This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iAhHmt0p6po2NI6J5dIhVSygh8g.cer File: iAhHmt0p6po2NI6J5dIhVSygh8g.cer (raw, json) Hash identifier: yOjc3j5UdJM9ExXqvMf3eAUUSHiSVn2F9HHu6iW2ddY= Subject key identifier: 88:08:47:9A:DD:29:EA:9A:36:34:8E:89:E5:D2:21:55:2C:A0:87:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC11E5E491DFCED15D039BB56791E26A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8a4f5-de32-499f-8188-02b715ce0048/1/iAhHmt0p6po2NI6J5dIhVSygh8g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8a4f5-de32-499f-8188-02b715ce0048/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 10:05:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16081 IP: 91.194.32.0/23 IP: 185.64.244.0/22 IP: 185.97.88.0/22 IP: 193.108.100.0/23 IP: 194.29.114.0/24 IP: 2a03:1820::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:1e:5e:49:1d:fc:ed:15:d0:39:bb:56:79:1e:26:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 10:05:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8808479add29ea9a36348e89e5d221552ca087c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:47:88:2b:43:a2:ce:16:21:32:f3:08:42: 9e:4f:34:ca:5d:cf:a9:97:e5:73:1c:8b:a6:84:7c: 7e:f3:ca:40:5a:68:bf:5e:2f:6a:3a:3b:3f:22:d0: 8b:19:53:b0:8b:b2:96:a5:42:f5:41:17:4a:3d:f7: 39:00:68:b2:74:10:f2:c3:fc:39:ad:ef:87:82:44: dc:0a:f4:c1:f3:98:d6:59:2c:a8:48:48:75:9c:cc: a0:c4:01:bd:e8:4c:ea:a6:30:b0:1a:93:a3:29:9a: 68:f5:7e:44:8e:95:ca:08:f0:2c:72:88:39:02:d6: 41:5a:cc:c1:a6:57:da:c4:c2:fd:76:72:80:32:6c: db:51:ee:42:16:78:e4:41:3e:55:0f:49:cf:93:17: 1d:3d:ac:af:a7:c7:a6:09:ef:a1:07:bc:dc:ad:55: 9f:52:11:3e:51:da:46:95:6e:02:7e:69:2f:51:c8: 8d:ed:45:63:37:b8:29:ab:b9:bd:74:a0:82:15:aa: 66:e0:74:38:1e:7d:c4:d7:8f:73:3b:a2:af:f1:15: ff:07:26:25:e9:ea:51:ad:d8:b8:3b:17:4d:44:c1: 56:03:5d:35:58:a3:6c:d7:95:29:0c:cd:0b:52:18: 20:1c:90:24:77:4d:5a:8a:bf:1d:f3:36:7f:7e:c3: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:08:47:9A:DD:29:EA:9A:36:34:8E:89:E5:D2:21:55:2C:A0:87:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8a4f5-de32-499f-8188-02b715ce0048/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8a4f5-de32-499f-8188-02b715ce0048/1/iAhHmt0p6po2NI6J5dIhVSygh8g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.32.0/23 185.64.244.0/22 185.97.88.0/22 193.108.100.0/23 194.29.114.0/24 IPv6: 2a03:1820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16081 Signature Algorithm: sha256WithRSAEncryption 73:2e:bb:f5:79:6f:84:5e:3e:29:35:6f:f7:a3:88:ad:3b:28: 5f:86:40:be:43:6f:9f:9d:84:7e:eb:46:ef:af:74:df:7d:db: 3f:57:ac:b0:f4:c3:53:75:12:a4:e7:4e:f6:a8:44:f2:63:90: 6e:46:1b:96:05:a6:8d:3a:6e:52:db:98:97:32:d5:16:82:f2: 31:b6:e2:74:1d:24:1d:40:82:20:8d:e1:48:a6:92:3a:7a:1a: 33:1c:3e:09:e9:73:bf:8e:c2:f2:15:04:47:18:8b:c4:25:54: 29:25:f5:37:c4:55:be:11:31:53:a8:5b:ad:63:5a:fb:88:9d: e9:23:ac:69:1f:fb:74:b6:b0:fa:c2:5b:e3:8f:d6:fd:9d:86: cf:22:08:5e:6b:32:87:d0:20:71:a1:9c:d8:7e:31:e8:d2:a0: 20:16:76:61:f3:5c:92:25:68:37:93:96:45:36:e7:16:3f:03: 9f:47:86:25:22:28:12:40:a8:29:01:07:23:6d:ab:52:6a:7a: be:4f:bc:cd:ab:e6:9b:d1:6f:43:6d:0f:64:42:fc:69:c1:ed: 2f:5f:af:95:06:32:19:08:ab:9d:4e:0f:6b:1e:a8:4a:ad:fc: 18:6b:3a:92:e9:1a:58:68:65:3b:b4:bc:97:ed:55:37:00:06: 83:b3:89:2e -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZvBHl5JHfztFdA5u1Z5HiamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTAwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODA4NDc5YWRkMjllYTlhMzYzNDhlODllNWQyMjE1NTJjYTA4N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JHiCtDos4WITLzCEKeTzTKXc+p l+VzHIumhHx+88pAWmi/Xi9qOjs/ItCLGVOwi7KWpUL1QRdKPfc5AGiydBDyw/w5 re+HgkTcCvTB85jWWSyoSEh1nMygxAG96EzqpjCwGpOjKZpo9X5EjpXKCPAscog5 AtZBWszBplfaxML9dnKAMmzbUe5CFnjkQT5VD0nPkxcdPayvp8emCe+hB7zcrVWf UhE+UdpGlW4CfmkvUciN7UVjN7gpq7m9dKCCFapm4HQ4Hn3E149zO6Kv8RX/ByYl 6epRrdi4OxdNRMFWA101WKNs15UpDM0LUhggHJAkd01air8d8zZ/fsPN9wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFIgIR5rdKeqaNjSOieXSIVUsoIfIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2M4YTRm NS1kZTMyLTQ5OWYtODE4OC0wMmI3MTVjZTAwNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzhhNGY1 LWRlMzItNDk5Zi04MTg4LTAyYjcxNWNlMDA0OC8xL2lBaEhtdDBwNnBvMk5JNko1 ZEloVlN5Z2g4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQBW8IgAwQCuUD0AwQCuWFYAwQBwWxkAwQAwh1y MA0EAgACMAcDBQAqAxggMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj7RMA0GCSqG SIb3DQEBCwUAA4IBAQBzLrv1eW+EXj4pNW/3o4itOyhfhkC+Q2+fnYR+60bvr3Tf fds/V6yw9MNTdRKk5072qETyY5BuRhuWBaaNOm5S25iXMtUWgvIxtuJ0HSQdQIIg jeFIppI6ehozHD4J6XO/jsLyFQRHGIvEJVQpJfU3xFW+ETFTqFutY1r7iJ3pI6xp H/t0trD6wlvjj9b9nYbPIgheazKH0CBxoZzYfjHo0qAgFnZh81ySJWg3k5ZFNucW PwOfR4YlIigSQKgpAQcjbatSanq+T7zNq+ab0W9DbQ9kQvxpwe0vX6+VBjIZCKud Tg9rHqhKrfwYazqS6RpYaGU7tLyX7VU3AAaDs4ku -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:29 2026 by rpki-client