This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer (raw, json) Hash identifier: AX2uvmG0ImOlIVw3vGRF4UO8RusE4vWLtQ4WqH+gL5s= Subject key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A25244C1F20EE10E1440C69CE37B19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211924 IP: 89.36.21.0/24 IP: 195.138.53.0/24 IP: 2a14:8c80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:52:44:c1:f2:0e:e1:0e:14:40:c6:9c:e3:7b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=886faf1820074b79b6025ddffab25cb3f774424e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:6d:06:29:df:b2:af:d6:34:76:54:fb:d4: f7:1e:35:8b:b5:1b:f7:b4:44:bb:6e:82:a9:5b:61: 18:d8:12:6c:b2:56:28:19:c8:e4:62:01:7d:06:64: 3e:3b:71:14:2c:92:fc:5c:61:af:a2:ba:71:9b:52: 38:da:e0:e4:9d:8b:cd:0e:d3:ee:32:84:a9:ef:82: a7:8a:b5:07:a5:08:8b:1c:cc:8d:60:8e:eb:17:6a: a5:78:cc:51:1d:1b:95:9b:2e:c8:fa:1f:9d:18:fc: 0d:9b:0b:0a:4b:23:b5:18:55:b5:c8:7d:4e:4d:6c: e7:ae:4f:f7:7c:a8:ec:d1:27:e3:55:95:54:55:cc: ff:33:0e:5a:d1:4e:7c:e1:2d:45:80:7b:f2:8b:d9: be:f1:50:0a:44:e6:b1:9e:e2:9f:e8:69:c3:96:8a: 70:95:23:67:05:fc:07:8e:7e:c1:65:b2:ca:fb:8a: c6:13:f9:b6:77:0c:74:06:64:c6:4b:9a:07:96:a2: fb:fe:e7:43:cf:2f:f3:ef:d4:ae:8f:8b:ea:e0:64: ed:a4:e6:ad:a9:3a:14:47:04:b1:ee:dc:86:7f:de: 93:39:f1:c2:49:43:d4:a5:4b:44:a3:d0:30:0b:25: f5:30:34:bb:4c:a6:91:c4:c8:cd:8d:1a:87:7e:d7: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.21.0/24 195.138.53.0/24 IPv6: 2a14:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211924 Signature Algorithm: sha256WithRSAEncryption 5a:c2:1f:5c:93:d8:b1:fb:04:85:84:1d:de:c2:72:42:7b:00: db:3a:01:a2:ac:9d:a6:f2:ba:8a:bf:bc:fc:8b:c1:21:81:21: f6:1d:ee:89:6d:d2:bd:76:10:85:cf:06:3d:8f:0e:03:c4:40: a7:3d:82:5c:9a:15:fb:d3:7e:e4:14:d1:2f:9b:13:78:20:c0: 80:e9:2e:80:0f:f7:6c:ad:d9:7b:6b:f1:40:1b:15:51:27:92: 21:1b:ca:62:d9:19:de:42:89:b5:07:79:33:73:40:3d:d6:89: 15:c5:b5:69:9c:fa:d4:7b:de:81:5c:e8:83:65:c3:f6:0d:bc: 9f:d8:80:60:07:91:5d:68:eb:c5:2c:99:e8:36:61:8e:02:a6: ee:de:ec:0a:a3:0f:96:cb:6e:30:9f:f1:19:0e:7c:b3:91:93: 95:21:79:34:78:eb:9c:bb:40:33:a8:a3:39:56:24:c2:1b:c7: 23:b1:28:cc:68:94:10:12:22:2f:11:7b:0e:b8:b1:88:2f:d0: 8c:04:47:96:31:9a:16:4e:6b:f0:d3:3e:83:bd:02:a0:56:91: 8d:75:92:a2:85:a2:d5:77:49:06:d7:6b:33:1b:49:64:4e:21: ca:a8:c2:f9:3a:b6:16:0f:7d:10:15:a0:1c:0f:e2:9e:3a:a7: 8c:c3:26:08 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4olJEwfIO4Q4UQMac43sZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODZmYWYxODIwMDc0Yjc5YjYwMjVkZGZmYWIyNWNiM2Y3NzQ0MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIBtBinfsq/WNHZU+9T3HjWLtRv3 tES7boKpW2EY2BJsslYoGcjkYgF9BmQ+O3EULJL8XGGvorpxm1I42uDknYvNDtPu MoSp74KnirUHpQiLHMyNYI7rF2qleMxRHRuVmy7I+h+dGPwNmwsKSyO1GFW1yH1O TWznrk/3fKjs0SfjVZVUVcz/Mw5a0U584S1FgHvyi9m+8VAKROaxnuKf6GnDlopw lSNnBfwHjn7BZbLK+4rGE/m2dwx0BmTGS5oHlqL7/udDzy/z79Suj4vq4GTtpOat qToURwSx7tyGf96TOfHCSUPUpUtEo9AwCyX1MDS7TKaRxMjNjRqHftegowIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIhvrxggB0t5tgJd3/qyXLP3dEJOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzA2ZDBl YS0xOTY3LTRjZmYtOTNiNy1hNThmOGNlYzRiNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMDZkMGVh LTE5NjctNGNmZi05M2I3LWE1OGY4Y2VjNGI1MS8xL2lHLXZHQ0FIUzNtMkFsM2Yt ckpjc19kMFFrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAWSQVAwQAw4o1MA0EAgACMAcDBQAqFIyAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM71DANBgkqhkiG9w0BAQsFAAOCAQEAWsIf XJPYsfsEhYQd3sJyQnsA2zoBoqydpvK6ir+8/IvBIYEh9h3uiW3SvXYQhc8GPY8O A8RApz2CXJoV+9N+5BTRL5sTeCDAgOkugA/3bK3Ze2vxQBsVUSeSIRvKYtkZ3kKJ tQd5M3NAPdaJFcW1aZz61HvegVzog2XD9g28n9iAYAeRXWjrxSyZ6DZhjgKm7t7s CqMPlstuMJ/xGQ58s5GTlSF5NHjrnLtAM6ijOVYkwhvHI7EozGiUEBIiLxF7Drix iC/QjARHljGaFk5r8NM+g70CoFaRjXWSooWi1XdJBtdrMxtJZE4hyqjC+Tq2Fg99 EBWgHA/injqnjMMmCA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:03 2026 by rpki-client