This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer File: fIJLILMxe7jIm-pPDzTQlC0dcU4.cer (raw, json) Hash identifier: kmMeS3wYsZlbSWIORiIa5URlP9pWTMhI7OM6we7Atiw= Subject key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8324B9E3F27B6376429E84F34480 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43963 IP: 91.198.226.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:83:24:b9:e3:f2:7b:63:76:42:9e:84:f3:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:6b:46:57:d2:78:60:36:45:10:83:01:74: 22:ec:5f:4c:f9:83:c2:90:f1:6a:62:2d:0e:8e:9f: 7e:15:72:6b:81:a5:37:66:0d:2e:54:4f:89:67:c1: 71:b4:e2:f4:01:29:87:43:aa:b9:64:56:bc:f7:45: 0d:fd:94:23:d1:bf:74:d2:df:0b:a7:38:9d:eb:38: de:46:b2:9b:74:cc:23:58:f1:d5:6d:00:15:f2:20: 1d:86:f8:47:fe:e4:2c:4a:d9:5a:ac:a5:09:d2:1d: ec:93:fc:03:b5:71:9d:2e:85:f2:fe:02:89:67:a6: ad:5d:57:14:90:23:01:c7:09:78:d9:b3:20:95:c0: 5c:d8:f9:38:0c:6e:0d:68:4b:b2:85:37:8f:05:5d: 76:30:d3:f5:ee:3f:d2:e8:9e:04:4d:b6:4a:88:ab: 6f:3b:26:4b:3e:e8:6b:7a:65:d0:25:a7:ba:ce:e7: 38:a1:21:b4:d3:5d:92:b7:61:af:fb:1b:b7:5d:4f: 06:ad:d2:59:c6:b9:f3:4c:eb:4f:dc:34:27:fb:09: 28:db:41:cd:d7:be:77:74:0f:17:f2:a7:0b:f2:3c: e6:46:dc:74:65:1a:4a:48:5a:7b:cf:17:13:ca:7d: 2e:54:3b:f6:47:13:6e:9a:10:47:cd:ed:06:8d:11: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.226.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43963 Signature Algorithm: sha256WithRSAEncryption 14:61:26:f9:55:b3:c4:71:ab:05:96:b8:6a:bc:e4:06:32:99: c8:36:bd:6d:0c:ee:29:1c:a1:51:96:76:4f:57:b9:33:6c:57: 29:09:90:d5:0b:94:42:bc:ae:a6:86:95:b2:8e:68:97:37:0b: 57:ec:49:f5:0b:a8:ff:49:da:9d:54:26:fc:dd:43:76:5a:73: ea:04:ca:c4:b5:2f:19:08:60:27:7f:a3:1d:36:33:ef:67:46: 40:01:07:c0:2c:a0:ff:c2:63:6d:2c:9b:32:92:97:0a:1c:60: 10:36:08:44:9a:5e:76:bd:8a:1a:b1:4f:92:53:41:f4:94:dd: 06:1b:c1:17:a0:10:80:a9:d1:2a:3e:69:8c:e3:f4:0b:55:bd: f6:79:b5:72:8c:be:59:78:3a:05:a0:ca:48:8b:1e:4b:ef:a1: 7e:7f:3f:51:19:0b:e4:8d:8c:33:0a:c6:46:25:c7:99:9b:8e: 70:a0:b3:12:07:32:a6:03:5a:55:27:47:0b:2d:6f:2a:ea:32: fa:7a:a7:0d:53:8f:e6:60:0a:a6:a8:3c:5d:11:dc:f1:4b:59: 2d:4f:74:d8:89:60:42:c6:44:a2:88:2d:87:a0:04:70:e3:a9: 33:cf:3b:be:6a:cb:53:f6:70:58:f9:fa:03:ef:ca:d1:7f:ff: ec:82:57:3a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt264MkuePye2N2Qp6E80SAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzgyNGIyMGIzMzE3YmI4Yzg5YmVhNGYwZjM0ZDA5NDJkMWQ3MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22NrRlfSeGA2RRCDAXQi7F9M+YPC kPFqYi0Ojp9+FXJrgaU3Zg0uVE+JZ8FxtOL0ASmHQ6q5ZFa890UN/ZQj0b900t8L pzid6zjeRrKbdMwjWPHVbQAV8iAdhvhH/uQsStlarKUJ0h3sk/wDtXGdLoXy/gKJ Z6atXVcUkCMBxwl42bMglcBc2Pk4DG4NaEuyhTePBV12MNP17j/S6J4ETbZKiKtv OyZLPuhremXQJae6zuc4oSG0012St2Gv+xu3XU8GrdJZxrnzTOtP3DQn+wko20HN 1753dA8X8qcL8jzmRtx0ZRpKSFp7zxcTyn0uVDv2RxNumhBHze0GjREbaQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHyCSyCzMXu4yJvqTw800JQtHXFOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzM4MmZk Zi1iNzNjLTQ5NzktODZjNS1lZDQ0OTgxMTUwMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvMzgyZmRm LWI3M2MtNDk3OS04NmM1LWVkNDQ5ODExNTAzMy8xL2ZJSkxJTE14ZTdqSW0tcFBE elRRbEMwZGNVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8biMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCruzANBgkqhkiG9w0BAQsFAAOCAQEAFGEm+VWzxHGrBZa4arzkBjKZyDa9bQzu KRyhUZZ2T1e5M2xXKQmQ1QuUQryupoaVso5olzcLV+xJ9Quo/0nanVQm/N1Ddlpz 6gTKxLUvGQhgJ3+jHTYz72dGQAEHwCyg/8JjbSybMpKXChxgEDYIRJpedr2KGrFP klNB9JTdBhvBF6AQgKnRKj5pjOP0C1W99nm1coy+WXg6BaDKSIseS++hfn8/URkL 5I2MMwrGRiXHmZuOcKCzEgcypgNaVSdHCy1vKuoy+nqnDVOP5mAKpqg8XRHc8UtZ LU902IlgQsZEoogth6AEcOOpM887vmrLU/ZwWPn6A+/K0X//7IJXOg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:20 2026 by rpki-client