This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer (raw, json) Hash identifier: 0ktG/erebAOw36sg7Dy54X3s614YyyVoH2eSfbh00dY= Subject key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DD1342555FC0E4480AA90C5590CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.215.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:dd:13:42:55:5f:c0:e4:48:0a:a9:0c:55:90:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:48:6d:ea:65:d8:45:a2:fd:9a:f6:71:8e: b8:09:d3:cf:3c:91:5f:be:c1:ad:58:d3:97:28:9c: 8e:96:d8:ec:f6:35:27:3f:c3:3b:a0:28:5f:b5:eb: 3b:29:95:41:98:90:fd:c8:73:83:8e:a2:89:8f:0d: d7:fd:df:e3:22:b6:d6:4b:54:46:19:72:10:8c:86: cf:4d:0d:5f:b0:02:b7:19:e9:3e:9d:4a:e0:c3:e7: 0c:fa:32:c0:2c:de:0d:91:84:f0:18:77:bb:86:6f: 84:a6:c6:28:75:b2:65:30:52:4f:a5:0d:8f:5e:d6: 05:79:f4:b6:72:f8:98:88:7b:77:3b:9e:96:02:c9: 2a:ed:d6:d3:6b:7b:8b:30:30:6b:f7:b5:46:60:dd: f2:1b:89:fc:42:8a:49:22:c6:fa:c9:2c:b5:f5:6a: bb:2b:71:13:ca:f6:81:81:7a:9a:61:a6:0f:3b:24: a3:3a:e4:ac:03:ac:50:39:57:7f:23:bd:a1:1b:81: d4:ca:34:be:47:bc:68:1a:a1:98:d5:2b:96:1d:3b: 85:c6:91:dd:55:41:22:0f:a9:96:0d:d5:d5:92:35: 22:c8:d0:79:19:be:3b:55:ba:08:0f:70:c5:c7:e8: 8f:25:67:66:14:2a:61:9f:a2:79:fe:9c:39:68:ab: 35:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.173.0/24 Signature Algorithm: sha256WithRSAEncryption 76:0a:de:27:9e:bc:8b:1b:6d:ea:da:19:97:dc:07:8d:24:dd: 29:ba:03:91:5c:c0:03:8e:7e:8f:55:28:63:fe:b8:e8:6f:62: 4f:52:14:84:17:0d:40:b5:16:80:fa:12:c4:f6:6d:99:5d:47: c4:de:13:49:54:aa:1a:8a:f2:18:38:56:99:f8:e3:0c:09:84: 6d:d4:c1:60:23:06:84:90:ad:a3:a3:31:ff:1b:24:b8:2f:30: 81:10:0d:7e:37:1c:49:fb:42:5d:97:22:e3:49:80:2a:17:bc: ef:3c:0c:30:e8:8a:92:60:85:ca:40:6c:2d:26:03:08:40:d6: 8d:e5:0b:08:2c:09:ef:57:53:de:07:a6:43:45:02:30:56:7a: 1c:95:61:d0:71:74:b4:e6:a0:67:43:a4:33:75:b1:f1:a7:00: fe:2e:82:66:f0:cd:ed:ca:72:d9:84:cf:29:76:a3:1c:97:b0: b2:c7:3e:f9:17:89:0b:3f:1d:a1:4d:da:90:06:ef:17:0e:bd: 72:b2:be:06:ae:2d:58:2d:66:3d:a7:25:84:ec:d0:e0:00:80: e0:28:8f:8c:c9:15:33:f9:b8:47:13:f9:a2:7c:60:4b:1e:46: 8d:7b:9e:a5:f5:eb:88:d4:dc:03:a8:dd:b9:84:f0:8a:e4:20: 47:31:e7:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8Ed0TQlVfwORICqkMVZDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQ0ZmM0YWUxMDY0OTllMDU3NWZmM2NhMTU1NmRiYzBkOWI0NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ZIbepl2EWi/Zr2cY64CdPPPJFf vsGtWNOXKJyOltjs9jUnP8M7oChftes7KZVBmJD9yHODjqKJjw3X/d/jIrbWS1RG GXIQjIbPTQ1fsAK3Gek+nUrgw+cM+jLALN4NkYTwGHe7hm+EpsYodbJlMFJPpQ2P XtYFefS2cviYiHt3O56WAskq7dbTa3uLMDBr97VGYN3yG4n8QopJIsb6ySy19Wq7 K3ETyvaBgXqaYaYPOySjOuSsA6xQOVd/I72hG4HUyjS+R7xoGqGY1SuWHTuFxpHd VUEiD6mWDdXVkjUiyNB5Gb47VboID3DFx+iPJWdmFCphn6J5/pw5aKs1gwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2RkNDJk OS1mZjg4LTRjYTAtODgzYy0zMTc2NDVjZDc4ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZGQ0MmQ5 LWZmODgtNGNhMC04ODNjLTMxNzY0NWNkNzg4NS8xL2lFVDhTdUVHU1o0RmRmODhv VlZ0dkEyYlJsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAX9etMA0GCSqGSIb3DQEBCwUAA4IBAQB2Ct4n nryLG23q2hmX3AeNJN0pugORXMADjn6PVShj/rjob2JPUhSEFw1AtRaA+hLE9m2Z XUfE3hNJVKoaivIYOFaZ+OMMCYRt1MFgIwaEkK2jozH/GyS4LzCBEA1+NxxJ+0Jd lyLjSYAqF7zvPAww6IqSYIXKQGwtJgMIQNaN5QsILAnvV1PeB6ZDRQIwVnoclWHQ cXS05qBnQ6QzdbHxpwD+LoJm8M3tynLZhM8pdqMcl7Cyxz75F4kLPx2hTdqQBu8X Dr1ysr4Gri1YLWY9pyWE7NDgAIDgKI+MyRUz+bhHE/mifGBLHkaNe56l9euI1NwD qN25hPCK5CBHMeee -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:05 2026 by rpki-client