This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer (raw, json) Hash identifier: RB7vaisdyGRHecMYc8i2oBgbnR9SCp+8QPah5OdZyLk= Subject key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2BB51BEF15C10AD4199D73C02307 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206404 IP: 185.187.68.0/24 IP: 185.187.71.0/24 IP: 2a0e:3800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2b:b5:1b:ef:15:c1:0a:d4:19:9d:73:c0:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f553fef5c1859d952300ad3efb511e58afda01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:1e:d7:86:bc:9b:93:5a:79:5f:0b:e4:24: a4:2c:cf:14:23:96:91:54:8f:2f:8d:b7:9e:87:9d: 8c:25:4e:8b:3f:aa:7d:35:db:81:7c:07:eb:1a:ed: d4:85:99:99:61:cb:68:36:9b:88:94:37:88:31:14: 97:a8:8f:0a:ee:a8:d0:ec:e7:86:ab:fb:c0:5d:3f: db:67:66:de:72:5c:90:b7:a7:1c:34:58:3f:79:7a: 70:d6:ae:95:8c:26:3a:d4:f0:c9:c8:a5:32:87:75: 53:df:88:38:6b:2a:1f:f8:40:de:ad:e1:b9:1c:6e: ff:b3:0f:1d:9b:da:01:b3:2a:e0:16:bc:32:c6:03: 16:cd:82:39:54:68:85:1c:1d:be:a4:06:85:47:3b: 2d:91:74:ef:9e:4f:4b:ca:ae:f2:61:af:0e:96:ca: 5a:8c:18:1c:6e:a2:ae:99:d8:6e:eb:ad:d6:7c:3a: d0:93:56:0e:40:3c:64:cf:8e:97:9c:3b:5f:aa:30: f4:05:a2:d6:b0:ae:b7:69:2a:8a:82:e8:a1:c2:8d: 17:92:68:7f:d1:e5:25:80:9a:75:fe:08:e9:d9:9b: 11:c5:ff:24:91:80:2b:ef:3a:2e:51:ac:bf:7f:be: ca:64:ee:56:be:42:e3:51:91:8c:73:e1:1b:b9:03: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.68.0/24 185.187.71.0/24 IPv6: 2a0e:3800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206404 Signature Algorithm: sha256WithRSAEncryption 40:6f:ee:76:26:f7:96:7c:d5:08:24:a6:dd:8a:31:7d:78:6b: 6f:f4:03:99:13:e6:03:0e:7a:6f:a5:2d:d2:c4:36:1d:ca:6e: 46:13:e7:ac:05:01:c9:f1:c0:f7:55:79:ee:8f:e8:c9:8a:99: 2b:aa:3e:c5:d7:b6:0d:8e:bd:8f:75:82:98:5c:a6:f0:16:e4: 93:f9:bb:49:38:59:00:59:ef:bf:53:b7:5f:af:c7:ea:6e:bc: 49:71:01:9a:75:45:ce:be:2b:d6:96:27:a4:ec:d7:79:f0:82: 27:56:c6:85:6a:c0:0f:e7:da:2f:6e:fb:18:dc:6d:c4:22:ae: f9:17:09:52:84:a9:f2:6b:fc:ca:56:c3:c2:f6:a8:65:53:33: 0f:1c:af:42:81:3c:dc:11:ec:da:28:0c:e3:12:d4:91:01:d6: aa:c2:2d:fe:7a:e0:f1:c8:26:d7:86:70:66:ff:2b:b4:e5:cc: 0c:b3:65:0d:01:3e:8c:5e:26:41:2d:5e:5e:eb:c5:a0:45:30: c1:a8:28:3f:9d:c5:30:9a:ce:89:c2:34:6a:37:ca:04:49:3b: b7:7f:d2:e7:f7:a8:00:8c:36:83:c0:b4:f2:01:99:9c:bb:ed: 99:f1:77:f6:45:da:8d:fc:75:bd:89:ef:ad:fe:a7:65:2f:ae: 0d:87:68:b1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87iu1G+8VwQrUGZ1zwCMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmY1NTNmZWY1YzE4NTlkOTUyMzAwYWQzZWZiNTExZTU4YWZkYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTMe14a8m5NaeV8L5CSkLM8UI5aR VI8vjbeeh52MJU6LP6p9NduBfAfrGu3UhZmZYctoNpuIlDeIMRSXqI8K7qjQ7OeG q/vAXT/bZ2beclyQt6ccNFg/eXpw1q6VjCY61PDJyKUyh3VT34g4ayof+EDereG5 HG7/sw8dm9oBsyrgFrwyxgMWzYI5VGiFHB2+pAaFRzstkXTvnk9Lyq7yYa8Olspa jBgcbqKumdhu663WfDrQk1YOQDxkz46XnDtfqjD0BaLWsK63aSqKguihwo0Xkmh/ 0eUlgJp1/gjp2ZsRxf8kkYAr7zouUay/f77KZO5WvkLjUZGMc+EbuQPgvQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCL1U/71wYWdlSMArT77UR5Yr9oBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2M1MDJi YS1kODQzLTRiZmQtOTg5ZC02NmQ5ZTg2MWI0NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYzUwMmJh LWQ4NDMtNGJmZC05ODlkLTY2ZDllODYxYjQ3OC8xL0l2VlRfdlhCaFoyVkl3Q3RQ dnRSSGxpdjJnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAubtEAwQAubtHMA0EAgACMAcDBQMqDjgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmRDANBgkqhkiG9w0BAQsFAAOCAQEAQG/u dib3lnzVCCSm3YoxfXhrb/QDmRPmAw56b6Ut0sQ2HcpuRhPnrAUByfHA91V57o/o yYqZK6o+xde2DY69j3WCmFym8Bbkk/m7SThZAFnvv1O3X6/H6m68SXEBmnVFzr4r 1pYnpOzXefCCJ1bGhWrAD+faL277GNxtxCKu+RcJUoSp8mv8ylbDwvaoZVMzDxyv QoE83BHs2igM4xLUkQHWqsIt/nrg8cgm14ZwZv8rtOXMDLNlDQE+jF4mQS1eXuvF oEUwwagoP53FMJrOicI0ajfKBEk7t3/S5/eoAIw2g8C08gGZnLvtmfF39kXajfx1 vYnvrf6nZS+uDYdosQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:20 2026 by rpki-client