This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer File: iNCLhhV8ayjmrJguDD_rGj7DKBA.cer (raw, json) Hash identifier: e2FspfapEwCwHLMeJFDO3auFXv1eg8YWNhJ3wCkD9xw= Subject key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C10FC60C04F5FA87AC2831B57C6B3C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198096 IP: 185.197.88.0/22 IP: 2a00:9ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:10:fc:60:c0:4f:5f:a8:7a:c2:83:1b:57:c6:b3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:03:98:9d:a0:1b:07:a2:76:4d:79:ca:66: 91:96:df:f7:15:0a:74:f2:00:d8:cf:42:9b:03:29: b9:6c:05:47:21:1c:20:65:84:30:b9:c5:fc:a5:2f: ab:98:c3:11:6f:3a:9c:d5:9b:3e:f6:2a:8c:42:67: 26:80:11:70:09:5e:a5:0e:d9:ce:77:8c:68:8e:d6: 32:ff:6a:78:e3:91:b5:6d:44:08:80:37:2d:24:3e: 9f:a2:4c:4c:59:9d:38:4c:80:65:76:02:b0:f5:46: a9:a8:e1:26:39:70:9e:be:38:68:87:61:1d:07:c1: 30:5e:fe:86:09:a8:ae:ef:93:fb:0d:9c:a3:32:d4: 42:76:a7:3f:28:1a:c8:15:d1:7d:23:a8:26:31:62: 38:79:f2:21:6c:3d:e6:29:75:4f:47:9c:37:f1:1c: 93:4f:99:28:30:7f:d6:0b:58:79:9e:4d:20:b4:07: bc:b3:e8:09:2b:66:59:9c:31:9d:03:a8:5a:6a:1c: c0:3a:f6:ee:5f:8d:d2:f2:19:27:48:16:03:51:6b: fe:d2:32:67:a2:d1:ab:b5:ec:f7:06:86:86:eb:2d: 62:29:e0:57:a4:a7:28:f0:92:bf:81:98:71:b8:a7: ee:9e:0f:fd:8c:1a:63:3f:13:d7:74:57:1f:9b:4f: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.88.0/22 IPv6: 2a00:9ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198096 Signature Algorithm: sha256WithRSAEncryption 0e:12:26:a9:bb:90:91:6a:fa:28:41:00:9a:e5:14:a6:a1:3c: 8e:50:b8:c8:cd:ce:a3:9d:a0:df:47:1f:c5:3d:60:28:75:09: 5a:14:7f:06:5b:d1:79:40:21:69:4b:25:1f:ae:36:1f:ba:a8: c6:c2:75:2a:73:b9:e5:ac:ef:48:ed:cf:bd:8e:cc:5c:9b:13: d4:17:c7:08:81:10:3c:f9:b1:f5:da:cb:85:5b:01:aa:91:27: 24:30:8d:43:31:b9:a7:53:79:a3:6c:f8:a0:75:fb:14:1f:44: d5:d6:15:83:b5:b1:73:86:d2:a8:5a:c5:6a:2f:d7:7e:e6:ec: fb:6c:d1:91:b3:ca:7a:4d:ed:d5:37:55:a6:38:c1:f7:df:62: 3b:9a:7c:58:bc:01:78:70:49:bb:e6:fc:e7:10:2b:2a:cb:e3: 93:b6:65:3f:bb:61:da:55:a8:58:ad:50:47:4b:74:07:8a:b4: df:c6:40:f0:6e:6d:c4:56:46:ae:20:b9:53:13:50:72:ab:a7: 34:7c:6e:d3:47:13:b3:c4:b9:48:1b:81:6d:b0:db:2f:fe:f0: 9f:4c:94:41:e5:10:88:01:7a:86:c9:ee:f7:1f:15:6b:f0:6c: de:d3:7e:71:6d:22:52:cc:7d:4d:ee:4c:24:34:5b:5f:a3:d7: 8c:c4:9f:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EPxgwE9fqHrCgxtXxrPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQwOGI4NjE1N2M2YjI4ZTZhYzk4MmUwYzNmZWIxYTNlYzMyODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA658DmJ2gGweidk15ymaRlt/3FQp0 8gDYz0KbAym5bAVHIRwgZYQwucX8pS+rmMMRbzqc1Zs+9iqMQmcmgBFwCV6lDtnO d4xojtYy/2p445G1bUQIgDctJD6fokxMWZ04TIBldgKw9UapqOEmOXCevjhoh2Ed B8EwXv6GCaiu75P7DZyjMtRCdqc/KBrIFdF9I6gmMWI4efIhbD3mKXVPR5w38RyT T5koMH/WC1h5nk0gtAe8s+gJK2ZZnDGdA6haahzAOvbuX43S8hknSBYDUWv+0jJn otGrtez3BoaG6y1iKeBXpKco8JK/gZhxuKfung/9jBpjPxPXdFcfm09LowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIjQi4YVfGso5qyYLgw/6xo+wygQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzc2MDQ1 Mi1mNjNjLTQ4YWEtYTNlMC0zOGQwY2Y4ZmI4YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNzYwNDUy LWY2M2MtNDhhYS1hM2UwLTM4ZDBjZjhmYjhiOC8xL2lOQ0xoaFY4YXlqbXJKZ3VE RF9yR2o3REtCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucVYMA0EAgACMAcDBQAqAJrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMF0DANBgkqhkiG9w0BAQsFAAOCAQEADhImqbuQkWr6 KEEAmuUUpqE8jlC4yM3Oo52g30cfxT1gKHUJWhR/BlvReUAhaUslH642H7qoxsJ1 KnO55azvSO3PvY7MXJsT1BfHCIEQPPmx9drLhVsBqpEnJDCNQzG5p1N5o2z4oHX7 FB9E1dYVg7Wxc4bSqFrFai/Xfubs+2zRkbPKek3t1TdVpjjB999iO5p8WLwBeHBJ u+b85xArKsvjk7ZlP7th2lWoWK1QR0t0B4q038ZA8G5txFZGriC5UxNQcqunNHxu 00cTs8S5SBuBbbDbL/7wn0yUQeUQiAF6hsnu9x8Va/Bs3tN+cW0iUsx9Te5MJDRb X6PXjMSfog== -----END CERTIFICATE-----Generated at Tue Feb 10 02:49:30 2026 by rpki-client