This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer File: IsX-stJfrE3YuqT3HY3CJoGGoDk.cer (raw, json) Hash identifier: H9sDf9YMu3qxVHYecm3zvJsGpeAvdh9HVnIFH3D7btU= Subject key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12868C988013C34D979485C84FC5C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48399 AS: 207362 IP: 45.15.254.0/24 IP: 45.93.13.0/24 IP: 45.147.195.0/24 IP: 77.83.72.0/24 IP: 85.193.70.0/23 IP: 91.188.246.0/23 IP: 130.49.164.0/23 IP: 178.170.223.0/24 IP: 185.1.162.0/24 IP: 185.190.116.0/22 IP: 192.70.196.0/22 IP: 2001:7f8:ee::/48 IP: 2a07:ecc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:86:8c:98:80:13:c3:4d:97:94:85:c8:4f:c5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:f9:b0:26:ec:7d:e6:7c:c6:fe:2a:12:a1: e1:0f:2f:6a:9a:cf:35:a5:72:bc:c9:b0:0a:a7:ee: e3:e5:59:1b:9e:c8:51:c6:5f:9c:db:d4:2e:2c:cf: c3:f3:ff:36:77:7d:34:39:52:cc:ae:e3:2d:8d:42: 40:ca:f3:97:f0:07:b6:f2:74:10:48:83:97:02:31: 24:0b:ea:74:28:d7:0d:9e:06:13:28:36:2a:58:b9: d8:9e:6b:9e:4e:f3:27:f1:2e:92:77:ce:8e:bc:8f: 64:bd:e4:85:3e:41:57:9a:17:2c:fe:d1:b8:92:51: fb:ce:03:c5:5e:50:87:9a:cc:36:91:31:9a:c0:2e: 4c:a1:85:73:84:c7:01:66:a0:99:59:36:b3:5d:bb: ca:d3:7c:de:3c:9a:60:ce:87:de:8e:2a:d6:09:9d: a6:79:28:66:fd:6e:22:67:53:e8:e1:2c:bc:cc:2b: 43:45:03:65:4d:8b:fa:ae:a0:dd:ed:32:6b:51:e9: a0:f8:ac:c2:fe:16:77:85:29:30:e1:d8:bd:9d:8a: 20:71:da:20:ca:3f:5d:2b:5b:71:ea:95:39:d3:19: ac:a1:a8:97:0e:5d:75:0d:ad:f2:ab:98:2a:64:d1: b0:e0:1a:14:ab:70:85:e1:e9:70:2d:4e:73:34:85: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.254.0/24 45.93.13.0/24 45.147.195.0/24 77.83.72.0/24 85.193.70.0/23 91.188.246.0/23 130.49.164.0/23 178.170.223.0/24 185.1.162.0/24 185.190.116.0/22 192.70.196.0/22 IPv6: 2001:7f8:ee::/48 2a07:ecc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48399 207362 Signature Algorithm: sha256WithRSAEncryption ac:d0:73:46:2e:2c:0d:ec:d1:c2:38:07:69:b2:78:9b:38:48: f7:92:da:d0:bb:80:54:ca:46:95:bf:f7:e8:8c:c0:95:d1:be: a2:52:15:64:b8:b4:90:89:38:27:61:9f:27:70:c0:76:18:8d: 6e:b3:4b:b3:e1:a6:61:b1:49:30:92:df:bb:85:e7:c1:bd:51: da:83:97:6f:7c:44:1c:af:d0:23:d5:0f:b5:81:a5:e7:ab:6d: 3c:5d:60:01:39:62:ef:25:12:36:1f:eb:35:ea:14:d5:a6:92: b3:e0:02:8d:62:2d:62:bc:8e:3f:bc:aa:ec:15:d0:df:da:5f: 90:0d:c6:ed:4a:f9:4c:b7:c4:7a:c4:b6:37:6e:9b:99:bf:b4: fd:90:5b:17:6a:6d:21:80:36:62:b4:ea:ea:52:e1:cc:d6:4c: 0b:ac:ed:c8:e6:6f:26:7d:dc:15:3c:59:e4:50:97:d1:6c:de: 21:78:3a:14:48:7a:ea:7a:8e:0a:f7:68:bc:de:26:67:30:aa: 7f:b5:a5:d9:15:f2:bb:ed:e6:1c:cd:82:6e:3c:64:60:41:29: 5c:2f:6b:1d:3e:98:46:67:5a:df:e5:38:1a:81:58:33:df:24: e3:98:a1:d8:dd:52:60:7b:28:bd:5c:5a:1b:27:6b:4d:ce:ea: 53:a6:47:4b -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt8EoaMmIATw02XlIXIT8XBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM1ZmViMmQyNWZhYzRkZDhiYWE0ZjcxZDhkYzIyNjgxODZhMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hz5sCbsfeZ8xv4qEqHhDy9qms81 pXK8ybAKp+7j5VkbnshRxl+c29QuLM/D8/82d300OVLMruMtjUJAyvOX8Ae28nQQ SIOXAjEkC+p0KNcNngYTKDYqWLnYnmueTvMn8S6Sd86OvI9kveSFPkFXmhcs/tG4 klH7zgPFXlCHmsw2kTGawC5MoYVzhMcBZqCZWTazXbvK03zePJpgzofejirWCZ2m eShm/W4iZ1Po4Sy8zCtDRQNlTYv6rqDd7TJrUemg+KzC/hZ3hSkw4di9nYogcdog yj9dK1tx6pU50xmsoaiXDl11Da3yq5gqZNGw4BoUq3CF4elwLU5zNIXjuQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2QyMTZl ZC05YTc2LTRhOTMtYjZhOS00NjhmNDk4ZmFmMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZDIxNmVk LTlhNzYtNGE5My1iNmE5LTQ2OGY0OThmYWYxYy8xL0lzWC1zdEpmckUzWXVxVDNI WTNDSm9HR29Eay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjBIBAIAATBCAwQALQ/+AwQALV0NAwQALZPDAwQATVNIAwQBVcFG AwQBW7z2AwQBgjGkAwQAsqrfAwQAuQGiAwQCub50AwQCwEbEMBYEAgACMBADBwAg AQf4AO4DBQMqB+zAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC9DwIDAyoCMA0G CSqGSIb3DQEBCwUAA4IBAQCs0HNGLiwN7NHCOAdpsnibOEj3ktrQu4BUykaVv/fo jMCV0b6iUhVkuLSQiTgnYZ8ncMB2GI1us0uz4aZhsUkwkt+7hefBvVHag5dvfEQc r9Aj1Q+1gaXnq208XWABOWLvJRI2H+s16hTVppKz4AKNYi1ivI4/vKrsFdDf2l+Q DcbtSvlMt8R6xLY3bpuZv7T9kFsXam0hgDZitOrqUuHM1kwLrO3I5m8mfdwVPFnk UJfRbN4heDoUSHrqeo4K92i83iZnMKp/taXZFfK77eYczYJuPGRgQSlcL2sdPphG Z1rf5TgagVgz3yTjmKHY3VJgeyi9XFobJ2tNzupTpkdL -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:14 2026 by rpki-client