This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer File: io-pkrwKYdssvnhuHFnTYMzlRIY.cer (raw, json) Hash identifier: 2I8WXXT5fNOajS9HCF4kKPZqYoApBZszkSfVm+/fVKw= Subject key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8590BFCC3838C76C9DD12CCC584869 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48936 AS: 50473 AS: 199002 IP: 46.151.152.0/21 IP: 80.251.224.0/20 IP: 83.137.48.0/21 IP: 91.214.240.0/22 IP: 94.141.244.0/22 IP: 94.141.252.0/22 IP: 185.21.156.0/22 IP: 185.26.28.0/22 IP: 185.42.124.0/22 IP: 185.61.76.0/22 IP: 185.191.56.0/22 IP: 188.64.165.0 -- 188.64.167.255 IP: 193.105.59.0/24 IP: 195.216.241.0/24 IP: 2a00:1a70::/32 IP: 2a00:ac60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:90:bf:cc:38:38:c7:6c:9d:d1:2c:cc:58:48:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:ad:48:f9:d5:f2:7f:e0:7c:a5:dd:e7:70: c6:dd:9e:3f:0a:a6:4d:66:ef:0c:34:7f:c1:17:3c: 85:f8:23:30:94:ad:30:b7:34:9b:ee:17:ff:ad:32: 5a:0e:92:dc:34:6c:9b:5d:4b:f3:d5:92:ad:16:9a: 52:47:ac:aa:25:a7:d5:60:73:65:38:9f:e0:fc:9e: b9:43:60:6d:81:5d:e5:c5:5d:7c:3b:ae:b3:d8:4f: f3:02:e6:42:fc:4d:2c:0e:3b:93:d3:26:40:cd:41: e9:c8:5f:a4:9f:5e:79:02:07:fc:c2:30:e0:e5:17: 9e:c5:12:ea:3d:93:08:d8:8e:df:a3:01:53:d6:9b: 9e:11:b2:9f:c5:8b:43:fb:86:26:79:99:3f:79:e5: e8:d6:fd:f1:4f:59:68:66:b9:2f:ca:8c:2e:36:e9: 0e:3d:c8:1f:b3:9b:62:bd:ac:86:ed:94:e1:92:a6: 93:fb:97:e5:f2:a1:1e:95:7b:c0:ea:08:ec:c6:b1: e4:f0:88:bb:7e:02:75:10:62:4b:b8:bf:c1:b1:9b: 18:bf:f2:eb:d7:a4:52:dd:07:71:42:23:5e:19:0d: 36:7b:4a:98:37:cd:49:10:60:18:16:a8:88:2a:21: 40:da:2c:3e:64:be:7a:fd:ea:d0:6f:a1:2f:81:bc: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.152.0/21 80.251.224.0/20 83.137.48.0/21 91.214.240.0/22 94.141.244.0/22 94.141.252.0/22 185.21.156.0/22 185.26.28.0/22 185.42.124.0/22 185.61.76.0/22 185.191.56.0/22 188.64.165.0-188.64.167.255 193.105.59.0/24 195.216.241.0/24 IPv6: 2a00:1a70::/32 2a00:ac60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48936 50473 199002 Signature Algorithm: sha256WithRSAEncryption 27:92:97:d9:24:4a:eb:bd:b0:89:06:0f:55:8a:a2:0e:19:45: fe:27:45:a9:28:ab:1a:a4:5d:48:2c:6d:62:1f:1a:7e:76:0d: 85:69:f8:b4:fb:06:06:2a:12:dc:0a:80:20:e7:ac:a5:62:42: 15:7a:da:70:bc:38:ad:9e:80:b1:01:ae:79:f7:0d:7d:46:5c: d2:59:fb:35:a3:e5:e8:69:18:44:4d:09:13:04:a3:41:c8:24: 67:1a:11:59:d2:df:96:24:e5:85:bd:cc:67:cd:a8:ae:9e:6c: 33:b4:00:c9:54:e7:5d:94:59:69:77:0c:d4:7d:64:a6:af:9c: c3:b9:56:5c:f5:e5:2e:41:d4:ce:2c:39:5d:ea:09:e2:03:c2: 25:c4:de:32:0e:01:7d:1c:2d:09:25:d7:33:10:ab:b7:99:b2: 6f:fb:10:c5:66:41:f8:f8:7a:9e:d2:0d:f2:96:22:35:ef:55: 1a:52:cc:75:2e:5d:1a:07:d8:33:8b:70:cc:a5:54:44:b3:8e: f1:5c:09:8d:c2:93:01:eb:61:26:dc:b8:78:06:f2:da:78:86: 96:e0:f3:eb:fe:f0:61:22:36:95:af:c2:ec:85:b9:2b:77:12: 20:51:0a:f9:0e:bf:7a:a4:bc:d4:42:00:3d:62:a4:66:0f:c2: 2e:21:29:9a -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZt/hZC/zDg4x2yd0SzMWEhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThmYTk5MmJjMGE2MWRiMmNiZTc4NmUxYzU5ZDM2MGNjZTU0NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5etSPnV8n/gfKXd53DG3Z4/CqZN Zu8MNH/BFzyF+CMwlK0wtzSb7hf/rTJaDpLcNGybXUvz1ZKtFppSR6yqJafVYHNl OJ/g/J65Q2BtgV3lxV18O66z2E/zAuZC/E0sDjuT0yZAzUHpyF+kn155Agf8wjDg 5ReexRLqPZMI2I7fowFT1pueEbKfxYtD+4YmeZk/eeXo1v3xT1loZrkvyowuNukO Pcgfs5tivayG7ZThkqaT+5fl8qEelXvA6gjsxrHk8Ii7fgJ1EGJLuL/BsZsYv/Lr 16RS3QdxQiNeGQ02e0qYN81JEGAYFqiIKiFA2iw+ZL56/erQb6EvgbzhTQIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFIqPqZK8CmHbLL54bhxZ02DM5USGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzE4MDIy Yy0yZDlkLTQzODAtYTE1Yi05NmE2MDFiYjZiYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMTgwMjJj LTJkOWQtNDM4MC1hMTViLTk2YTYwMWJiNmJhOC8xL2lvLXBrcndLWWRzc3ZuaHVI Rm5UWU16bFJJWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGLBggrBgEF BQcBBwEB/wR8MHowYgQCAAEwXAMEAy6XmAMEBFD74AMEA1OJMAMEAlvW8AMEAl6N 9AMEAl6N/AMEArkVnAMEArkaHAMEArkqfAMEArk9TAMEArm/ODAMAwQAvEClAwQD vECgAwQAwWk7AwQAw9jxMBQEAgACMA4DBQAqABpwAwUAKgCsYDAkBggrBgEFBQcB CAEB/wQVMBOgETAPAgMAvygCAwDFKQIDAwlaMA0GCSqGSIb3DQEBCwUAA4IBAQAn kpfZJErrvbCJBg9ViqIOGUX+J0WpKKsapF1ILG1iHxp+dg2Fafi0+wYGKhLcCoAg 56ylYkIVetpwvDitnoCxAa559w19RlzSWfs1o+XoaRhETQkTBKNByCRnGhFZ0t+W JOWFvcxnzaiunmwztADJVOddlFlpdwzUfWSmr5zDuVZc9eUuQdTOLDld6gniA8Il xN4yDgF9HC0JJdczEKu3mbJv+xDFZkH4+Hqe0g3yliI171UaUsx1Ll0aB9gzi3DM pVREs47xXAmNwpMB62Em3Lh4BvLaeIaW4PPr/vBhIjaVr8LshbkrdxIgUQr5Dr96 pLzUQgA9YqRmD8IuISma -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:47 2026 by rpki-client