This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer File: igKbHrUc1PS8TdmFoOxlOnXspAw.cer (raw, json) Hash identifier: tCMkCueh3KEKf7DnZ20RXJSlFlwL67bhuJJ68ClWui8= Subject key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134225B81735C15319C050FF8A3168 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 84.241.64.0/18 IP: 185.92.64.0/22 IP: 2a01:b540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:42:25:b8:17:35:c1:53:19:c0:50:ff:8a:31:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:e8:d7:86:c8:2b:d3:65:7f:ec:d7:f6:53: 83:9e:1a:b0:3f:77:a1:71:d3:04:f2:d9:8e:46:b1: 64:d8:8a:7a:e4:e3:6b:9f:13:23:03:33:a3:92:bf: 15:62:2e:a7:c0:10:e2:bd:ec:35:24:07:a6:88:16: a7:32:33:c5:0f:b2:43:54:db:08:77:02:78:63:a0: b4:88:e8:4a:55:2c:9e:8a:66:7f:93:48:52:ce:b6: 77:b5:69:4f:d8:4c:d0:57:de:5a:e4:c1:84:df:37: 67:b5:0e:9e:e7:ed:96:63:4e:10:28:1b:ef:08:de: 7f:2d:a0:6e:cf:02:0a:14:6a:a3:76:cf:4e:0f:f6: a4:1b:d4:2e:46:58:3b:da:1c:64:52:73:cd:34:43: 3c:55:d8:f4:3c:1f:62:f7:f5:3f:43:f8:4c:9f:24: ad:da:c4:bd:3d:d0:67:16:1c:86:73:07:76:dc:6a: 83:3f:78:94:71:f8:19:83:43:0c:a7:30:86:2b:60: d8:ef:15:9c:14:9f:e6:2c:d4:d6:84:c1:14:70:b4: 98:ba:f8:b1:d2:5d:1d:ac:2d:1d:93:56:ed:1b:99: dc:6b:34:94:13:72:cf:07:f3:c3:c0:00:56:f1:76: 84:22:33:49:39:1f:be:82:b8:aa:0b:7c:38:da:a2: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.241.64.0/18 185.92.64.0/22 IPv6: 2a01:b540::/29 Signature Algorithm: sha256WithRSAEncryption 40:78:65:a3:5b:a0:f2:9a:34:44:2b:5b:f8:ce:a5:1d:36:66: 3e:be:23:f0:af:28:47:7e:ea:7c:a5:1c:18:fc:e3:cd:8a:11: 31:99:b2:f0:2f:26:04:64:34:2a:fc:4b:65:2b:8b:2e:76:6d: f4:53:ae:7b:07:f9:61:a7:1b:bd:2d:4f:8c:4e:ba:0f:eb:23: 1c:7e:6d:a5:a6:f8:60:87:09:60:7f:5c:cc:b2:d9:be:6f:8b: a1:18:62:e2:aa:13:16:36:29:51:7e:a0:cc:13:66:be:09:c2: 34:d0:45:d2:89:3c:25:33:fb:76:2d:08:03:61:49:60:c3:a2: d1:e5:f2:77:de:13:95:fe:96:45:91:b5:b1:91:98:07:99:38: 02:9b:8a:e2:2f:32:2e:c6:ff:58:f9:e2:77:e0:fa:e0:1c:e4: ed:d6:6c:b9:0e:26:45:47:63:9a:43:e8:7a:d1:6f:ff:e1:eb: 23:fc:c3:19:4a:41:ba:e1:a3:b2:aa:f3:8f:1b:80:76:c4:88: 4e:f9:93:f7:50:f7:df:e5:3d:64:bd:71:f5:de:c4:00:57:6f: a9:65:ac:82:40:1c:e0:97:ae:cb:c5:15:68:ef:ce:7f:47:13: cd:93:63:7f:2c:ed:00:56:02:3c:b2:3a:c3:c7:fd:88:05:3a: f0:3d:bc:66 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8E0IluBc1wVMZwFD/ijFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTAyOWIxZWI1MWNkNGY0YmM0ZGQ5ODVhMGVjNjUzYTc1ZWNhNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPbo14bIK9Nlf+zX9lODnhqwP3eh cdME8tmORrFk2Ip65ONrnxMjAzOjkr8VYi6nwBDivew1JAemiBanMjPFD7JDVNsI dwJ4Y6C0iOhKVSyeimZ/k0hSzrZ3tWlP2EzQV95a5MGE3zdntQ6e5+2WY04QKBvv CN5/LaBuzwIKFGqjds9OD/akG9QuRlg72hxkUnPNNEM8Vdj0PB9i9/U/Q/hMnySt 2sS9PdBnFhyGcwd23GqDP3iUcfgZg0MMpzCGK2DY7xWcFJ/mLNTWhMEUcLSYuvix 0l0drC0dk1btG5ncazSUE3LPB/PDwABW8XaEIjNJOR++griqC3w42qJqLwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIoCmx61HNT0vE3ZhaDsZTp17KQMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzhkMjBi Yi1kNzJkLTQ3YWEtYmU0OC0zODI2OWNlZjVlMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOGQyMGJi LWQ3MmQtNDdhYS1iZTQ4LTM4MjY5Y2VmNWUwMS8xL2lnS2JIclVjMVBTOFRkbUZv T3hsT25Yc3BBdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGVPFAAwQCuVxAMA0EAgACMAcDBQMqAbVAMA0G CSqGSIb3DQEBCwUAA4IBAQBAeGWjW6DymjREK1v4zqUdNmY+viPwryhHfup8pRwY /OPNihExmbLwLyYEZDQq/EtlK4sudm30U657B/lhpxu9LU+MTroP6yMcfm2lpvhg hwlgf1zMstm+b4uhGGLiqhMWNilRfqDME2a+CcI00EXSiTwlM/t2LQgDYUlgw6LR 5fJ33hOV/pZFkbWxkZgHmTgCm4riLzIuxv9Y+eJ34PrgHOTt1my5DiZFR2OaQ+h6 0W//4esj/MMZSkG64aOyqvOPG4B2xIhO+ZP3UPff5T1kvXH13sQAV2+pZayCQBzg l67LxRVo785/RxPNk2N/LO0AVgI8sjrDx/2IBTrwPbxm -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:12 2026 by rpki-client