BYIQ1M/m/XeYmkIipH4bv4EG6/FKlY6W5r74AfAuy 3R3oGyxnvfMl66Rfy1CkVIY+iXX7WVu+WRvXzxVnGpBQv9lOlfq1+1MIpwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCHkIabZbpnWP3z7SZynEXyCME6qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzFkNGIy Yy05NDVkLTRmMzktYjIzMy0zZTZiNzAyNWI2NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMWQ0YjJj LTk0NWQtNGYzOS1iMjMzLTNlNmI3MDI1YjY1ZS8xL0llUWhwdGx1bWRZX2ZQdEpu S2NSZklJd1Rxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwj2MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM1AjANBgkqhkiG9w0BAQsFAAOCAQEAVJsIDc00uH9HmGesoo1rVJST6ojZcFlC 5gQeKcMAAHK9GNmFBan5DqTQnGl1Hjezh8wiT2SKtpmpeh9YM5tkC50jJ8x+EeQ7 GdTvpQBuTnCuH0P9fo4wrexN20LjcFN+PRUpOny7fBlXTCpbAEtQXKijwc968taE orOGGR5DHi/omkm5YHfzvxqQNO/Nf4lgCCo0MSzx3sSUeAoneP2ZO0PJ+/OAJ82Z l1714zoVIpBBpqLVJc6Ro+JAQD6IO9drDgjUlRY82o+0UlTeDA4Vy2yL63ohIPNk +Pb5A2OJnX40Ap4T2yoImdW/oOh36JmsLqQ0/Ikx0G1owB4XQ45ApQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:09 2026 by rpki-client