This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer File: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer (raw, json) Hash identifier: OzB/WLmmOUAI4kWRYATE8GxfJ3Ans4bNm2Smvjdb6M4= Subject key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7BC380270194A4BEF6C220A4FBE14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21212 IP: 185.110.96.0/22 IP: 2a06:53c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bc:38:02:70:19:4a:4b:ef:6c:22:0a:4f:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:8e:e8:cc:c0:41:88:08:53:7f:c6:3a:3a: 83:d2:dc:dc:f5:5b:21:f8:f2:b1:81:30:5f:2b:d2: 33:57:a6:0e:3d:26:a9:6e:22:fa:49:81:f3:67:9f: 5c:b8:45:ab:ae:0f:31:e9:6d:f8:ca:64:e4:e5:b2: d0:93:1a:0e:ef:40:f2:c2:02:0e:21:59:90:92:38: 47:15:b7:d4:e2:c1:76:f4:a4:5c:ca:d7:fc:48:fe: 76:c3:8c:09:90:69:f4:99:ac:53:10:7c:d4:3d:a2: e6:02:95:09:2d:37:07:0b:16:e2:28:8a:f5:16:7f: e9:d4:28:d5:ac:32:0d:48:8c:01:73:4e:40:a9:41: e9:67:d4:1d:06:aa:74:4d:fc:66:9a:60:3b:92:11: ef:0e:c0:f0:37:6d:7e:5b:bd:94:5b:d9:1a:74:6a: 67:a0:ab:91:83:d0:e5:47:1a:79:d5:18:20:44:21: 9d:36:dc:e3:ae:f5:50:c8:f3:7d:a1:9b:dc:e2:f2: 85:cb:c6:3d:8b:4c:58:30:23:eb:63:10:4d:58:4a: a4:c4:fd:17:0c:09:74:7d:13:ef:16:2b:15:b4:95: 87:2b:a3:b5:9d:5d:c4:27:b6:a5:27:94:ad:f1:2e: f9:43:28:20:d9:ce:66:59:51:64:20:91:d8:db:ac: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.96.0/22 IPv6: 2a06:53c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21212 Signature Algorithm: sha256WithRSAEncryption 55:00:4e:6f:b7:0f:e2:ce:0e:7a:0f:d0:c3:d9:45:ee:fe:03: a6:e0:48:29:22:a2:4e:3b:81:94:5a:23:86:0c:c4:61:8e:65: a7:fd:0b:8c:3a:e2:c9:68:db:57:6e:54:ed:b9:1d:c7:c4:77: b8:b4:68:02:1b:fe:b3:52:6e:2e:58:d7:e8:ef:09:c6:fd:82: 9d:bb:24:5c:81:bc:40:d8:45:9c:19:8a:a2:28:e8:f4:a1:cf: c7:4b:66:47:00:9e:df:cf:8a:1b:4e:16:72:41:c4:02:8a:d6: 26:74:d7:9a:e4:b2:1e:45:57:a4:84:cb:68:ab:6b:ce:8b:b8: dd:f7:85:d4:d4:e8:89:a1:ec:a3:7a:32:b1:d9:db:e2:00:3a: 1d:25:cd:be:08:8d:01:09:e7:aa:a2:41:8b:f7:33:08:bb:8d: f4:5c:7f:f3:5d:33:4e:45:d0:d3:86:33:97:86:01:4d:97:70: 65:38:c6:45:ee:63:a1:e9:e6:81:1d:73:52:e4:f9:04:81:79: 8c:e2:6e:2c:a1:3f:0f:24:89:ee:1c:12:14:5f:3d:6f:3b:1d: fb:e8:46:a6:0a:1f:c8:13:22:c0:97:ef:bf:bd:f4:25:a2:d6: 06:55:6f:3c:ec:c7:dd:8f:d7:2c:6b:f6:38:0b:6d:2f:16:b8: 8f:6b:47:5f -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt6x7w4AnAZSkvvbCIKT74UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTNlYzA1MzcyNDJmNDRjZTdkNTkzM2U5YjMyMjA0YjNmODVlOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAiO6MzAQYgIU3/GOjqD0tzc9Vsh +PKxgTBfK9IzV6YOPSapbiL6SYHzZ59cuEWrrg8x6W34ymTk5bLQkxoO70DywgIO IVmQkjhHFbfU4sF29KRcytf8SP52w4wJkGn0maxTEHzUPaLmApUJLTcHCxbiKIr1 Fn/p1CjVrDINSIwBc05AqUHpZ9QdBqp0TfxmmmA7khHvDsDwN21+W72UW9kadGpn oKuRg9DlRxp51RggRCGdNtzjrvVQyPN9oZvc4vKFy8Y9i0xYMCPrYxBNWEqkxP0X DAl0fRPvFisVtJWHK6O1nV3EJ7alJ5St8S75Qygg2c5mWVFkIJHY26xkBQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFIo+wFNyQvRM59WTPpsyIEs/hemfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzllYjAw Mi1kMjZhLTQ2ZDYtOWQ4Ny04NDA5MzA2MWU5ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOWViMDAy LWQyNmEtNDZkNi05ZDg3LTg0MDkzMDYxZTlmZi8xL2lqN0FVM0pDOUV6bjFaTS1t eklnU3otRjZaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuW5gMA0EAgACMAcDBQMqBlPAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlLcMA0GCSqGSIb3DQEBCwUAA4IBAQBVAE5vtw/izg56 D9DD2UXu/gOm4EgpIqJOO4GUWiOGDMRhjmWn/QuMOuLJaNtXblTtuR3HxHe4tGgC G/6zUm4uWNfo7wnG/YKduyRcgbxA2EWcGYqiKOj0oc/HS2ZHAJ7fz4obThZyQcQC itYmdNea5LIeRVekhMtoq2vOi7jd94XU1OiJoeyjejKx2dviADodJc2+CI0BCeeq okGL9zMIu430XH/zXTNORdDThjOXhgFNl3BlOMZF7mOh6eaBHXNS5PkEgXmM4m4s oT8PJInuHBIUXz1vOx376EamCh/IEyLAl++/vfQlotYGVW887Mfdj9csa/Y4C20v FriPa0df -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:16 2026 by rpki-client