This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer File: iLJuRMUJzzYPfLp8ijtRNABSrzE.cer (raw, json) Hash identifier: JjesYUvPbHZN1EBiqqyRW97RTP7G0FIXinHkDtwuWuI= Subject key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591F948C5EBD3F294773DD51E0620D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62096 IP: 193.33.152.0/24 IP: 2a13:b000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:94:8c:5e:bd:3f:29:47:73:dd:51:e0:62:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b26e44c509cf360f7cba7c8a3b51340052af31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:21:0d:62:05:4b:d0:12:7c:f9:57:e0:50: fb:7b:91:42:34:5f:d7:bb:49:66:84:ec:0e:ad:25: 1f:61:2e:3c:94:cb:91:9b:81:0a:63:0a:8a:85:08: 87:b8:83:7b:80:59:42:fc:c3:66:d6:92:49:f9:d0: a1:7d:db:63:e4:4d:04:b1:69:78:1b:e6:e1:88:29: 3f:49:58:37:fd:6c:db:6f:b0:ed:52:ab:99:7a:b6: 16:6b:c0:49:6f:e8:23:17:f3:83:bf:41:a8:80:ab: c3:d4:ea:bd:1a:b9:1b:ab:b1:e9:a2:1d:dd:cc:07: 1b:5b:47:18:2a:7b:96:5f:4a:8b:f1:ec:cd:9e:83: a7:c6:8f:cc:82:54:54:2e:e2:ea:fa:0c:86:d2:04: cb:dc:af:d7:ae:fb:40:2d:d7:60:c1:86:1c:d5:55: 62:de:c9:ec:bb:c5:f1:51:df:2a:df:3c:c9:5c:4f: fd:14:06:4c:a8:b9:c1:0f:78:e1:cd:36:1f:72:c2: 41:4c:2d:da:ef:39:69:5c:64:4b:0c:22:85:37:cc: e8:59:fb:1c:86:54:70:20:34:73:3f:8a:fd:7e:be: d7:9b:14:92:e6:c1:1d:66:c9:fc:d9:9d:a0:9e:36: 22:eb:f4:48:ac:56:25:a7:99:6b:41:f4:db:37:ba: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.152.0/24 IPv6: 2a13:b000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62096 Signature Algorithm: sha256WithRSAEncryption 69:c0:8f:00:42:b0:45:34:30:ca:3f:3e:2a:41:72:c0:52:e4: 2a:ae:36:1f:cb:3d:02:85:f0:c2:74:1b:da:13:90:23:53:f8: 0e:27:b0:41:3e:8e:f8:f9:60:6e:71:2b:42:b6:91:c6:af:e6: fe:fe:0f:33:5e:a9:39:41:fe:f3:a4:4b:38:b4:94:cf:84:d8: 8e:20:db:f5:d6:9f:3a:4e:a5:25:a2:53:6c:41:ad:e8:8e:cb: 3f:9b:a7:b0:00:84:8b:8b:dd:db:6f:45:dc:3e:9d:e2:2c:e0: 7e:41:b7:e5:c4:db:e2:2f:87:81:20:83:5c:52:58:bd:29:61: 96:7c:b3:d8:f8:bd:15:78:94:2e:c8:3c:ce:10:b5:d9:87:ae: ba:3b:5c:7b:17:ca:c8:ed:34:b5:ae:42:8f:a7:3d:98:54:83: 44:eb:9f:53:2a:8b:e4:87:b7:a4:6a:05:87:96:ed:af:73:4c: 59:45:4c:ca:93:d7:12:34:33:3b:80:08:be:6c:4c:04:0b:db: 92:ce:c0:67:ed:cd:d9:f2:6c:29:62:b2:68:a5:56:2e:31:3d: 29:16:c1:22:80:ab:e6:6a:9e:38:cf:0a:ed:17:bc:a2:c1:de: da:c7:6a:fb:7f:b6:90:37:2d:49:3d:01:4b:93:31:7a:db:c4: d5:57:02:b1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WR+UjF69PylHc91R4GINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGIyNmU0NGM1MDljZjM2MGY3Y2JhN2M4YTNiNTEzNDAwNTJhZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohwhDWIFS9ASfPlX4FD7e5FCNF/X u0lmhOwOrSUfYS48lMuRm4EKYwqKhQiHuIN7gFlC/MNm1pJJ+dChfdtj5E0EsWl4 G+bhiCk/SVg3/Wzbb7DtUquZerYWa8BJb+gjF/ODv0GogKvD1Oq9Grkbq7Hpoh3d zAcbW0cYKnuWX0qL8ezNnoOnxo/MglRULuLq+gyG0gTL3K/XrvtALddgwYYc1VVi 3snsu8XxUd8q3zzJXE/9FAZMqLnBD3jhzTYfcsJBTC3a7zlpXGRLDCKFN8zoWfsc hlRwIDRzP4r9fr7XmxSS5sEdZsn82Z2gnjYi6/RIrFYlp5lrQfTbN7rnwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIiybkTFCc82D3y6fIo7UTQAUq8xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2RiZDZj Yy1jNmVmLTRkN2EtOTg3Ni0wZWY3OTBhN2I5MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGJkNmNj LWM2ZWYtNGQ3YS05ODc2LTBlZjc5MGE3YjkwZS8xL2lMSnVSTVVKenpZUGZMcDhp anRSTkFCU3J6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSGYMA0EAgACMAcDBQMqE7AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDykDANBgkqhkiG9w0BAQsFAAOCAQEAacCPAEKwRTQw yj8+KkFywFLkKq42H8s9AoXwwnQb2hOQI1P4DiewQT6O+PlgbnErQraRxq/m/v4P M16pOUH+86RLOLSUz4TYjiDb9dafOk6lJaJTbEGt6I7LP5unsACEi4vd229F3D6d 4izgfkG35cTb4i+HgSCDXFJYvSlhlnyz2Pi9FXiULsg8zhC12YeuujtcexfKyO00 ta5Cj6c9mFSDROufUyqL5Ie3pGoFh5btr3NMWUVMypPXEjQzO4AIvmxMBAvbks7A Z+3N2fJsKWKyaKVWLjE9KRbBIoCr5mqeOM8K7Re8osHe2sdq+3+2kDctST0BS5Mx etvE1VcCsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:44 2026 by rpki-client