This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer (raw, json) Hash identifier: jZMfXpswa/LgdjAoE3pYbBw5BGOfXc+PdX7D3gO1kKg= Subject key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA64DA0CBED41A3616C8539DAA97B26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47835 IP: 91.206.198.0/23 IP: 91.230.235.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4d:a0:cb:ed:41:a3:61:6c:85:39:da:a9:7b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:d9:e1:de:40:3c:35:6d:73:8c:eb:d4:e3: d0:78:32:13:62:9a:cd:e9:f0:de:2d:a9:1e:e6:71: 1e:b1:05:4e:4f:94:72:e6:90:76:04:5b:d7:6c:d5: 0e:e5:ff:75:23:c5:97:5d:ec:78:f5:e5:90:ac:99: 2d:f7:29:f3:ef:0a:3d:33:fc:ec:6b:e3:77:67:c9: bf:58:3e:e8:05:30:3d:fb:6f:af:50:44:df:20:b1: 6a:0d:98:9a:c8:44:22:66:49:fe:eb:7a:d7:d5:fb: 78:e4:21:3b:60:d9:c3:c1:34:a0:5b:66:32:c5:6f: a8:88:83:56:91:2e:76:50:3c:76:e1:4e:b7:4e:9d: f9:ad:34:bb:cb:c7:3a:99:3b:3e:4c:ab:76:7b:f0: a5:5e:0e:8d:f5:8f:95:d8:1b:bd:f5:5a:88:f1:06: 6b:03:94:30:6c:c8:b5:ba:38:d7:cd:f1:82:61:a4: 04:d8:ba:b5:9e:6c:5f:97:3f:af:de:4c:3e:1a:2c: c4:92:c3:cc:1b:4a:9e:5b:55:22:25:33:93:f7:ee: 65:9b:c6:34:4c:74:b4:ad:6a:93:cd:42:cf:74:7d: fc:58:58:34:be:b5:ac:7f:25:34:4d:04:86:97:28: 33:f1:e6:74:e5:9a:57:90:ed:5c:f7:25:f8:2c:63: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.198.0/23 91.230.235.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47835 Signature Algorithm: sha256WithRSAEncryption 65:86:1c:3d:ad:e8:bf:64:07:03:7b:96:7a:8c:3c:e9:dd:0a: 67:94:7e:db:c6:2f:65:a6:16:22:d5:63:41:33:30:22:88:b4: a1:ed:ba:28:5b:58:95:59:20:b3:e5:9a:4c:f3:b3:2b:a6:94: b4:8b:04:9b:59:9a:cb:63:ec:e2:a2:e3:29:5f:ae:28:2c:76: 3e:63:73:a5:86:59:c8:d3:86:84:a3:07:8f:7d:96:94:d4:8f: a9:a2:ea:95:8d:56:49:32:ce:ed:a3:3c:f3:81:62:e1:d2:4f: 02:17:0a:4d:78:ca:f7:1a:7f:6a:0f:b5:0a:06:b7:45:4d:ab: 30:ff:31:82:ed:20:7d:30:e2:c9:ae:eb:0d:33:b6:08:2f:c5: 9a:e0:65:0a:62:ef:47:c7:f4:cf:63:c1:45:72:57:e2:12:3b: 21:bc:9c:75:4b:3b:a3:d4:32:d7:d8:89:29:7d:95:ee:38:8f: 5b:d7:96:d0:19:d7:65:f3:1f:b6:a7:7b:da:e5:b7:4a:59:6a: b3:d5:89:f8:4a:44:74:b4:52:d6:c5:f5:b1:62:33:dc:e5:43: 42:88:88:f7:20:f4:be:d6:e2:77:cf:e3:07:0e:e6:18:9d:d7: 2d:cd:8a:fb:28:40:6c:de:6b:c2:58:e2:a9:27:e6:02:f4:6d: 41:60:dd:f7 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+pk2gy+1Bo2FshTnaqXsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTU5YWUzZjQxNzdhM2NkZDk2NjhkMGM1YjhhODlmOTE4NmI1YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPvZ4d5APDVtc4zr1OPQeDITYprN 6fDeLake5nEesQVOT5Ry5pB2BFvXbNUO5f91I8WXXex49eWQrJkt9ynz7wo9M/zs a+N3Z8m/WD7oBTA9+2+vUETfILFqDZiayEQiZkn+63rX1ft45CE7YNnDwTSgW2Yy xW+oiINWkS52UDx24U63Tp35rTS7y8c6mTs+TKt2e/ClXg6N9Y+V2Bu99VqI8QZr A5QwbMi1ujjXzfGCYaQE2Lq1nmxflz+v3kw+GizEksPMG0qeW1UiJTOT9+5lm8Y0 THS0rWqTzULPdH38WFg0vrWsfyU0TQSGlygz8eZ05ZpXkO1c9yX4LGNbvQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIlZrj9Bd6PN2WaNDFuKifkYa1v8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzA0YmEy Ni1mMWI5LTQyODUtYjdmYS1lZTk4MmE1MTJmNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMDRiYTI2 LWYxYjktNDI4NS1iN2ZhLWVlOTgyYTUxMmY0My8xL2lWbXVQMEYzbzgzWlpvME1X NHFKLVJocldfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW87GAwQAW+brMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC62zANBgkqhkiG9w0BAQsFAAOCAQEAZYYcPa3ov2QHA3uWeow86d0K Z5R+28YvZaYWItVjQTMwIoi0oe26KFtYlVkgs+WaTPOzK6aUtIsEm1may2Ps4qLj KV+uKCx2PmNzpYZZyNOGhKMHj32WlNSPqaLqlY1WSTLO7aM884Fi4dJPAhcKTXjK 9xp/ag+1Cga3RU2rMP8xgu0gfTDiya7rDTO2CC/FmuBlCmLvR8f0z2PBRXJX4hI7 IbycdUs7o9Qy19iJKX2V7jiPW9eW0BnXZfMftqd72uW3Sllqs9WJ+EpEdLRS1sX1 sWIz3OVDQoiI9yD0vtbid8/jBw7mGJ3XLc2K+yhAbN5rwljiqSfmAvRtQWDd9w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:55 2026 by rpki-client