This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer File: ih8K1VcrribjnIdAxoqPu0buSGQ.cer (raw, json) Hash identifier: B0/SAFSm020bbmK8sTjvx0V7RvG93zW6wi8bmFlCSOY= Subject key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F827AE4D43DC686F4C7BA110845E469 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201634 IP: 185.130.50.0/24 IP: 2a05:c180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:7a:e4:d4:3d:c6:86:f4:c7:ba:11:08:45:e4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:ea:c2:08:2d:92:10:6b:d3:52:0e:0f:25: 24:06:31:35:d5:da:7c:68:21:e5:45:8f:ab:63:a8: 53:4f:02:d7:06:c0:35:30:10:09:f0:29:80:06:03: 0f:09:a1:af:a5:5f:06:1c:a7:b0:06:57:9c:0f:11: aa:da:e1:28:31:6f:e6:d4:f0:7b:5d:6a:2f:a5:6f: 46:db:26:9a:19:09:1c:50:1b:fb:a0:f8:05:14:f4: ea:1a:71:e5:91:fa:96:56:bd:cc:1d:cf:68:3b:8e: 8b:a8:44:bb:df:6c:35:5d:f0:a4:9a:c8:05:2e:44: 87:33:1e:d2:c3:d9:dc:0c:31:d1:8e:b1:d3:7b:4d: f3:76:90:23:d3:c5:71:bc:28:70:10:98:f0:f7:54: 21:a9:52:05:c3:17:03:0d:3e:66:6f:a4:8c:a0:41: a0:3d:01:01:7a:00:27:7b:d7:aa:04:f9:74:9d:ad: 49:bf:16:14:ed:5a:68:2f:e2:c4:72:74:9e:9f:7d: 91:e5:10:be:cf:a9:99:d9:fa:3b:cd:f2:bb:a4:57: a0:ce:1a:e3:f0:96:91:c4:d8:4f:75:f5:b5:13:c5: ee:13:58:c6:ab:85:fc:56:04:d6:32:7c:aa:74:4f: e3:03:e6:5b:0b:83:2e:f9:71:fc:89:77:d7:b3:3f: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.50.0/24 IPv6: 2a05:c180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201634 Signature Algorithm: sha256WithRSAEncryption 44:95:14:f4:95:40:67:90:84:b7:b8:a9:f5:1a:8e:65:25:a7: 68:ee:62:be:9d:25:fe:3e:2a:62:b0:33:d7:c5:98:21:37:49: b5:29:3c:5b:26:b8:e9:3f:fa:d1:fb:28:a2:aa:fe:9c:88:fa: 4c:f3:6d:5b:0a:47:c6:d3:19:9a:f5:d1:cc:a7:3f:b6:fb:d5: ba:8c:c5:0c:5f:70:a6:d2:54:19:23:d3:11:08:70:dd:03:84: af:78:02:30:84:3c:3f:01:ac:3d:cf:ff:3b:fe:9c:43:95:0e: f6:fb:7b:7e:b7:4e:8d:58:aa:dc:35:42:15:cd:9c:26:24:c9: d4:75:fa:a5:a7:2a:54:41:95:0e:64:d3:c1:50:66:6e:51:bb: d2:da:3c:ad:86:00:0b:f4:b2:1c:06:4d:e0:58:18:ba:83:cc: 61:c4:7c:d4:2d:52:b4:e9:e8:c9:d1:83:14:b9:92:82:6b:03: 7e:eb:17:cb:ab:97:38:1d:e6:41:33:b9:b1:2a:3f:d2:6b:f6: e9:c0:0a:9c:8a:1d:68:54:68:17:e4:1f:8f:aa:50:af:58:25: ee:aa:7d:47:8d:fe:12:b5:50:bf:29:cf:d6:90:27:26:9e:a3: 46:8f:49:a7:90:15:7f:94:bd:19:1a:4a:76:d0:01:f3:c8:63: af:d8:35:2e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gnrk1D3GhvTHuhEIReRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTFmMGFkNTU3MmJhZTI2ZTM5Yzg3NDBjNjhhOGZiYjQ2ZWU0ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzejqwggtkhBr01IODyUkBjE11dp8 aCHlRY+rY6hTTwLXBsA1MBAJ8CmABgMPCaGvpV8GHKewBlecDxGq2uEoMW/m1PB7 XWovpW9G2yaaGQkcUBv7oPgFFPTqGnHlkfqWVr3MHc9oO46LqES732w1XfCkmsgF LkSHMx7Sw9ncDDHRjrHTe03zdpAj08VxvChwEJjw91QhqVIFwxcDDT5mb6SMoEGg PQEBegAne9eqBPl0na1JvxYU7VpoL+LEcnSen32R5RC+z6mZ2fo7zfK7pFegzhrj 8JaRxNhPdfW1E8XuE1jGq4X8VgTWMnyqdE/jA+ZbC4Mu+XH8iXfXsz8x6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIofCtVXK64m45yHQMaKj7tG7khkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzJmZDIw YS01M2FlLTRiZWEtODBjOS0wM2YyM2E3Mzk0MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvMmZkMjBh LTUzYWUtNGJlYS04MGM5LTAzZjIzYTczOTQxZC8xL2loOEsxVmNycmliam5JZEF4 b3FQdTBidVNHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuYIyMA0EAgACMAcDBQMqBcGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTojANBgkqhkiG9w0BAQsFAAOCAQEARJUU9JVAZ5CE t7ip9RqOZSWnaO5ivp0l/j4qYrAz18WYITdJtSk8Wya46T/60fsooqr+nIj6TPNt WwpHxtMZmvXRzKc/tvvVuozFDF9wptJUGSPTEQhw3QOEr3gCMIQ8PwGsPc//O/6c Q5UO9vt7frdOjViq3DVCFc2cJiTJ1HX6pacqVEGVDmTTwVBmblG70to8rYYAC/Sy HAZN4FgYuoPMYcR81C1StOnoydGDFLmSgmsDfusXy6uXOB3mQTO5sSo/0mv26cAK nIodaFRoF+Qfj6pQr1gl7qp9R43+ErVQvynP1pAnJp6jRo9Jp5AVf5S9GRpKdtAB 88hjr9g1Lg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:03 2026 by rpki-client