This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer (raw, json) Hash identifier: oBj9Z/Kz040/50N46nXUL2YJld/uPKji81HxFEa4O+Q= Subject key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A96806C1E76A000D9E317C4C5312 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210711 IP: 94.154.121.0/24 IP: 2a11:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:68:06:c1:e7:6a:00:0d:9e:31:7c:4c:53:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:3c:5c:51:2a:86:8b:a5:3a:21:2c:c2:e3: 22:ac:25:f1:64:70:60:ec:9b:ce:85:f3:02:6b:62: e0:db:fb:d0:9d:38:1f:90:d0:93:32:99:81:cb:5a: a3:e5:e4:73:66:19:1c:47:b5:2c:c2:4c:ae:f8:70: d6:ab:d7:c6:4f:c6:b4:fa:08:0c:d3:69:b2:48:40: 71:0f:85:ab:f1:b6:df:3a:27:53:ae:ee:4a:72:0d: ef:4c:17:3c:a0:07:8b:0e:a3:5e:65:1d:f9:1f:ac: 5b:6f:85:f2:76:8e:f8:9d:36:90:f5:a3:e9:38:03: 1d:3a:4e:98:cf:4d:36:bc:91:ad:fc:80:13:f4:d4: 35:c3:dd:3a:dc:18:fe:6c:dc:6e:96:5b:0d:00:c5: 0a:b8:29:03:e1:40:91:56:d8:fd:12:b8:07:80:aa: 1c:51:3f:be:0d:4f:58:b3:c0:10:0a:50:44:59:51: 15:68:47:a1:4a:47:7a:6e:23:44:64:0a:44:1f:c7: 5b:a0:50:78:dd:b9:d8:9d:78:f6:84:f8:7d:0f:f9: 24:90:c6:24:5a:2a:02:44:9c:7c:cd:5d:d4:93:a5: 0a:0a:8a:23:17:7a:9a:34:99:d2:04:29:7e:91:71: d2:cc:bf:60:2a:b3:5c:cb:5b:be:39:80:29:46:38: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.121.0/24 IPv6: 2a11:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210711 Signature Algorithm: sha256WithRSAEncryption 97:ff:f0:60:fd:79:46:a2:53:a0:c3:20:8d:2c:8b:33:b3:8d: 3e:6c:97:08:ee:98:04:46:db:9f:be:a2:fc:85:7d:35:9b:12: de:71:29:59:68:47:38:5c:9c:92:f5:5b:b4:c3:d6:c2:35:64: 23:85:6d:41:db:e2:b9:07:cb:c0:3d:7f:cf:fd:b3:e9:0a:d5: 8e:93:69:4a:36:50:f7:fa:62:0e:a9:ff:44:95:38:bf:bf:fb: f7:61:f6:75:6c:11:ac:69:2c:43:36:38:85:d2:f2:5c:97:12: 9c:90:6d:5d:50:da:73:3a:14:72:60:53:cd:0a:2a:d6:57:8c: 8f:bf:69:b0:7a:5b:d9:56:74:39:03:6a:dc:87:bd:43:14:01: 45:df:e5:e6:fd:ce:c0:c5:d9:2d:a8:0e:c7:57:85:e5:bd:d5: 40:17:f8:3a:f6:37:f9:66:91:cb:47:b4:bf:1e:97:09:f6:2f: 67:21:7a:60:4e:58:f2:ea:1f:3a:25:c6:8b:9a:b1:eb:50:6b: cd:07:bb:f3:70:2d:f8:a9:d6:de:db:03:87:04:7a:7b:ad:50: 79:25:78:3e:96:c1:34:28:61:a9:8c:b1:f2:32:ce:96:cc:49: 8a:2d:94:5c:fc:f7:42:1f:a2:d1:8f:16:ac:50:ad:06:35:7b: cf:50:43:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NqloBsHnagANnjF8TFMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWFlMjIwYjQ3NjhkYTZlMjc2ZTZhNjJlZGQ2NzQ2ZDhmYzNjMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HU8XFEqhoulOiEswuMirCXxZHBg 7JvOhfMCa2Lg2/vQnTgfkNCTMpmBy1qj5eRzZhkcR7Uswkyu+HDWq9fGT8a0+ggM 02mySEBxD4Wr8bbfOidTru5Kcg3vTBc8oAeLDqNeZR35H6xbb4Xydo74nTaQ9aPp OAMdOk6Yz002vJGt/IAT9NQ1w9063Bj+bNxullsNAMUKuCkD4UCRVtj9ErgHgKoc UT++DU9Ys8AQClBEWVEVaEehSkd6biNEZApEH8dboFB43bnYnXj2hPh9D/kkkMYk WioCRJx8zV3Uk6UKCoojF3qaNJnSBCl+kXHSzL9gKrNcy1u+OYApRjhpTwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFImuIgtHaNpuJ25qYu3WdG2Pw8H7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzNiOGE0 MC03NjEwLTRlNGQtOWIzNy03NDFmYTRlMTBlMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvM2I4YTQw LTc2MTAtNGU0ZC05YjM3LTc0MWZhNGUxMGUzNi8xL2lhNGlDMGRvMm00bmJtcGk3 ZFowYllfRHdmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXpp5MA0EAgACMAcDBQMqEUjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3FzANBgkqhkiG9w0BAQsFAAOCAQEAl//wYP15RqJT oMMgjSyLM7ONPmyXCO6YBEbbn76i/IV9NZsS3nEpWWhHOFyckvVbtMPWwjVkI4Vt QdviuQfLwD1/z/2z6QrVjpNpSjZQ9/piDqn/RJU4v7/792H2dWwRrGksQzY4hdLy XJcSnJBtXVDaczoUcmBTzQoq1leMj79psHpb2VZ0OQNq3Ie9QxQBRd/l5v3OwMXZ LagOx1eF5b3VQBf4OvY3+WaRy0e0vx6XCfYvZyF6YE5Y8uofOiXGi5qx61BrzQe7 83At+KnW3tsDhwR6e61QeSV4PpbBNChhqYyx8jLOlsxJii2UXPz3Qh+i0Y8WrFCt BjV7z1BDfg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:40 2026 by rpki-client