This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer File: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer (raw, json) Hash identifier: BSmT3T0vc2gF1fr5Ni0O3m9ynbMWZ61ksmEzA0A4CpQ= Subject key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF978E945989E92FB007F18E349472E90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 08:43:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197275 IP: 91.219.56.0/22 IP: 176.115.144.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:78:e9:45:98:9e:92:fb:00:7f:18:e3:49:47:2e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 08:43:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220f2767315875ec0efc2e255856f586a4ddf99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2f:d1:4f:14:0c:3d:02:ba:7f:1b:a9:e3:8f: 55:74:33:d2:4c:28:b1:6e:92:b0:4b:e7:05:ac:27: bf:73:f3:e4:1e:8a:c7:5f:fd:36:fd:90:16:46:d3: 82:0c:c5:f1:f0:8d:4a:62:5b:be:5b:ac:72:3c:ac: 94:cb:d5:21:df:11:93:7f:43:56:be:9f:e2:95:95: e9:f6:15:bc:2b:8f:00:54:62:2c:1e:3a:a5:00:96: 6d:7f:3e:0a:b2:af:fd:39:c3:48:18:be:c7:54:8e: 8f:98:68:bc:3f:f0:fa:1d:2f:20:c1:d3:b3:73:2f: b0:dc:35:b8:0d:8c:23:2b:af:43:3e:5e:7a:19:61: 5c:c9:13:61:e1:72:2c:66:80:db:b1:b5:93:87:52: 00:d4:82:33:07:f0:83:40:b3:a1:c5:f9:76:bb:c7: 3e:a2:65:88:ef:24:72:e2:21:f4:e2:c1:a6:bc:2f: 04:9a:66:00:3f:cf:8b:6b:bf:46:08:ed:3c:e7:5b: 8b:79:ed:02:4c:54:28:0d:01:a5:5d:fb:97:12:37: 1c:85:66:09:c2:1c:dd:ec:e5:0a:7e:b5:74:ee:4e: 00:88:ec:76:40:52:a6:4d:ab:49:30:8f:05:e2:83: a7:56:28:99:c2:96:ab:fe:f5:f1:1e:ca:53:cc:d8: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.56.0/22 176.115.144.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197275 Signature Algorithm: sha256WithRSAEncryption 7f:08:e5:b1:11:83:7b:8e:59:56:d2:fa:ed:b6:dd:5e:fa:8d: 2e:14:72:1e:aa:fd:9b:a0:e1:c1:a7:c4:6f:ea:87:fd:06:da: 51:78:58:3c:29:fd:7e:07:d0:51:37:28:16:7a:66:77:fd:e7: 28:9d:ec:c5:d4:5b:5b:ce:49:d0:e7:be:4a:eb:81:4e:25:78: 3d:98:d2:f9:4c:30:4b:d2:b2:d0:d8:5f:22:7e:b5:75:c1:8e: 28:cd:a4:5a:14:35:a8:b1:d2:e3:72:74:7c:dd:93:c6:bf:c1: 5c:eb:44:ef:a9:cf:2e:00:51:5e:cb:e8:cc:3d:de:31:fc:2f: 2d:1d:fb:8e:8f:7f:e1:34:7e:e2:8d:cf:70:61:69:43:e2:45: b2:bb:23:fc:44:08:8d:57:bd:e8:50:27:de:8d:e0:a1:7f:ea: 83:16:71:c1:67:99:ed:1d:9f:c4:0e:6d:b7:c0:ce:93:0a:1c: e5:ba:f1:d4:cf:e8:ef:ad:3c:1a:df:88:f9:fd:2a:6a:e9:a1: 75:70:be:da:53:c7:7f:cd:04:d0:eb:98:0e:8e:9c:71:f9:e0: 28:9c:34:64:d0:d8:3c:fa:46:4a:a3:da:f4:3b:2b:57:43:2b: 83:c5:f4:db:8c:9c:33:ab:41:ad:05:f4:a1:5c:3e:2c:9a:37: df:bb:2d:35 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZv5eOlFmJ6S+wB/GONJRy6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MDg0MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjBmMjc2NzMxNTg3NWVjMGVmYzJlMjU1ODU2ZjU4NmE0ZGRmOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i/RTxQMPQK6fxup449VdDPSTCix bpKwS+cFrCe/c/PkHorHX/02/ZAWRtOCDMXx8I1KYlu+W6xyPKyUy9Uh3xGTf0NW vp/ilZXp9hW8K48AVGIsHjqlAJZtfz4Ksq/9OcNIGL7HVI6PmGi8P/D6HS8gwdOz cy+w3DW4DYwjK69DPl56GWFcyRNh4XIsZoDbsbWTh1IA1IIzB/CDQLOhxfl2u8c+ omWI7yRy4iH04sGmvC8EmmYAP8+La79GCO0851uLee0CTFQoDQGlXfuXEjcchWYJ whzd7OUKfrV07k4AiOx2QFKmTatJMI8F4oOnViiZwpar/vXxHspTzNjZqQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCIPJ2cxWHXsDvwuJVhW9Yak3fmcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2U5NDBh OC1mZDc5LTRlNDgtYjEyZC1lZmJiYjQ5OGZjYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvZTk0MGE4 LWZkNzktNGU0OC1iMTJkLWVmYmJiNDk4ZmNiMi8xL0lnOG5aekZZZGV3T19DNGxX RmIxaHFUZC1ady5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9s4AwQDsHOQMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMCmzANBgkqhkiG9w0BAQsFAAOCAQEAfwjlsRGDe45ZVtL67bbdXvqN LhRyHqr9m6DhwafEb+qH/QbaUXhYPCn9fgfQUTcoFnpmd/3nKJ3sxdRbW85J0Oe+ SuuBTiV4PZjS+UwwS9Ky0NhfIn61dcGOKM2kWhQ1qLHS43J0fN2Txr/BXOtE76nP LgBRXsvozD3eMfwvLR37jo9/4TR+4o3PcGFpQ+JFsrsj/EQIjVe96FAn3o3goX/q gxZxwWeZ7R2fxA5tt8DOkwoc5brx1M/o7608Gt+I+f0qaumhdXC+2lPHf80E0OuY Do6ccfngKJw0ZNDYPPpGSqPa9DsrV0Mrg8X024ycM6tBrQX0oVw+LJo337stNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:31 2026 by rpki-client