This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer File: iIx7lGQtLku_uVg62UH1HrjEVkA.cer (raw, json) Hash identifier: 7C7wVaouqqu85x43l8GycRDXe6c/iook6KAQeTk/hA0= Subject key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E20DB98E52F12E13BC707046E63E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197679 IP: 91.224.238.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e2:0d:b9:8e:52:f1:2e:13:bc:70:70:46:e6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fc:00:6b:f3:4e:63:67:8c:fb:ee:7d:da:e8: 31:0c:61:48:e2:f1:5c:e5:6d:9e:29:57:50:53:b5: 60:00:76:7a:ea:dc:2a:65:c4:d1:20:6a:ae:0d:86: ed:2a:26:a8:07:34:ab:f6:cf:27:c3:cb:26:bf:54: 54:63:10:7c:76:88:f0:d7:05:6c:5f:4e:a0:2f:b8: 5d:08:df:81:e5:3e:49:b2:44:b6:a0:f9:10:55:60: e5:4e:c4:c5:24:73:cb:99:12:cf:4f:4f:74:22:f3: 8f:d2:30:3d:56:36:da:e5:0a:ee:44:da:f8:2c:61: 83:89:25:68:4e:33:63:89:e5:e1:8f:1d:c6:13:65: ea:05:44:9b:08:65:9a:a2:52:cd:21:93:83:37:95: a3:c3:6a:f4:8b:47:6a:bb:20:bb:9c:97:0d:3e:fb: ca:9d:f9:ec:cd:68:4e:71:36:f8:52:a1:c3:40:30: f2:a8:bd:0a:be:85:9d:ac:51:62:24:10:36:9e:98: b0:a0:ad:d7:4f:76:43:fc:14:00:cf:7a:84:7d:91: 58:43:37:c6:81:44:4b:bc:f8:9f:ae:9f:dc:d5:63: a3:00:4c:5a:11:5a:05:3c:0e:04:50:6d:4f:f6:2b: 08:de:b5:d1:7e:1c:ab:9e:1a:23:c9:4d:d7:8c:bc: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.238.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197679 Signature Algorithm: sha256WithRSAEncryption 19:1a:13:14:c8:c5:86:f0:fe:9e:6a:6c:fa:ac:a2:db:b3:cf: 36:f1:ef:1a:e5:96:46:c5:d4:de:e9:97:a1:f7:0e:d4:64:85: 03:9c:3b:74:a5:6e:e6:f9:11:22:8c:5a:d1:81:ab:be:e9:ac: ac:45:96:35:9f:1f:76:1a:a7:ff:e9:87:aa:a5:64:30:a6:83: a5:99:f8:a2:81:c2:fc:3c:f9:48:c3:c2:cd:99:bd:55:3e:87: c7:e4:c6:3a:2c:32:01:4d:03:36:4f:d0:6f:a3:1f:8d:55:ce: 35:ff:93:38:8b:03:bf:0e:7c:60:0d:73:b0:83:c2:de:3a:95: 49:c4:58:03:92:50:26:83:e3:ba:6a:8d:ee:e7:0f:1c:05:09: 4a:08:5a:62:6c:79:97:20:74:71:bb:15:20:ba:0f:5c:c2:68: f9:73:67:a1:58:d8:96:4a:dd:64:53:4e:fa:e2:eb:7a:ca:39: a6:7a:a0:0a:81:05:13:31:3a:4a:bd:de:a5:6a:0b:21:79:21: 4b:b4:8f:a9:d5:43:fe:a6:00:0d:fb:9e:46:0a:a4:2c:38:79: a5:49:66:7c:d9:0e:27:69:7d:65:79:ab:fa:fb:b2:e9:06:36: 31:4c:4d:bc:b6:28:90:2d:64:99:a6:20:90:45:41:9e:93:d5: ea:d6:f9:27 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EOINuY5S8S4TvHBwRuY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODhjN2I5NDY0MmQyZTRiYmZiOTU4M2FkOTQxZjUxZWI4YzQ1NjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fwAa/NOY2eM++592ugxDGFI4vFc 5W2eKVdQU7VgAHZ66twqZcTRIGquDYbtKiaoBzSr9s8nw8smv1RUYxB8dojw1wVs X06gL7hdCN+B5T5JskS2oPkQVWDlTsTFJHPLmRLPT090IvOP0jA9Vjba5QruRNr4 LGGDiSVoTjNjieXhjx3GE2XqBUSbCGWaolLNIZODN5Wjw2r0i0dquyC7nJcNPvvK nfnszWhOcTb4UqHDQDDyqL0KvoWdrFFiJBA2npiwoK3XT3ZD/BQAz3qEfZFYQzfG gURLvPifrp/c1WOjAExaEVoFPA4EUG1P9isI3rXRfhyrnhojyU3XjLy8OQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIiMe5RkLS5Lv7lYOtlB9R64xFZAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2NjYmY3 YS1lYzM4LTQ0ZTYtYjJlYi03MTg3OTc3ZTA1N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvY2NiZjdh LWVjMzgtNDRlNi1iMmViLTcxODc5NzdlMDU3ZS8xL2lJeDdsR1F0TGt1X3VWZzYy VUgxSHJqRVZrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+DuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMELzANBgkqhkiG9w0BAQsFAAOCAQEAGRoTFMjFhvD+nmps+qyi27PPNvHvGuWW RsXU3umXofcO1GSFA5w7dKVu5vkRIoxa0YGrvumsrEWWNZ8fdhqn/+mHqqVkMKaD pZn4ooHC/Dz5SMPCzZm9VT6Hx+TGOiwyAU0DNk/Qb6MfjVXONf+TOIsDvw58YA1z sIPC3jqVScRYA5JQJoPjumqN7ucPHAUJSghaYmx5lyB0cbsVILoPXMJo+XNnoVjY lkrdZFNO+uLreso5pnqgCoEFEzE6Sr3epWoLIXkhS7SPqdVD/qYADfueRgqkLDh5 pUlmfNkOJ2l9ZXmr+vuy6QY2MUxNvLYokC1kmaYgkEVBnpPV6tb5Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:21 2026 by rpki-client