This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer File: IkRK1QtOfbbWPJiQF9DlknSV52s.cer (raw, json) Hash identifier: ml3NsvlPdTtUXNiF2rJMlNI5Gd3qhXTAnO8ygaEHw0g= Subject key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E73773AB963712FE38D9F58C386F38C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 11:24:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198161 IP: 5.1.56.0/21 IP: 92.119.116.0/22 IP: 2a00:e140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:73:77:3a:b9:63:71:2f:e3:8d:9f:58:c3:86:f3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 11:24:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22444ad50b4e7db6d63c989017d0e5927495e76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:01:32:87:f9:28:8c:fe:3c:6a:cb:ae:e7: 24:08:ce:27:06:70:4a:ec:47:ee:a0:2f:0e:7b:33: 22:83:af:aa:3d:09:48:4e:00:7f:7a:b3:ea:13:a0: cf:37:a0:c9:e0:a9:56:b1:97:24:20:6a:30:c7:ad: b1:9c:8b:e7:38:fa:93:18:ca:dd:79:01:6a:dc:3d: fb:db:d9:9c:30:18:ae:5e:99:56:a1:07:1f:2e:fe: d9:6a:cb:e6:a6:d6:26:ba:d3:4c:9f:5c:66:8f:ad: f3:44:cd:0d:b6:61:d0:35:5d:39:e4:0c:2d:e3:ea: 24:55:0b:d3:b5:1c:16:4f:ab:3a:49:2a:65:ac:53: fb:1a:e6:06:8c:2b:af:c4:df:6b:e5:26:da:5b:60: a3:da:6b:fe:45:74:f7:39:3b:28:e2:9b:f2:3c:01: a8:bf:da:fa:d3:a1:77:cf:53:0e:f4:30:55:4a:c3: 2d:fc:ca:78:d3:57:ce:37:b8:7c:cc:c1:3b:bc:73: 2b:aa:07:74:c0:77:1b:06:4f:87:23:81:22:76:1f: 55:b5:d8:ed:4d:c6:66:7e:ff:24:0e:d0:44:67:ec: be:0a:57:35:74:1b:a0:33:a1:00:c1:5e:ca:b0:3a: 82:cc:18:e1:8e:af:70:de:96:cb:f4:10:a3:c8:ca: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.56.0/21 92.119.116.0/22 IPv6: 2a00:e140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198161 Signature Algorithm: sha256WithRSAEncryption 7c:74:5e:21:c5:ec:07:ef:8d:53:7f:ab:bb:1f:32:3f:b9:a0: d3:db:73:27:47:7d:a6:ac:4b:e1:75:bb:eb:c3:56:67:2e:31: d7:ae:18:1c:ca:00:45:1e:cf:80:09:a6:e7:4e:a8:93:0d:2c: 84:22:0e:24:52:51:7d:1c:f1:a7:9d:1d:e6:06:45:b2:95:cb: e5:14:a2:53:bc:b9:f9:3e:5f:4b:f4:b7:c5:51:18:f9:7b:95: c8:04:88:7a:82:80:f2:9c:a6:7d:21:cb:7b:ea:e2:3f:37:43: 76:e3:58:c5:46:b8:03:da:f3:ec:9b:ae:55:1a:85:e1:8a:42: 74:37:21:7d:92:1e:e3:64:f2:1d:06:77:40:8b:f9:3b:6e:c4: 15:ec:81:4c:8c:f8:bf:2e:ae:1d:02:a9:46:19:bb:34:c9:b2: 25:51:68:c5:ad:7a:3c:2a:cd:60:a1:ec:1f:f3:52:ed:aa:4c: 50:d4:5d:3a:32:93:ed:b1:9f:0f:63:08:18:4f:68:b4:df:a9: ea:9f:ef:46:bd:af:75:b5:a9:f1:0f:ab:35:ce:76:7c:1f:14: 5e:93:0c:90:c7:b9:32:43:34:db:eb:63:2b:8a:89:d7:fc:fe: cf:ff:af:e2:f6:b4:10:32:5c:10:9e:d9:34:58:f1:79:85:65: b1:62:ff:aa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+c3c6uWNxL+ONn1jDhvOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTEyNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ0NGFkNTBiNGU3ZGI2ZDYzYzk4OTAxN2QwZTU5Mjc0OTVlNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkEBMof5KIz+PGrLruckCM4nBnBK 7EfuoC8OezMig6+qPQlITgB/erPqE6DPN6DJ4KlWsZckIGowx62xnIvnOPqTGMrd eQFq3D3729mcMBiuXplWoQcfLv7ZasvmptYmutNMn1xmj63zRM0NtmHQNV055Awt 4+okVQvTtRwWT6s6SSplrFP7GuYGjCuvxN9r5SbaW2Cj2mv+RXT3OTso4pvyPAGo v9r606F3z1MO9DBVSsMt/Mp401fON7h8zME7vHMrqgd0wHcbBk+HI4Eidh9Vtdjt TcZmfv8kDtBEZ+y+Clc1dBugM6EAwV7KsDqCzBjhjq9w3pbL9BCjyMpeFwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCJEStULTn221jyYkBfQ5ZJ0ledrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2I1NjQ2 My01OWVhLTQ5NGItODgxNi1lMDIwMjNmMTIyZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYjU2NDYz LTU5ZWEtNDk0Yi04ODE2LWUwMjAyM2YxMjJlOC8xL0lrUksxUXRPZmJiV1BKaVFG OURsa25TVjUycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBQE4AwQCXHd0MA0EAgACMAcDBQAqAOFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGETANBgkqhkiG9w0BAQsFAAOCAQEAfHRe IcXsB++NU3+rux8yP7mg09tzJ0d9pqxL4XW768NWZy4x164YHMoARR7PgAmm506o kw0shCIOJFJRfRzxp50d5gZFspXL5RSiU7y5+T5fS/S3xVEY+XuVyASIeoKA8pym fSHLe+riPzdDduNYxUa4A9rz7JuuVRqF4YpCdDchfZIe42TyHQZ3QIv5O27EFeyB TIz4vy6uHQKpRhm7NMmyJVFoxa16PCrNYKHsH/NS7apMUNRdOjKT7bGfD2MIGE9o tN+p6p/vRr2vdbWp8Q+rNc52fB8UXpMMkMe5MkM02+tjK4qJ1/z+z/+v4va0EDJc EJ7ZNFjxeYVlsWL/qg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:34 2026 by rpki-client