This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer File: iIFmRjoaMByltuuYvd0H45cJGYY.cer (raw, json) Hash identifier: SfAc6eA9kppAEQMf2CuS5UEAYj8W1iaxJWVPK6oovPE= Subject key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8DA3A5A2E6EEA17FF66786FF21DD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.156.189.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:da:3a:5a:2e:6e:ea:17:ff:66:78:6f:f2:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=888166463a1a301ca5b6eb98bddd07e397091986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:22:f7:2e:9e:c5:a2:c2:03:5e:15:64:38: ef:3a:d5:b7:f3:7e:d4:e9:b5:48:90:8c:a9:3c:cd: ad:64:43:f9:4c:46:11:02:e2:85:af:c7:d3:04:c6: 11:ce:b7:60:ae:4b:61:ed:f8:41:c7:79:22:c9:90: 1e:66:12:96:df:c2:3c:a6:72:c8:33:d6:65:ec:8c: 8e:b0:72:fe:86:d3:30:e8:dd:23:67:f0:a8:ca:f5: b1:d7:7c:40:2a:f5:2f:31:23:03:29:44:a7:bb:71: 95:9b:87:6a:28:d9:9c:2d:8f:7b:0d:57:9c:55:2a: 60:3d:c9:f9:b0:9d:42:94:90:1c:bf:4e:98:fd:6d: 1e:c4:d2:27:ba:35:e8:ed:42:db:95:52:35:3b:c3: 5c:6b:cb:f4:88:e8:b3:62:29:3b:ac:dc:53:aa:b3: 1a:90:9f:2e:5c:b1:45:3f:d9:06:27:dc:78:bc:b0: 2c:05:26:93:41:3b:37:87:fc:c4:58:71:37:07:d6: bc:13:03:b2:90:3b:fb:ec:32:30:14:e2:96:dc:2e: c2:8f:5e:24:04:bc:67:01:9a:ac:67:65:7d:c2:1d: 90:00:70:a9:4b:65:5f:06:fb:9b:4c:ad:45:d5:6a: ba:fe:12:19:b5:a5:d2:75:84:c0:38:13:39:d0:56: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.189.0/24 Signature Algorithm: sha256WithRSAEncryption 08:f5:b5:ce:c0:c5:45:af:56:13:97:fa:24:41:ea:e8:4a:7e: 68:fa:09:82:07:4a:10:06:16:c3:1e:4f:40:ac:7a:a9:43:b6: 81:2c:c1:dd:04:94:15:88:c3:6f:6c:bb:bc:5b:d1:ce:13:d2: 7f:21:ef:25:aa:d4:f2:bf:7d:e9:b8:c4:a8:4c:26:3f:74:6d: f7:6c:77:2a:6e:4a:34:1c:47:04:6e:f1:fe:d5:02:de:aa:29: 88:71:8b:4c:d3:aa:09:ba:f2:ed:51:3e:d7:13:f2:c3:a3:46: 39:96:e0:d8:86:bd:b9:5a:43:7a:eb:23:79:76:d8:c2:ac:43: ed:a3:92:a6:5d:39:1a:41:2f:0e:54:ea:51:43:17:a7:da:28: 51:de:7a:2b:8c:17:ca:f3:69:ad:e1:8f:1e:16:a9:5c:03:4b: 25:8f:72:2b:d3:d8:fa:fe:f8:b0:81:08:dc:76:92:a2:6d:d7: 11:da:a4:ba:a3:f7:91:6c:b6:8c:2f:82:53:02:91:2b:80:95: 18:1e:94:09:14:32:b7:47:ac:57:1c:f6:92:f7:5f:49:9f:64: a4:90:91:95:9b:7e:a5:26:a0:fa:36:2e:04:a3:65:91:e2:c1: 56:8d:6a:54:58:b6:2a:de:9d:fd:ef:5e:43:58:b7:da:07:8a: 2b:9c:e5:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yNo6Wi5u6hf/Znhv8h3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODgxNjY0NjNhMWEzMDFjYTViNmViOThiZGRkMDdlMzk3MDkxOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+0i9y6exaLCA14VZDjvOtW3837U 6bVIkIypPM2tZEP5TEYRAuKFr8fTBMYRzrdgrkth7fhBx3kiyZAeZhKW38I8pnLI M9Zl7IyOsHL+htMw6N0jZ/CoyvWx13xAKvUvMSMDKUSnu3GVm4dqKNmcLY97DVec VSpgPcn5sJ1ClJAcv06Y/W0exNInujXo7ULblVI1O8Nca8v0iOizYik7rNxTqrMa kJ8uXLFFP9kGJ9x4vLAsBSaTQTs3h/zEWHE3B9a8EwOykDv77DIwFOKW3C7Cj14k BLxnAZqsZ2V9wh2QAHCpS2VfBvubTK1F1Wq6/hIZtaXSdYTAOBM50FYIkQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIiBZkY6GjAcpbbrmL3dB+OXCRmGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzQ3NmZk MC1iOGE2LTQ2MWYtYjRjNS0zOGMyYzJhNzljMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvNDc2ZmQw LWI4YTYtNDYxZi1iNGM1LTM4YzJjMmE3OWMzNS8xL2lJRm1Sam9hTUJ5bHR1dVl2 ZDBINDVjSkdZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwpy9MA0GCSqGSIb3DQEBCwUAA4IBAQAI9bXO wMVFr1YTl/okQeroSn5o+gmCB0oQBhbDHk9ArHqpQ7aBLMHdBJQViMNvbLu8W9HO E9J/Ie8lqtTyv33puMSoTCY/dG33bHcqbko0HEcEbvH+1QLeqimIcYtM06oJuvLt UT7XE/LDo0Y5luDYhr25WkN66yN5dtjCrEPto5KmXTkaQS8OVOpRQxen2ihR3nor jBfK82mt4Y8eFqlcA0slj3Ir09j6/viwgQjcdpKibdcR2qS6o/eRbLaML4JTApEr gJUYHpQJFDK3R6xXHPaS919Jn2SkkJGVm36lJqD6Ni4Eo2WR4sFWjWpUWLYq3p39 715DWLfaB4ornOVo -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:39 2026 by rpki-client