This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer (raw, json) Hash identifier: V52x8pBI/yTBS42j8+vA02AysrmXs4dttPIGs7tIKRA= Subject key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D9B50003AAF2EA9B0DF277C0F977 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57000 IP: 46.149.96.0/24 IP: 2a10:79c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d9:b5:00:03:aa:f2:ea:9b:0d:f2:77:c0:f9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:7a:e1:fa:bc:3c:c7:a9:e3:1c:0f:bb:12: 9f:ba:a1:6a:c3:41:ea:cc:39:4d:6a:3d:62:e2:5d: 8e:6d:d9:0d:2b:53:c6:93:be:f2:e8:89:ba:90:ec: 96:94:3d:a0:6b:fa:0b:2d:1a:25:01:f9:e7:8e:e3: 45:58:bb:f2:b6:8b:5a:2b:32:3f:bf:c5:4e:de:a6: 6f:eb:32:80:55:57:17:ed:3d:91:e9:a8:ef:1d:07: df:12:c4:2a:2e:4c:6f:e8:46:a8:0d:05:d3:6b:82: 13:55:2a:37:a7:bd:71:3e:f4:24:f3:2b:56:77:b5: 94:e0:25:a0:d6:99:a5:37:0a:3e:c9:6b:ee:b4:d4: 46:ec:d9:4d:a1:22:ba:2e:14:af:a9:da:a5:0d:81: 44:4f:a4:91:48:80:f4:a5:51:05:f0:cd:00:f5:c0: 3f:4e:80:d1:62:90:07:2e:52:60:3e:a9:6c:ae:ad: 09:6f:11:3a:eb:8d:ac:a2:10:a3:c6:eb:35:65:b2: 43:1b:4f:7d:90:3c:5b:d0:14:0e:e4:b5:cc:29:db: 44:b0:cc:04:04:26:78:a6:fc:f7:77:1a:4d:2b:f4: 75:ca:57:27:e0:5e:bd:8e:cc:e0:96:71:43:1d:5c: e8:16:72:a2:a2:21:aa:82:38:e2:96:7c:bc:1a:1e: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.96.0/24 IPv6: 2a10:79c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57000 Signature Algorithm: sha256WithRSAEncryption 28:ca:60:20:02:09:ef:d7:64:37:03:e9:d4:1b:bf:15:a3:90: 04:db:6c:fd:de:ff:a2:fb:0b:16:37:68:96:a5:96:8b:ba:c1: 69:84:f7:59:ce:e0:3d:42:33:e8:06:44:35:55:14:df:d4:63: e7:7e:e5:f5:53:27:0f:e4:3a:3d:fc:05:65:ac:41:31:ce:e0: 56:92:0a:df:58:e0:cb:52:a3:cd:ec:03:ef:ce:56:83:d4:7a: f1:24:b5:d5:ee:ff:1f:89:33:bc:fd:8a:8a:39:62:fd:39:19: bd:8a:21:61:a6:7d:ef:ff:21:2b:fb:d0:fa:a9:65:83:09:49: 75:cd:e9:8e:09:ec:91:b2:04:bd:6c:a8:bb:86:4e:e5:49:73: 54:69:05:e8:17:ad:ef:da:ef:65:d7:c4:f2:47:c4:b0:e6:85: 4d:fb:b0:16:d8:88:22:8e:85:00:18:5a:be:e7:d9:ce:63:17: 49:c0:37:15:66:42:04:ad:fa:94:ec:a3:02:74:97:16:c6:84: 8e:2a:b4:69:c3:82:76:c0:82:0a:27:27:49:39:2b:5d:47:7e: 58:22:2c:95:25:20:7a:67:77:d3:59:3f:7b:79:89:14:b9:f8: c2:1d:c8:37:dd:9c:2d:26:ef:9a:b4:3c:5d:aa:03:9f:a3:fc: 28:bd:9c:69 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xtm1AAOq8uqbDfJ3wPl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODc3NTAwM2Y3ZDllOGU2ZTFlZjQ4ZGIwNjcyOGU2NjhlZDE4N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1J64fq8PMep4xwPuxKfuqFqw0Hq zDlNaj1i4l2ObdkNK1PGk77y6Im6kOyWlD2ga/oLLRolAfnnjuNFWLvytotaKzI/ v8VO3qZv6zKAVVcX7T2R6ajvHQffEsQqLkxv6EaoDQXTa4ITVSo3p71xPvQk8ytW d7WU4CWg1pmlNwo+yWvutNRG7NlNoSK6LhSvqdqlDYFET6SRSID0pVEF8M0A9cA/ ToDRYpAHLlJgPqlsrq0JbxE6642sohCjxus1ZbJDG099kDxb0BQO5LXMKdtEsMwE BCZ4pvz3dxpNK/R1ylcn4F69jszglnFDHVzoFnKioiGqgjjilny8Gh4aGQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIh3UAP32ejm4e9I2wZyjmaO0Ye8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzliOGQz Yi0wYzAzLTQ1OTEtYmQwZi04Nzc1MGQ2Zjc3YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvOWI4ZDNi LTBjMDMtNDU5MS1iZDBmLTg3NzUwZDZmNzdhOC8xL2lIZFFBX2ZaNk9iaDcwamJC bktPWm83Umg3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALpVgMA0EAgACMAcDBQMqEHnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDeqDANBgkqhkiG9w0BAQsFAAOCAQEAKMpgIAIJ79dk NwPp1Bu/FaOQBNts/d7/ovsLFjdolqWWi7rBaYT3Wc7gPUIz6AZENVUU39Rj537l 9VMnD+Q6PfwFZaxBMc7gVpIK31jgy1KjzewD785Wg9R68SS11e7/H4kzvP2Kijli /TkZvYohYaZ97/8hK/vQ+qllgwlJdc3pjgnskbIEvWyou4ZO5UlzVGkF6Bet79rv ZdfE8kfEsOaFTfuwFtiIIo6FABhavufZzmMXScA3FWZCBK36lOyjAnSXFsaEjiq0 acOCdsCCCicnSTkrXUd+WCIslSUgemd301k/e3mJFLn4wh3IN92cLSbvmrQ8XaoD n6P8KL2caQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:08 2026 by rpki-client