This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer (raw, json) Hash identifier: p3mAVEb78B5pOLqYcwPvz6PqPDwALFCB6Uj8p9GJX2M= Subject key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F36F6E42AE2A3780BC443FD692E94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212288 IP: 83.242.108.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:36:f6:e4:2a:e2:a3:78:0b:c4:43:fd:69:2e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:2d:e4:1e:8d:70:9b:02:d1:80:96:32:9c: 6a:c3:2f:2e:8d:c1:0a:d6:b3:1f:e3:e5:b6:87:e8: 6c:ca:dd:6b:a8:dc:d9:83:6e:79:6a:17:67:51:89: cc:7c:3f:ea:0c:97:62:10:3d:4a:f8:4b:ee:ff:58: d1:cf:03:da:d6:3b:08:2b:06:34:99:b4:38:66:e0: 8e:b5:99:57:e3:a2:d8:b7:af:5c:da:02:7c:1b:45: 7e:6a:b3:09:47:3f:95:e5:e4:f7:2d:6e:d7:4c:62: cb:97:79:b3:a8:6b:09:67:0a:0f:3b:9e:cc:e1:91: 5d:6d:fb:bc:6f:62:c5:c4:82:b1:4e:6f:b9:53:d0: 7c:51:e7:26:48:36:8c:3d:b2:2e:34:b6:9c:76:62: f0:eb:58:b1:ca:2c:c4:93:ab:92:c4:ee:43:7e:c3: 7d:af:f9:fb:32:65:54:69:15:ad:a4:9e:eb:d3:c0: 1a:1a:5f:b7:30:87:80:15:7c:0b:92:9e:bb:4f:b7: 6b:23:ed:53:c6:b4:ef:56:9e:34:25:5b:c6:0a:c9: d7:22:7c:d6:6d:44:2d:62:4e:b6:c7:ad:9a:5e:a4: 37:a3:4b:49:86:66:12:75:d0:ea:dd:e5:22:5b:71: 75:da:79:1b:fd:71:27:a3:53:8c:7f:6a:6e:37:83: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.242.108.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212288 Signature Algorithm: sha256WithRSAEncryption 1b:66:4f:1c:66:58:e7:13:ad:ae:1c:5f:8e:0a:db:ce:9a:c5: 59:0b:f9:a5:bb:13:72:04:fe:eb:6e:1f:8f:2a:20:27:77:72: d4:a3:8e:56:c1:d9:c4:58:fd:92:02:ca:9c:71:e8:99:61:5f: ee:66:df:4b:f7:66:54:06:ad:ff:32:5c:40:ed:b5:a4:1d:db: 03:e8:de:ae:f1:9c:5a:e9:3f:b0:b4:3d:e8:a6:6d:7b:70:7e: e8:85:93:f6:8e:8e:cf:be:b0:5d:fd:27:08:ba:2b:25:40:bf: 9b:0f:55:e4:b3:fe:d8:aa:61:db:3b:e2:03:3f:1d:18:a2:fc: 26:24:87:7b:d4:0c:f5:92:ab:5f:80:32:dd:1d:49:c4:60:84: 15:9a:6f:fa:0c:e0:1e:b0:fc:b6:29:61:62:7a:8b:f6:cd:a1: 3f:05:da:83:29:e3:ec:16:b4:57:07:77:6c:ee:8c:d8:e1:de: 2f:2e:c3:25:28:1d:da:9e:b3:c6:ba:be:19:4c:11:11:50:51: 3d:ad:90:ea:06:c7:74:b6:a1:a5:f0:75:16:fe:5b:97:71:b9: 01:75:52:d8:ad:17:c2:99:c0:82:b8:5f:a2:38:4b:8e:c9:be: 5f:75:80:7d:f9:6b:bf:89:b9:a3:15:e9:23:3c:c8:bd:94:e9: 06:a7:cf:3d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fzb25Crio3gLxEP9aS6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGU5ZmEyM2RhNGZlOTdhYTllMGYzOTExNTYyMDU1OWEyOWY2YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmst5B6NcJsC0YCWMpxqwy8ujcEK 1rMf4+W2h+hsyt1rqNzZg255ahdnUYnMfD/qDJdiED1K+Evu/1jRzwPa1jsIKwY0 mbQ4ZuCOtZlX46LYt69c2gJ8G0V+arMJRz+V5eT3LW7XTGLLl3mzqGsJZwoPO57M 4ZFdbfu8b2LFxIKxTm+5U9B8UecmSDaMPbIuNLacdmLw61ixyizEk6uSxO5DfsN9 r/n7MmVUaRWtpJ7r08AaGl+3MIeAFXwLkp67T7drI+1TxrTvVp40JVvGCsnXInzW bUQtYk62x62aXqQ3o0tJhmYSddDq3eUiW3F12nkb/XEno1OMf2puN4MeswIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIjp+iPaT+l6qeDzkRViBVmin2twMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzZkMTVj MC04MGNjLTRlZGYtOGYxNC0zZTI0Nzg5NDdlNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNmQxNWMw LTgwY2MtNGVkZi04ZjE0LTNlMjQ3ODk0N2U2ZS8xL2lPbjZJOXBQNlhxcDRQT1JG V0lGV2FLZmEzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBU/JsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM9QDANBgkqhkiG9w0BAQsFAAOCAQEAG2ZPHGZY5xOtrhxfjgrbzprFWQv5pbsT cgT+624fjyogJ3dy1KOOVsHZxFj9kgLKnHHomWFf7mbfS/dmVAat/zJcQO21pB3b A+jervGcWuk/sLQ96KZte3B+6IWT9o6Oz76wXf0nCLorJUC/mw9V5LP+2Kph2zvi Az8dGKL8JiSHe9QM9ZKrX4Ay3R1JxGCEFZpv+gzgHrD8tilhYnqL9s2hPwXagynj 7Ba0Vwd3bO6M2OHeLy7DJSgd2p6zxrq+GUwREVBRPa2Q6gbHdLahpfB1Fv5bl3G5 AXVS2K0XwpnAgrhfojhLjsm+X3WAfflrv4m5oxXpIzzIvZTpBqfPPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:26 2026 by rpki-client