This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer File: iF5uZejXQYIDljRWbNH6KysyVwI.cer (raw, json) Hash identifier: cVY+aK702SHC7ImRtAzrMsjPPGvIEDRDpkFC+f+zLMQ= Subject key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910A5990BCB3B25315E22134E070EBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42638 IP: 91.189.200.0/21 IP: 193.104.83.0/24 IP: 2a14:bb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:99:0b:cb:3b:25:31:5e:22:13:4e:07:0e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=885e6e65e8d74182039634566cd1fa2b2b325702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:82:7d:f4:10:d7:57:d0:1f:fe:af:40:38: c6:df:ee:d1:c9:92:7c:c5:3e:e9:12:dc:46:2d:cc: 9c:0b:89:67:41:77:17:77:7f:3a:82:61:2f:9f:18: ab:6d:33:3a:ce:56:fe:92:f2:5a:f2:68:16:5a:ba: ec:d9:70:76:bc:26:9c:3a:43:d8:72:4a:83:79:64: 12:69:45:fe:5b:31:82:a3:ab:68:7b:c8:d0:5c:b3: 03:a4:7c:92:89:d9:a0:9b:06:3a:c2:45:77:16:88: 4c:2f:d1:ae:56:7d:4a:88:6f:c8:00:8e:79:d0:a4: 48:e5:87:67:c1:49:20:9e:5b:6e:cc:ac:01:5c:81: 5d:bb:7a:c5:3e:5f:48:a9:cd:eb:a6:c3:0f:be:26: 67:f9:1d:e1:0c:11:8b:3f:e4:a8:ec:77:8c:18:ae: c9:77:2f:05:3c:f1:a0:65:23:d3:4f:ce:1e:49:8b: 20:1b:73:c4:35:df:65:32:9a:fd:38:cd:42:18:b9: e5:a2:09:2b:0e:14:eb:02:77:db:f9:a5:ab:bf:a8: b8:18:bf:b8:39:e7:49:fb:5b:47:cc:0a:24:f9:50: c3:03:07:c6:a2:46:16:cb:bd:6a:58:70:29:90:14: b0:85:7b:07:57:f6:eb:82:e7:94:54:50:85:52:e2: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.200.0/21 193.104.83.0/24 IPv6: 2a14:bb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42638 Signature Algorithm: sha256WithRSAEncryption 35:d9:ef:fd:81:ed:ed:4f:dd:86:58:c5:7a:b3:8f:5e:40:aa: 07:b5:ea:d5:5d:ef:26:27:69:01:5a:29:37:2f:18:86:a9:ba: 9a:d4:0b:37:10:a7:39:9c:49:d7:64:e9:84:70:0d:97:4e:49: 9f:45:30:e6:4a:49:04:73:86:86:88:45:a1:df:6f:ea:ed:74: b3:4c:1f:47:8d:ea:03:fb:66:82:1e:48:de:87:e0:53:5f:e9: 75:33:2c:b7:9f:83:11:1b:f3:a6:f3:d8:6c:12:c1:4f:c8:3d: 01:5d:cf:aa:bd:16:5b:13:9b:d3:3c:01:4d:07:26:85:84:19: b6:14:69:73:c5:0d:dd:c9:40:04:ba:06:f2:69:7f:3d:74:4e: 0a:17:9d:3f:87:1f:cd:9f:83:b3:1f:97:df:46:04:79:b1:c2: 04:86:7b:f7:b4:b6:61:0e:d2:fb:3e:12:df:3f:95:47:19:96: c1:e8:96:41:b5:f5:ca:cf:96:7f:bf:a9:36:90:26:f5:4b:af: 9f:61:e5:da:5e:17:fb:db:73:1e:9a:de:3f:6c:07:13:ee:27: b5:bc:5e:30:48:a6:9c:7a:28:e4:83:08:6a:e1:f6:1b:93:a9: f7:98:b0:5c:6b:52:c3:98:c3:9a:9c:7a:08:2a:32:ec:b8:78: 21:ed:5a:4f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EKWZC8s7JTFeIhNOBw69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODVlNmU2NWU4ZDc0MTgyMDM5NjM0NTY2Y2QxZmEyYjJiMzI1NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsauCffQQ11fQH/6vQDjG3+7RyZJ8 xT7pEtxGLcycC4lnQXcXd386gmEvnxirbTM6zlb+kvJa8mgWWrrs2XB2vCacOkPY ckqDeWQSaUX+WzGCo6toe8jQXLMDpHySidmgmwY6wkV3FohML9GuVn1KiG/IAI55 0KRI5YdnwUkgnltuzKwBXIFdu3rFPl9Iqc3rpsMPviZn+R3hDBGLP+So7HeMGK7J dy8FPPGgZSPTT84eSYsgG3PENd9lMpr9OM1CGLnlogkrDhTrAnfb+aWrv6i4GL+4 OedJ+1tHzAok+VDDAwfGokYWy71qWHApkBSwhXsHV/brgueUVFCFUuI/dwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIhebmXo10GCA5Y0VmzR+isrMlcCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2I1ZTQz OC1lMjkyLTRkMjItYTkwZS1jZWViZGZkZTAxZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvYjVlNDM4 LWUyOTItNGQyMi1hOTBlLWNlZWJkZmRlMDFmYy8xL2lGNXVaZWpYUVlJRGxqUldi Tkg2S3lzeVZ3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDW73IAwQAwWhTMA0EAgACMAcDBQMqFLsAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmjjANBgkqhkiG9w0BAQsFAAOCAQEANdnv /YHt7U/dhljFerOPXkCqB7Xq1V3vJidpAVopNy8Yhqm6mtQLNxCnOZxJ12TphHAN l05Jn0Uw5kpJBHOGhohFod9v6u10s0wfR43qA/tmgh5I3ofgU1/pdTMst5+DERvz pvPYbBLBT8g9AV3Pqr0WWxOb0zwBTQcmhYQZthRpc8UN3clABLoG8ml/PXROChed P4cfzZ+Dsx+X30YEebHCBIZ797S2YQ7S+z4S3z+VRxmWweiWQbX1ys+Wf7+pNpAm 9Uuvn2Hl2l4X+9tzHpreP2wHE+4ntbxeMEimnHoo5IMIauH2G5Op95iwXGtSw5jD mpx6CCoy7Lh4Ie1aTw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:56 2026 by rpki-client