This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer (raw, json) Hash identifier: FzwCcUdb2gasfhMS/yWGnMVeU+9UHBC1yMve7y90ywU= Subject key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC217A4A33AE70718BA97D589610AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201127 IP: 77.39.220.0/22 IP: 185.84.88.0/22 IP: 2a05:a3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:21:7a:4a:33:ae:70:71:8b:a9:7d:58:96:10:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:7c:ba:47:ca:98:c8:d5:09:06:0f:87:38: 94:19:42:8a:5a:a6:f9:68:4e:fe:20:e6:26:68:d1: cf:0e:7a:46:b8:b4:44:23:58:72:3b:85:34:84:b1: 7c:63:e8:44:96:88:4b:f8:96:03:54:24:b7:4b:1c: 1d:da:2e:20:67:f1:c8:d5:f4:41:1f:32:e5:1e:c6: 42:30:2c:38:ef:a9:53:fa:56:84:77:34:75:2e:7c: d5:95:57:02:bb:dd:2c:70:01:7f:ce:04:7b:ef:20: 2f:5b:f1:0e:d5:03:46:4c:98:38:f3:9e:66:23:88: ca:d6:57:29:26:74:26:ed:8d:62:5a:31:d6:f2:db: 91:64:5b:01:df:7d:83:6e:63:ed:74:99:bf:7f:23: 82:d8:9f:cb:36:dd:aa:b9:e9:f2:f3:ba:93:cf:40: c9:f4:4d:95:78:80:03:d4:3a:c9:7e:c4:42:bb:ff: f1:9b:71:61:2f:ac:91:cf:e4:b9:a5:91:23:14:b8: fb:36:9f:57:96:b4:e6:5c:be:00:72:c5:cb:f2:05: e7:f6:82:7c:eb:3e:e1:0c:10:0d:77:99:21:f7:0e: ff:be:e9:ec:4c:e5:ef:28:b0:6f:96:da:2d:fb:86: 74:cf:b8:55:e4:29:c3:16:aa:3e:c2:59:11:6d:25: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.39.220.0/22 185.84.88.0/22 IPv6: 2a05:a3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201127 Signature Algorithm: sha256WithRSAEncryption 89:28:57:ee:9c:50:79:e5:88:2f:81:cf:7d:4c:b5:5f:05:43: a4:b2:25:60:63:8e:02:24:cc:f6:21:25:43:5d:48:d2:f5:40: 39:a3:50:aa:c3:9c:0b:f5:b8:93:ed:da:fe:19:4f:a7:62:f5: d4:59:9a:79:bd:21:69:e4:02:fa:06:3f:e4:77:26:87:6c:2d: 2b:a8:3e:41:6d:2b:ae:7e:d3:89:6c:d4:70:9c:f4:7a:49:41: aa:3b:f3:a9:c0:22:b6:07:91:ec:75:bd:ad:c6:3a:56:5d:f7: 6d:35:c4:07:aa:22:bf:7a:a3:84:c4:6d:30:1c:6f:ba:6a:b5: d2:e5:66:b7:39:4c:d3:50:ca:cf:ff:86:1a:f8:2e:1e:bf:d2: 39:60:7e:cd:25:7c:41:5b:3d:40:83:2d:70:04:e6:e5:2b:f8: bf:3b:fa:23:59:e4:98:1c:ee:ee:23:d9:03:97:0f:9a:8e:5f: 3a:aa:ec:ba:03:d3:60:db:14:7e:fa:ad:ec:80:82:00:c7:96: c8:87:ea:75:01:24:d4:54:e1:86:1b:5b:28:a7:39:a9:93:c2: 69:4a:4f:83:8f:cb:88:31:24:f4:5f:9a:cb:4c:15:70:aa:a8: 78:e6:86:5b:b0:99:1a:ca:21:42:6a:24:e5:c1:7e:9f:07:3f: bd:b3:e6:78 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57CF6SjOucHGLqX1YlhCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGE2MmNmODEwMGU4YzFiNDc1NDQzZmQ5NGNkNThkOGVmMmEzM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMt8ukfKmMjVCQYPhziUGUKKWqb5 aE7+IOYmaNHPDnpGuLREI1hyO4U0hLF8Y+hElohL+JYDVCS3Sxwd2i4gZ/HI1fRB HzLlHsZCMCw476lT+laEdzR1LnzVlVcCu90scAF/zgR77yAvW/EO1QNGTJg4855m I4jK1lcpJnQm7Y1iWjHW8tuRZFsB332DbmPtdJm/fyOC2J/LNt2queny87qTz0DJ 9E2VeIAD1DrJfsRCu//xm3FhL6yRz+S5pZEjFLj7Np9XlrTmXL4AcsXL8gXn9oJ8 6z7hDBANd5kh9w7/vunsTOXvKLBvltot+4Z0z7hV5CnDFqo+wlkRbSW9IQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIimLPgQDowbR1RD/ZTNWNjvKjOuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2VlZjAz NS0yNjI5LTRlM2UtYmViYy0xNWEwZGRkZDc0OWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvZWVmMDM1 LTI2MjktNGUzZS1iZWJjLTE1YTBkZGRkNzQ5Yy8xL2lLWXMtQkFPakJ0SFZFUDls TTFZMk84cU02NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCTSfcAwQCuVRYMA0EAgACMAcDBQMqBaPAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRpzANBgkqhkiG9w0BAQsFAAOCAQEAiShX 7pxQeeWIL4HPfUy1XwVDpLIlYGOOAiTM9iElQ11I0vVAOaNQqsOcC/W4k+3a/hlP p2L11Fmaeb0haeQC+gY/5Hcmh2wtK6g+QW0rrn7TiWzUcJz0eklBqjvzqcAitgeR 7HW9rcY6Vl33bTXEB6oiv3qjhMRtMBxvumq10uVmtzlM01DKz/+GGvguHr/SOWB+ zSV8QVs9QIMtcATm5Sv4vzv6I1nkmBzu7iPZA5cPmo5fOqrsugPTYNsUfvqt7ICC AMeWyIfqdQEk1FThhhtbKKc5qZPCaUpPg4/LiDEk9F+ay0wVcKqoeOaGW7CZGsoh Qmok5cF+nwc/vbPmeA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:58 2026 by rpki-client