This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer (raw, json) Hash identifier: UIf3veOOnCDshGxTnIviVuPpahIb0oxvARaGGESama0= Subject key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA56CF055F1BB7E2EB9B8F742E1462E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216247 IP: 176.10.91.0/24 IP: 2a13:efc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6c:f0:55:f1:bb:7e:2e:b9:b8:f7:42:e1:46:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:06:dd:d5:35:b5:0b:72:64:14:40:46:df: c0:73:a9:3f:98:74:fb:17:6f:74:55:4b:39:f5:ef: a5:6b:36:c7:88:19:db:3d:0b:24:c5:d5:68:e4:64: 70:c0:45:da:0a:dd:0a:20:87:3c:e7:37:3b:d1:a8: 2f:99:ea:4f:6a:2f:0c:5e:da:07:43:da:fa:14:41: 57:ca:7b:08:c8:74:07:d7:b6:1b:27:1e:21:2f:e3: 0e:40:42:a5:46:d7:36:bc:be:86:c5:08:1a:d6:bb: 0a:0b:fd:7c:89:84:0f:0a:c3:d8:0d:e3:af:63:94: 0a:25:9b:dd:ff:b9:fc:a5:0b:5a:a0:42:ef:8e:4d: 26:07:60:1b:4b:8e:19:01:e6:6b:7b:d9:d0:ed:72: fc:7e:30:d0:83:2e:b0:14:a9:50:1c:6a:1c:e2:e8: e2:fd:a6:ca:a0:ba:5f:ac:33:dc:0b:4c:9d:9e:a6: 1c:91:5d:15:8d:23:7a:9a:b0:82:31:93:0f:df:e7: e0:6f:4f:5a:54:9d:6e:1f:17:db:53:67:ef:ba:67: 16:8c:57:1e:c4:a8:04:34:25:25:47:04:bd:7b:c6: 5c:65:3f:37:46:d9:9e:7b:df:0f:58:2b:3a:af:e9: 00:50:bd:7f:e7:a3:7e:2f:59:ae:40:5b:b3:fc:c1: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.91.0/24 IPv6: 2a13:efc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216247 Signature Algorithm: sha256WithRSAEncryption 61:94:07:ca:5f:2d:88:7b:0d:26:2e:28:b7:c3:bb:db:f4:f7: 12:ee:e6:0e:41:3b:cb:29:e8:c6:b9:01:65:8b:63:9e:50:4f: 24:33:dd:d0:be:6f:b5:78:48:d9:19:f5:50:e8:44:70:61:40: a1:54:cb:b9:9e:cc:fb:59:62:2e:58:c0:ef:56:4d:1e:61:48: df:7c:fc:fa:e3:4f:d7:02:81:1e:3a:e6:62:2c:b9:ee:74:bd: 99:59:e9:b9:ae:3f:0d:67:48:2e:7c:f2:72:b9:4f:32:30:46: a8:13:70:c4:7b:fd:00:c1:12:9d:07:46:19:44:42:d5:7f:3e: ba:3e:f8:8a:85:c4:8b:29:01:98:8f:26:81:d7:c4:b4:01:58: 4a:b6:62:48:ea:cd:a8:ef:13:eb:c1:8a:3d:82:06:7d:e5:74: f7:58:8b:f7:ce:a4:3f:45:30:db:d9:1a:04:e5:e9:14:5c:df: 2f:c6:de:78:a3:ab:b6:d5:ec:86:5e:88:7e:25:c7:df:2a:09: 4f:a6:f7:ca:07:9d:fc:3a:aa:1b:b0:5c:86:af:c7:a1:88:a2: 24:66:14:29:d6:9c:48:71:34:5b:05:05:39:9b:96:be:8f:c2: 33:3a:dc:94:42:55:6f:33:9a:10:62:22:f9:da:8d:3f:36:ed: c6:aa:15:5d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pWzwVfG7fi65uPdC4UYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTBmM2ZhYjIzNDljMDFiMWFjOGZkMGI5MjFjNjAzMThjZTE4NGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IMG3dU1tQtyZBRARt/Ac6k/mHT7 F290VUs59e+lazbHiBnbPQskxdVo5GRwwEXaCt0KIIc85zc70agvmepPai8MXtoH Q9r6FEFXynsIyHQH17YbJx4hL+MOQEKlRtc2vL6GxQga1rsKC/18iYQPCsPYDeOv Y5QKJZvd/7n8pQtaoELvjk0mB2AbS44ZAeZre9nQ7XL8fjDQgy6wFKlQHGoc4uji /abKoLpfrDPcC0ydnqYckV0VjSN6mrCCMZMP3+fgb09aVJ1uHxfbU2fvumcWjFce xKgENCUlRwS9e8ZcZT83Rtmee98PWCs6r+kAUL1/56N+L1muQFuz/MFQJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIkPP6sjScAbGsj9C5IcYDGM4YTWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzFjZTNl My1jODU5LTRiNzEtYjZkMi05MzU5ZDhkZTI5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMWNlM2Uz LWM4NTktNGI3MS1iNmQyLTkzNTlkOGRlMjk3NS8xL2lROF9xeU5Kd0JzYXlQMExr aHhnTVl6aGhOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsApbMA0EAgACMAcDBQMqE+/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMtzANBgkqhkiG9w0BAQsFAAOCAQEAYZQHyl8tiHsN Ji4ot8O72/T3Eu7mDkE7yynoxrkBZYtjnlBPJDPd0L5vtXhI2Rn1UOhEcGFAoVTL uZ7M+1liLljA71ZNHmFI33z8+uNP1wKBHjrmYiy57nS9mVnpua4/DWdILnzycrlP MjBGqBNwxHv9AMESnQdGGURC1X8+uj74ioXEiykBmI8mgdfEtAFYSrZiSOrNqO8T 68GKPYIGfeV091iL986kP0Uw29kaBOXpFFzfL8beeKOrttXshl6IfiXH3yoJT6b3 yged/DqqG7Bchq/HoYiiJGYUKdacSHE0WwUFOZuWvo/CMzrclEJVbzOaEGIi+dqN PzbtxqoVXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:55 2026 by rpki-client