This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer File: iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer (raw, json) Hash identifier: r3C6C/maZFsHUYxkbq92tUWUtjxejUzw4GBBQA39kaw= Subject key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5D4D0258BD8189816CF6C1DE1BD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205252 IP: 143.20.0.0/16 IP: 185.208.0.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5d:4d:02:58:bd:81:89:81:6c:f6:c1:de:1b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:6e:21:ee:f3:4e:5a:44:de:03:59:7a:91: 49:9f:7e:51:7f:8d:26:77:b3:de:0a:2c:e3:db:08: 83:fe:70:36:a9:b1:a1:77:8f:11:3c:57:aa:ff:b7: 28:4f:96:ad:4c:76:79:62:a5:cc:dc:82:0d:04:b7: 6f:50:66:8e:c8:a0:53:c9:99:11:59:3e:1a:be:e5: bf:32:8b:bd:c3:08:d0:28:02:38:79:02:6a:ef:dc: 7c:cd:95:0f:30:90:26:86:7a:81:12:ff:64:a2:f9: 24:8d:77:58:94:72:b2:30:28:e7:48:7f:b6:9f:13: 96:22:d5:7d:00:fd:8f:af:69:81:f4:15:1f:ee:76: e4:3a:db:fd:9d:69:3e:1b:90:2c:a0:16:bb:0a:eb: 48:59:0e:f5:dd:d6:9b:32:08:c2:3b:2b:3d:13:66: eb:86:0b:61:6f:fb:4f:21:57:71:e8:56:c3:81:e9: db:7c:3e:5d:a6:6b:2c:f8:0a:6b:3a:f0:8e:fb:d3: fe:5f:39:d3:15:bf:70:54:b3:34:a7:c0:a8:26:87: 17:70:08:ab:6a:ae:88:01:c6:77:b3:05:83:f0:18: c1:66:5e:1c:fa:cf:57:4c:4a:ed:77:c1:05:ae:da: df:16:d6:c0:d7:a6:b5:86:cc:3c:dc:bb:1f:01:79: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.0.0/16 185.208.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205252 Signature Algorithm: sha256WithRSAEncryption 07:d1:16:cb:f2:cd:c6:bd:2a:fe:08:2d:17:5d:c8:6c:66:7f: 18:01:87:ee:c5:31:47:5b:20:89:c5:32:69:11:cb:f8:9b:f0: 83:40:fc:34:5e:27:a3:36:66:f7:cc:56:1c:be:ff:ba:f3:4f: ea:f6:85:bc:a2:6f:8f:38:6a:da:cc:95:02:42:d2:27:e4:6a: 0a:e0:be:52:cb:20:82:2b:8d:b5:5e:b8:9b:6a:b4:21:c2:3d: 35:15:6b:60:b4:4a:11:9a:ea:1c:be:81:32:15:bc:5c:00:e6: 09:a8:f7:4e:04:1a:81:73:b1:b5:1f:d3:1f:79:e2:ce:84:94: 64:a4:ca:03:33:57:c4:e4:9f:95:24:3c:3d:e5:2d:ce:d7:73: 1b:d9:e1:86:6a:e2:09:13:36:16:1e:a6:05:21:f5:72:07:a7: cf:41:79:a7:5c:bc:3b:65:8e:8f:38:34:79:20:d2:0f:99:a0: e9:ce:bd:02:8b:02:ee:1a:2e:52:30:f2:b1:f1:08:78:eb:4d: 73:68:63:67:6f:60:bd:ab:af:34:a4:1e:da:93:29:a0:e8:c3: aa:ea:de:5e:f4:57:f4:dc:bb:10:0f:f0:5e:5c:77:94:53:92: 21:69:5c:98:5b:50:1a:5b:43:f5:28:e6:b7:7b:68:ad:af:d6: f1:41:f5:38 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt2611NAli9gYmBbPbB3hvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGMxNGVjMDJhZGJmMDgzMTM4ZWRkZDQ3ODcxMTc2ZGRlYjkzZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27huIe7zTlpE3gNZepFJn35Rf40m d7PeCizj2wiD/nA2qbGhd48RPFeq/7coT5atTHZ5YqXM3IINBLdvUGaOyKBTyZkR WT4avuW/Mou9wwjQKAI4eQJq79x8zZUPMJAmhnqBEv9kovkkjXdYlHKyMCjnSH+2 nxOWItV9AP2Pr2mB9BUf7nbkOtv9nWk+G5AsoBa7CutIWQ713dabMgjCOys9E2br hgthb/tPIVdx6FbDgenbfD5dpmss+AprOvCO+9P+XznTFb9wVLM0p8CoJocXcAir aq6IAcZ3swWD8BjBZl4c+s9XTErtd8EFrtrfFtbA16a1hsw83LsfAXn9OQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFIjBTsAq2/CDE47d1HhxF23euT2dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlk N2IyLWVlNjQtNDlmMS1hZDgxLThlNGExMDdkNjJlMC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQw OWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvODhDMTRFQzAyQURC RjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAEwCwMD AI8UAwQCudAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhxDANBgkqhkiG9w0B AQsFAAOCAQEAB9EWy/LNxr0q/ggtF13IbGZ/GAGH7sUxR1sgicUyaRHL+Jvwg0D8 NF4nozZm98xWHL7/uvNP6vaFvKJvjzhq2syVAkLSJ+RqCuC+UssggiuNtV64m2q0 IcI9NRVrYLRKEZrqHL6BMhW8XADmCaj3TgQagXOxtR/TH3nizoSUZKTKAzNXxOSf lSQ8PeUtztdzG9nhhmriCRM2Fh6mBSH1cgenz0F5p1y8O2WOjzg0eSDSD5mg6c69 AosC7houUjDysfEIeOtNc2hjZ29gvauvNKQe2pMpoOjDqureXvRX9Ny7EA/wXlx3 lFOSIWlcmFtQGltD9Sjmt3tora/W8UH1OA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:24:33 2026 by rpki-client