This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer File: i0I-HXKxAwcL7VecQFl-0guEwW4.cer (raw, json) Hash identifier: KUKANtUn5edQ3ckYWExm4SKfKQwqxUPSy1FFGEE9K/Q= Subject key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D88DE7D6047402F835AC32BB0D71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214904 IP: 185.116.148.0/22 IP: 2a06:7f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d8:8d:e7:d6:04:74:02:f8:35:ac:32:bb:0d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b423e1d72b103070bed579c40597ed20b84c16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:30:48:00:b1:1b:7e:f9:39:39:85:ac:1e: 68:c3:b2:c0:0d:25:b2:2c:56:f2:58:64:2c:73:e4: 4f:70:a7:0c:7f:d1:7e:62:c6:38:c8:1a:98:d3:1d: c5:77:2a:d1:15:dc:b4:83:21:b1:b6:69:bc:ef:eb: 7e:2f:31:c9:16:34:b3:55:c5:aa:4a:2c:3d:8a:ae: 4a:f6:e1:0b:ef:43:9b:00:0e:ea:a3:17:29:ee:40: 07:d8:76:85:40:f7:a7:3a:ab:fa:61:4c:be:c7:d2: fd:e5:11:fe:87:b3:9d:36:94:4a:8e:c2:41:44:37: f5:47:34:35:17:c7:3b:4b:77:50:1c:e1:8f:35:c9: 97:c6:12:92:77:6b:bb:aa:78:d8:46:79:de:f9:ab: 67:3e:a1:54:b3:3d:6a:87:0e:5a:d3:d7:a2:57:95: 9e:f1:1c:1c:a3:3e:aa:a7:6d:1a:f4:b1:41:2a:27: 2f:8d:2b:16:c6:70:d1:52:1d:61:8f:fd:fc:d3:73: f5:a6:a4:20:20:8c:18:1e:b0:66:e5:29:48:0b:61: 4c:c5:da:33:1e:a0:74:2f:e9:6f:e0:f1:eb:b0:37: 73:1d:71:6e:68:fb:b7:c9:9b:f5:c1:14:4e:7a:e0: 64:01:8c:b0:71:e9:13:7c:1c:e3:5e:fd:2e:18:7b: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.148.0/22 IPv6: 2a06:7f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214904 Signature Algorithm: sha256WithRSAEncryption 0e:e6:76:cd:52:ec:c2:45:98:dd:36:b0:63:a2:cf:30:b8:11: 61:68:ab:8e:18:2f:8b:85:ce:70:8a:45:e7:a4:a0:72:56:02: c8:0a:4e:8f:98:27:49:e2:70:33:17:2e:7c:ac:eb:01:d7:89: ef:45:d6:a6:04:ed:97:df:c8:a4:29:a8:e5:13:92:dc:5d:f5: 21:98:4a:95:93:7d:a0:6e:52:72:2c:46:fa:aa:fd:c4:b3:93: 1e:c7:57:cc:7c:5e:44:ce:5c:c5:3b:56:cc:c5:be:d8:7f:50: 07:10:78:35:f9:53:d7:a4:e1:1d:95:9c:b3:d4:c9:d6:0e:4e: 4c:f2:e5:da:40:0e:eb:78:94:b6:28:f5:ad:c3:57:c1:31:aa: c7:bb:c4:90:3e:e2:73:b6:3c:ee:7c:81:58:11:c0:c3:a7:31: 70:05:e0:3a:bf:56:87:51:5e:af:60:95:49:b8:43:10:c7:bc: 02:51:73:56:15:50:0f:14:41:ca:ae:23:a8:7a:6b:9d:c6:2d: cf:f1:f2:77:e8:d7:7b:8c:12:77:b4:d8:e6:92:0c:33:84:9f: 84:d5:b5:03:c2:8a:20:01:75:ad:1d:53:7e:19:a7:0b:51:af: 77:0a:2a:ad:66:9c:83:c6:dc:dd:53:78:d9:60:9d:01:54:7e: ba:47:93:b0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ENiN59YEdAL4Nawyuw1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQyM2UxZDcyYjEwMzA3MGJlZDU3OWM0MDU5N2VkMjBiODRjMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF8wSACxG375OTmFrB5ow7LADSWy LFbyWGQsc+RPcKcMf9F+YsY4yBqY0x3FdyrRFdy0gyGxtmm87+t+LzHJFjSzVcWq Siw9iq5K9uEL70ObAA7qoxcp7kAH2HaFQPenOqv6YUy+x9L95RH+h7OdNpRKjsJB RDf1RzQ1F8c7S3dQHOGPNcmXxhKSd2u7qnjYRnne+atnPqFUsz1qhw5a09eiV5We 8Rwcoz6qp20a9LFBKicvjSsWxnDRUh1hj/3803P1pqQgIIwYHrBm5SlIC2FMxdoz HqB0L+lv4PHrsDdzHXFuaPu3yZv1wRROeuBkAYywcekTfBzjXv0uGHv4RQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFItCPh1ysQMHC+1XnEBZftILhMFuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzY3NThh MC0zYmIyLTQ3NWUtYTliOC1iOTA5ZWQyMDJiNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvNjc1OGEw LTNiYjItNDc1ZS1hOWI4LWI5MDllZDIwMmI2NC8xL2kwSS1IWEt4QXdjTDdWZWNR RmwtMGd1RXdXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXSUMA0EAgACMAcDBQMqBn8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHeDANBgkqhkiG9w0BAQsFAAOCAQEADuZ2zVLswkWY 3TawY6LPMLgRYWirjhgvi4XOcIpF56SgclYCyApOj5gnSeJwMxcufKzrAdeJ70XW pgTtl9/IpCmo5ROS3F31IZhKlZN9oG5ScixG+qr9xLOTHsdXzHxeRM5cxTtWzMW+ 2H9QBxB4NflT16ThHZWcs9TJ1g5OTPLl2kAO63iUtij1rcNXwTGqx7vEkD7ic7Y8 7nyBWBHAw6cxcAXgOr9Wh1Fer2CVSbhDEMe8AlFzVhVQDxRByq4jqHprncYtz/Hy d+jXe4wSd7TY5pIMM4SfhNW1A8KKIAF1rR1TfhmnC1GvdwoqrWacg8bc3VN42WCd AVR+ukeTsA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:34 2026 by rpki-client