This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer (raw, json) Hash identifier: /GhYKiYE9ya7DSq8d4Xb2KYMzhvbRDDRpIolIIQnjL4= Subject key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7FAD4A289369F898C0ECE588D55B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203065 IP: 185.254.34.0/24 IP: 199.4.158.0/24 IP: 2a13:b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fa:d4:a2:89:36:9f:89:8c:0e:ce:58:8d:55:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:93:4d:3d:df:2e:c7:70:39:e3:5e:4c:5d: 90:98:ec:ab:e7:e7:6a:b9:0f:ca:f9:b4:a0:a1:b5: b2:f8:c0:ee:96:3a:44:3f:7a:1c:e5:aa:7c:2e:d7: 1a:a6:f4:7e:be:cf:09:11:4e:de:71:a4:25:02:84: 08:52:da:a8:9a:5c:3f:3c:4e:1b:42:8a:ba:df:2c: c8:2e:d7:e0:d0:2b:76:5d:ab:3c:e7:d1:93:17:09: 75:75:f0:86:78:13:03:33:4c:14:e9:82:85:32:63: fb:bb:b1:7a:46:6e:2c:7d:5c:fa:05:3f:ec:27:6b: f4:b8:0f:3d:25:0c:1c:bb:f3:7b:50:b7:76:6b:a6: d2:49:fe:fd:a3:6c:01:33:61:65:d1:e5:fe:9b:ed: db:4c:aa:e1:e8:24:67:03:e1:fb:03:37:d5:01:4b: 3f:ea:0b:79:5e:e3:5a:8c:c8:aa:ea:fd:9a:9e:7e: 63:38:e1:2c:a1:5e:4e:98:05:ae:21:ca:8b:bf:e4: bd:7e:ba:fe:9c:58:1c:0a:16:e6:5c:a6:fb:00:b0: 25:5b:58:95:84:22:33:d7:09:bc:89:8a:68:1b:a5: a2:3d:5e:0e:c8:93:d1:1a:34:13:d9:8c:ce:c5:2e: f2:7a:5c:91:01:d4:75:92:da:dd:b3:9c:23:59:1f: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.34.0/24 199.4.158.0/24 IPv6: 2a13:b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203065 Signature Algorithm: sha256WithRSAEncryption 44:8c:0f:15:7b:a3:11:dd:a5:59:99:a0:51:98:5b:58:b5:48: 0a:a5:9f:f2:80:55:4d:fd:dd:1c:0c:45:9e:e7:bf:02:03:14: ca:57:cf:1b:f6:ee:af:5a:24:98:4b:0d:78:4d:5f:05:1b:b6: 20:13:72:70:b0:f0:f4:24:e5:14:bd:f4:36:50:fd:36:79:4d: 91:f1:69:de:c6:c9:73:54:78:8c:1b:a6:2f:02:b8:a7:93:ce: 67:6b:5d:e9:5c:11:7a:13:1c:e0:fb:7b:4b:de:a6:5c:f5:81: 1d:89:5c:c6:a4:3f:2e:93:36:94:38:e3:f4:73:98:e6:79:e2: d7:ca:cb:11:a7:d5:f7:6b:b7:d2:c7:d3:27:d6:bb:32:e4:d5: 3c:35:62:25:4a:91:00:46:41:e4:8e:fe:ab:9d:ce:75:b7:54: 22:6a:33:ef:5c:54:9d:ab:15:9b:f0:64:f1:79:93:c7:3c:d9: e5:8f:c3:54:be:ea:dc:6b:e5:e7:99:04:c4:10:d6:dc:5b:9f: 4a:a4:50:df:f4:c8:23:52:b0:76:3d:df:5f:f9:43:0b:e3:92: ac:4f:a8:e8:ec:31:ce:dc:3b:98:d7:ae:6e:e8:5d:00:81:f1: e7:72:9f:91:25:74:83:0e:c4:a3:be:7d:4f:6b:74:20:3b:1c: 9c:8f:77:00 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6x/rUook2n4mMDs5YjVWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmUwYmUyMGUwMmZmYzczNTRkNWIyZDMzZTBmZTc3MTUxOWFmZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnieTTT3fLsdwOeNeTF2QmOyr5+dq uQ/K+bSgobWy+MDuljpEP3oc5ap8LtcapvR+vs8JEU7ecaQlAoQIUtqomlw/PE4b Qoq63yzILtfg0Ct2Xas859GTFwl1dfCGeBMDM0wU6YKFMmP7u7F6Rm4sfVz6BT/s J2v0uA89JQwcu/N7ULd2a6bSSf79o2wBM2Fl0eX+m+3bTKrh6CRnA+H7AzfVAUs/ 6gt5XuNajMiq6v2ann5jOOEsoV5OmAWuIcqLv+S9frr+nFgcChbmXKb7ALAlW1iV hCIz1wm8iYpoG6WiPV4OyJPRGjQT2YzOxS7yelyRAdR1ktrds5wjWR/+LQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF/gviDgL/xzVNWy0z4P53FRmv0fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzk4MWI4 NC05ZmYwLTQ4ZTktYWIyMS05YjZjYmZiNDMyNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvOTgxYjg0 LTlmZjAtNDhlOS1hYjIxLTliNmNiZmI0MzI0Ni8xL1gtQy1JT0F2X0hOVTFiTFRQ Z19uY1ZHYV9SOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuf4iAwQAxwSeMA0EAgACMAcDBQMqEwuAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZOTANBgkqhkiG9w0BAQsFAAOCAQEARIwP FXujEd2lWZmgUZhbWLVICqWf8oBVTf3dHAxFnue/AgMUylfPG/bur1okmEsNeE1f BRu2IBNycLDw9CTlFL30NlD9NnlNkfFp3sbJc1R4jBumLwK4p5POZ2td6VwRehMc 4Pt7S96mXPWBHYlcxqQ/LpM2lDjj9HOY5nni18rLEafV92u30sfTJ9a7MuTVPDVi JUqRAEZB5I7+q53OdbdUImoz71xUnasVm/Bk8XmTxzzZ5Y/DVL7q3Gvl55kExBDW 3FufSqRQ3/TII1Kwdj3fX/lDC+OSrE+o6Owxztw7mNeubuhdAIHx53KfkSV0gw7E o759T2t0IDscnI93AA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:20 2026 by rpki-client