This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer File: IujBtA7lecGDeWRV9Aklc9mVodI.cer (raw, json) Hash identifier: ogDIkH5SrFEZqti117oql0RktRYgMOqaNFUDj38QVL0= Subject key identifier: 22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B83E8812919ED1B0100AB2B07822 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203535 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b8:3e:88:12:91:9e:d1:b0:10:0a:b2:b0:78:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22e8c1b40ee579c183796455f4092573d995a1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:89:f5:d7:c7:d8:83:2f:48:98:06:9c:28: d9:e5:6d:f5:4b:db:48:f6:b0:f5:8b:d7:21:88:4d: 35:bc:02:74:0f:4a:6e:50:f6:15:6d:90:88:17:27: d5:0e:23:6c:e3:39:3d:d0:f0:fc:cf:80:33:e1:da: 4b:3a:c8:18:92:e4:7b:e0:65:65:34:2c:2e:a0:7a: 28:e8:cd:35:31:0c:fd:db:a5:8b:df:bd:9b:55:48: 16:3d:41:cd:c6:17:bb:3d:69:25:41:92:13:b2:ee: f7:64:57:28:9b:49:6d:bb:09:5f:59:ac:6d:c7:cd: 76:7b:84:97:1a:2e:6a:32:f5:27:5e:fc:e6:e5:c9: c9:23:19:1d:7c:1c:85:99:58:2a:d7:60:04:74:6f: e1:2f:5a:c1:71:83:ed:7a:91:f7:05:fb:a4:77:d9: dc:7e:2a:fa:a3:05:33:bd:58:08:3d:71:c1:fc:8d: 17:76:c1:9d:c9:82:0b:2d:d9:ca:8d:9d:86:58:6f: 16:61:85:39:2c:d0:36:23:a9:66:25:da:6b:98:82: 9d:72:ab:33:b9:61:6a:81:18:d3:b6:d2:78:8d:3d: 59:c9:74:5b:71:79:d2:67:fe:97:17:2d:4d:b7:45: c4:26:9e:5e:d7:49:d8:6a:d6:65:59:00:f4:11:fe: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203535 Signature Algorithm: sha256WithRSAEncryption 09:b5:29:90:e1:88:a2:21:b6:59:da:df:a9:7b:5b:29:fd:a5: ca:b8:22:cf:88:9d:db:5c:b3:98:46:a7:d7:ae:63:38:2e:d5: 47:52:d8:4c:f1:ed:f8:32:80:be:de:c1:8d:ae:2d:62:96:a9: 53:20:f5:b7:ff:d2:40:c5:84:70:bf:91:98:f9:80:89:80:df: 97:e1:be:9b:d4:a6:f0:8b:8d:01:f4:01:ae:43:f0:9a:a3:18: 7d:2a:f2:15:49:e8:29:8c:63:c8:02:57:15:1e:f1:9c:8d:26: 7a:c2:c5:d7:63:04:ff:41:76:4e:41:bc:1a:17:51:b4:5c:cd: a4:8a:e6:7d:7a:aa:74:fb:d5:d1:13:37:d6:6e:41:f3:ed:cb: e6:95:6f:66:99:95:07:60:27:9c:22:b7:3b:64:b7:31:be:ab: 4a:83:ed:d8:1c:f1:0e:b5:29:94:a6:38:5f:f8:76:90:6d:a1: 59:5d:10:1c:06:cb:83:65:bb:2a:1e:be:f6:0d:25:07:ae:06: 66:68:60:1a:d6:c3:bb:07:d3:3e:73:f2:05:dc:ff:ff:0a:a9: 3c:e6:49:e4:5a:ee:fb:0a:82:d0:80:ed:07:35:26:9e:4d:b3: 58:5e:15:6e:50:1d:72:06:65:f9:40:43:74:e0:95:e7:c0:1c: 94:cf:6b:a0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/Fbg+iBKRntGwEAqysHgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmU4YzFiNDBlZTU3OWMxODM3OTY0NTVmNDA5MjU3M2Q5OTVhMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW6J9dfH2IMvSJgGnCjZ5W31S9tI 9rD1i9chiE01vAJ0D0puUPYVbZCIFyfVDiNs4zk90PD8z4Az4dpLOsgYkuR74GVl NCwuoHoo6M01MQz926WL372bVUgWPUHNxhe7PWklQZITsu73ZFcom0ltuwlfWaxt x812e4SXGi5qMvUnXvzm5cnJIxkdfByFmVgq12AEdG/hL1rBcYPtepH3Bfukd9nc fir6owUzvVgIPXHB/I0XdsGdyYILLdnKjZ2GWG8WYYU5LNA2I6lmJdprmIKdcqsz uWFqgRjTttJ4jT1ZyXRbcXnSZ/6XFy1Nt0XEJp5e10nYatZlWQD0Ef6OzwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCLowbQO5XnBg3lkVfQJJXPZlaHSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzkyOWQw Ny03ZTNiLTRjOWEtYWY5MS1lMjEyZmQ0Mzg5N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvOTI5ZDA3 LTdlM2ItNGM5YS1hZjkxLWUyMTJmZDQzODk3YS8xL0l1akJ0QTdsZWNHRGVXUlY5 QWtsYzltVm9kSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbDzANBgkqhkiG9w0BAQsFAAOCAQEACbUpkOGIoiG2 WdrfqXtbKf2lyrgiz4id21yzmEan165jOC7VR1LYTPHt+DKAvt7Bja4tYpapUyD1 t//SQMWEcL+RmPmAiYDfl+G+m9Sm8IuNAfQBrkPwmqMYfSryFUnoKYxjyAJXFR7x nI0mesLF12ME/0F2TkG8GhdRtFzNpIrmfXqqdPvV0RM31m5B8+3L5pVvZpmVB2An nCK3O2S3Mb6rSoPt2BzxDrUplKY4X/h2kG2hWV0QHAbLg2W7Kh6+9g0lB64GZmhg GtbDuwfTPnPyBdz//wqpPOZJ5Fru+wqC0IDtBzUmnk2zWF4VblAdcgZl+UBDdOCV 58AclM9roA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:16 2026 by rpki-client