This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer File: i0LHUqmwmDEos9KV5F6hazPuffk.cer (raw, json) Hash identifier: pHPOv785TnXlY0qZ/nz8OTIBbh5ipJJqOrvscQedS84= Subject key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA68A8A24BB50296C913333D2C31C08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41295 IP: 194.24.178.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8a:8a:24:bb:50:29:6c:91:33:33:d2:c3:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:a6:50:c7:c5:c9:ff:c2:9b:8c:c6:de:73: d1:b2:a0:e2:6f:8d:8b:01:e1:e3:83:33:22:07:ff: 7b:91:63:16:85:93:79:83:4a:fe:4c:00:32:2f:2f: a2:af:c9:be:1b:92:73:1c:9c:1c:79:ee:fe:a8:fd: c2:c3:84:58:c6:b0:3d:a3:e8:a4:46:89:3d:5a:38: 27:25:fa:e6:0b:37:57:0f:5b:b7:0e:dd:0c:c0:db: 85:47:cc:23:3a:35:f8:08:dc:e8:be:65:52:d3:36: 76:d5:3c:a5:6e:86:f8:04:c5:68:e2:84:16:b3:16: fd:f1:71:06:59:3f:2c:2a:50:21:0e:5b:d6:b6:f0: 44:db:b1:0e:73:58:6f:72:10:c8:67:d5:73:20:3e: cb:86:e7:3e:59:4d:11:8f:6c:1d:e7:e7:87:65:d1: 04:be:93:98:a7:f2:93:c3:2a:de:e4:94:15:72:79: 8f:7a:51:2d:c0:52:ea:ce:3b:51:2c:b1:95:f3:50: db:9a:f7:d0:34:44:de:06:e4:bb:94:30:99:1f:6f: 28:6d:94:8d:65:db:38:ee:1f:4f:48:ef:0c:6e:43: a8:7c:a6:e7:ba:2c:98:1f:e6:de:1a:a7:6f:ae:85: 89:84:1e:0a:34:4c:3d:79:0b:3c:c3:95:26:1a:eb: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.178.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41295 Signature Algorithm: sha256WithRSAEncryption 7d:00:be:4e:48:a3:b2:24:7a:73:68:0f:54:d1:1c:52:b8:99: 2a:3a:14:10:35:ba:b1:60:9d:df:fd:6d:f7:f0:1e:be:ed:7e: 7e:04:c4:7f:63:b2:49:28:6c:dd:96:9b:a8:5c:47:7a:e3:ce: c2:a7:80:d8:32:d4:4f:6a:d9:02:67:81:bc:a5:59:e3:3d:5f: 46:ff:1d:73:e5:4a:48:1b:d6:c7:55:b4:37:d2:9b:64:6b:75: 57:af:c8:d1:93:84:3b:2c:2f:6c:d0:59:fd:b6:ff:c1:ad:20: 5c:98:56:21:6a:1c:49:4a:64:de:e1:ea:fb:4e:79:d0:a6:b4: 9e:1b:39:40:29:77:dc:78:44:87:2b:fa:1a:e3:0d:ed:92:e8: 0c:31:36:97:92:75:26:23:3d:99:1e:af:22:6a:43:75:3e:15: 98:4a:e7:8f:38:08:13:aa:9b:02:c1:41:eb:43:a3:72:5a:77: 67:27:39:3c:8a:c6:ed:7e:58:31:0d:bf:fb:98:bb:7c:c8:75: 10:2d:9d:fb:c0:3d:20:e0:48:d2:8e:fd:5f:7a:12:d8:f1:cd: fe:35:d6:e3:33:d8:12:8e:10:b3:62:eb:87:12:11:11:e1:45: f4:5b:d3:da:5c:fe:21:07:ef:ed:ae:37:74:0e:f7:e4:df:5c: d7:a8:11:a8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+poqKJLtQKWyRMzPSwxwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQyYzc1MmE5YjA5ODMxMjhiM2QyOTVlNDVlYTE2YjMzZWU3ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSCmUMfFyf/Cm4zG3nPRsqDib42L AeHjgzMiB/97kWMWhZN5g0r+TAAyLy+ir8m+G5JzHJwcee7+qP3Cw4RYxrA9o+ik Rok9WjgnJfrmCzdXD1u3Dt0MwNuFR8wjOjX4CNzovmVS0zZ21Tylbob4BMVo4oQW sxb98XEGWT8sKlAhDlvWtvBE27EOc1hvchDIZ9VzID7Lhuc+WU0Rj2wd5+eHZdEE vpOYp/KTwyre5JQVcnmPelEtwFLqzjtRLLGV81DbmvfQNETeBuS7lDCZH28obZSN Zds47h9PSO8MbkOofKbnuiyYH+beGqdvroWJhB4KNEw9eQs8w5UmGusmYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFItCx1KpsJgxKLPSleReoWsz7n35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2RiZTQ0 Ni05ZGEzLTQ4NTQtYjVkMy0yNWEzOGEyNDZmYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZGJlNDQ2 LTlkYTMtNDg1NC1iNWQzLTI1YTM4YTI0NmZhMi8xL2kwTEhVcW13bURFb3M5S1Y1 RjZoYXpQdWZmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwhiyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwChTzANBgkqhkiG9w0BAQsFAAOCAQEAfQC+TkijsiR6c2gPVNEcUriZKjoUEDW6 sWCd3/1t9/Aevu1+fgTEf2OySShs3ZabqFxHeuPOwqeA2DLUT2rZAmeBvKVZ4z1f Rv8dc+VKSBvWx1W0N9KbZGt1V6/I0ZOEOywvbNBZ/bb/wa0gXJhWIWocSUpk3uHq +0550Ka0nhs5QCl33HhEhyv6GuMN7ZLoDDE2l5J1JiM9mR6vImpDdT4VmErnjzgI E6qbAsFB60Ojclp3Zyc5PIrG7X5YMQ2/+5i7fMh1EC2d+8A9IOBI0o79X3oS2PHN /jXW4zPYEo4Qs2LrhxIREeFF9FvT2lz+IQfv7a43dA735N9c16gRqA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:24 2026 by rpki-client