This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer (raw, json) Hash identifier: u9o9UjkEFnSi4TjQqG39D9HBvsNiOt82fRPBo+5JnYY= Subject key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7D5049338C3F3FD1F684682483DF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8542 AS: 30950 IP: 62.97.192.0/18 IP: 82.134.0.0/17 IP: 85.200.0.0/16 IP: 185.58.68.0/22 IP: 185.165.196.0/22 IP: 193.28.236.0/24 IP: 213.153.0.0/19 IP: 2001:67c:324::/48 IP: 2a00:14d8::/29 IP: 2a0a:2200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d5:04:93:38:c3:f3:fd:1f:68:46:82:48:3d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=887e81ba84344598c61462833aadf3204eae087c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:de:7a:8e:4e:ca:52:d5:1c:49:22:19:75: b0:ac:f9:33:41:b4:b6:39:fe:9b:b1:1c:b9:99:f6: d7:9d:39:00:2b:f2:00:83:cd:c3:e6:43:07:38:d4: 89:d3:7f:0d:05:6e:d1:e2:e2:c6:6f:82:c4:d2:cd: ac:f4:c7:31:c0:17:d3:9b:d8:da:7c:5a:ca:ed:d0: 1e:0c:37:8b:fd:68:d6:ba:8a:a9:59:c5:44:ae:44: 6d:13:18:27:88:82:b6:c4:e9:c4:47:b6:7c:e8:18: 8c:e7:1a:68:90:b2:17:68:9b:b4:2c:ad:ad:2a:a0: 65:44:a2:52:7e:7b:67:b5:61:0c:4e:8d:2f:f4:00: 23:c0:fa:ba:a1:85:c0:e8:32:8d:2b:89:81:8a:93: 1d:80:bc:2b:7c:3f:19:f5:f9:3d:53:d1:f3:f5:6b: 03:f1:da:f1:f1:28:89:f5:5e:a0:03:36:d8:ed:3a: 20:d8:f4:46:a3:77:51:8a:67:b9:3e:72:a1:bb:a2: 79:b4:0c:ab:96:2d:5b:99:d4:22:88:2b:3c:96:3c: a8:79:53:af:a2:e8:5e:67:d3:79:1b:a3:25:11:81: b8:7d:f6:8c:7a:80:dd:11:73:0f:f9:42:1a:a8:61: b5:af:79:9d:cb:36:5e:94:79:89:76:3d:bf:10:eb: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.97.192.0/18 82.134.0.0/17 85.200.0.0/16 185.58.68.0/22 185.165.196.0/22 193.28.236.0/24 213.153.0.0/19 IPv6: 2001:67c:324::/48 2a00:14d8::/29 2a0a:2200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8542 30950 Signature Algorithm: sha256WithRSAEncryption 12:9f:d9:86:08:17:a3:4b:ac:89:a3:73:32:33:d4:a9:9a:d4: ec:d7:54:58:cd:c3:cd:0b:f4:b6:37:ac:ea:d8:28:ec:1d:9b: 0e:92:45:de:a8:c5:45:3c:1b:0b:f0:df:79:35:a2:30:a7:f1: 10:db:cc:71:15:d4:3a:48:63:10:cb:6c:30:dc:df:ab:b0:b3: 0b:2b:44:63:3a:df:a6:45:96:8b:16:9a:9e:60:ac:94:1e:5f: ff:6b:09:b1:3f:ab:9e:41:5f:cf:ce:1b:52:73:b5:c1:6e:6e: 52:90:50:2e:a6:c6:e6:b4:b0:d4:d5:e4:71:3f:f1:81:08:bb: 7d:e9:6e:68:18:67:01:11:b9:f4:45:b3:54:bc:f5:79:ee:94: 3f:c4:d6:ea:42:f2:66:fd:fc:7d:4a:2e:8d:e9:4e:6a:65:86: 56:0b:09:1c:22:97:c5:b6:9f:32:83:21:bd:33:0c:67:31:1c: a6:32:56:3a:9c:cd:a7:df:40:99:78:98:aa:3f:82:73:50:74: 20:fd:de:4b:f2:58:48:85:98:5a:03:53:92:fd:7f:39:4c:d7: dc:77:3b:38:40:7a:91:a1:32:06:55:77:43:af:c8:d6:4e:15: 49:81:6f:24:45:a6:57:28:e7:5f:52:cc:a5:73:02:91:d1:bb: 3d:de:b3:7e -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt6x9UEkzjD8/0faEaCSD3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODdlODFiYTg0MzQ0NTk4YzYxNDYyODMzYWFkZjMyMDRlYWUwODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOveeo5OylLVHEkiGXWwrPkzQbS2 Of6bsRy5mfbXnTkAK/IAg83D5kMHONSJ038NBW7R4uLGb4LE0s2s9McxwBfTm9ja fFrK7dAeDDeL/WjWuoqpWcVErkRtExgniIK2xOnER7Z86BiM5xpokLIXaJu0LK2t KqBlRKJSfntntWEMTo0v9AAjwPq6oYXA6DKNK4mBipMdgLwrfD8Z9fk9U9Hz9WsD 8drx8SiJ9V6gAzbY7Tog2PRGo3dRime5PnKhu6J5tAyrli1bmdQiiCs8ljyoeVOv ouheZ9N5G6MlEYG4ffaMeoDdEXMP+UIaqGG1r3mdyzZelHmJdj2/EOsA0QIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFIh+gbqENEWYxhRigzqt8yBOrgh8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2I0NWI0 Ny1jMmZkLTQyYWYtOThiZC1lMDE2MjQwMWZmN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYjQ1YjQ3 LWMyZmQtNDJhZi05OGJkLWUwMTYyNDAxZmY3YS8xL2lINkJ1b1EwUlpqR0ZHS0RP cTN6SUU2dUNIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDAvBAIAATApAwQGPmHAAwQHUoYAAwMAVcgDBAK5OkQDBAK5pcQD BADBHOwDBAXVmQAwHQQCAAIwFwMHACABBnwDJAMFAyoAFNgDBQMqCiIAMB0GCCsG AQUFBwEIAQH/BA4wDKAKMAgCAiFeAgJ45jANBgkqhkiG9w0BAQsFAAOCAQEAEp/Z hggXo0usiaNzMjPUqZrU7NdUWM3DzQv0tjes6tgo7B2bDpJF3qjFRTwbC/DfeTWi MKfxENvMcRXUOkhjEMtsMNzfq7CzCytEYzrfpkWWixaanmCslB5f/2sJsT+rnkFf z84bUnO1wW5uUpBQLqbG5rSw1NXkcT/xgQi7feluaBhnARG59EWzVLz1ee6UP8TW 6kLyZv38fUoujelOamWGVgsJHCKXxbafMoMhvTMMZzEcpjJWOpzNp99AmXiYqj+C c1B0IP3eS/JYSIWYWgNTkv1/OUzX3Hc7OEB6kaEyBlV3Q6/I1k4VSYFvJEWmVyjn X1LMpXMCkdG7Pd6zfg== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:15 2026 by rpki-client