This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer (raw, json) Hash identifier: mQXO7zi5ijSX4LpQjb049BULQq2MzmoWCphlAgGSHEI= Subject key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC88BE98C0B4112E64E37F603E6B17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51621 IP: 185.216.49.0/24 IP: 185.217.130.0/24 IP: 2a10:a900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:88:be:98:c0:b4:11:2e:64:e3:7f:60:3e:6b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:cd:bb:2c:41:3a:81:ca:6a:dd:98:44:69: ab:a6:dc:48:5e:ab:40:59:da:b3:2c:0e:f8:c7:ad: fc:99:21:e5:be:44:0e:e5:95:29:d7:79:8b:e4:c2: 52:96:ae:7e:b2:fa:2a:3d:54:7a:4c:68:81:6a:21: 3f:cc:c8:69:98:49:09:ff:80:44:e3:36:7e:8c:07: ae:94:d1:8f:75:c2:24:18:73:6b:96:80:d0:8f:d3: 31:4e:ee:c3:d9:38:b5:f1:c6:d4:0b:8b:f5:36:8b: f5:82:19:68:5b:d3:f4:cd:19:6a:a1:b9:4c:ad:ae: 87:38:30:5e:82:58:be:13:d9:d9:a9:e5:de:28:f0: e6:39:2f:0d:a0:d0:19:e5:14:f5:56:f6:23:7c:ed: 54:f3:f5:c7:d1:8f:65:ee:cf:af:4c:bc:20:7d:12: 9a:81:03:4b:6f:9d:b1:ac:cb:88:18:a0:f0:ab:d9: 1c:93:ae:07:07:4e:c5:4d:74:71:e0:3a:47:1d:b3: 4d:d4:d8:14:a4:a9:b6:5d:1f:bd:98:70:83:cd:3c: fe:5b:25:5e:e8:a3:60:27:ec:12:25:eb:00:89:c4: 3f:46:d1:60:70:3e:86:8e:09:3e:7c:37:ed:09:0a: 3a:cb:8b:fa:bd:87:4b:5c:58:a3:f1:66:83:f9:9b: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.49.0/24 185.217.130.0/24 IPv6: 2a10:a900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51621 Signature Algorithm: sha256WithRSAEncryption 8f:aa:f0:eb:74:e0:ec:58:b9:b8:44:09:bc:ba:3e:e6:a2:62: 32:dc:65:09:ce:f2:7e:20:60:ac:63:36:f6:2a:7f:d4:72:d7: a3:68:be:23:a7:8c:e0:11:16:74:7a:10:08:82:f8:28:b7:2f: 17:52:f7:79:32:1d:41:0d:91:e7:73:0b:c4:6a:f4:e1:4d:e5: c0:b3:60:9e:2a:82:da:65:e7:d8:d9:e2:b4:ae:c4:98:34:9a: 9b:da:82:51:4f:4f:86:7a:ee:fb:92:b7:9c:40:a4:13:4d:61: 84:d9:5c:08:34:49:d8:c2:b2:84:51:35:1d:27:fa:3a:d4:87: 2f:39:95:58:4e:13:ae:49:2f:f4:c4:33:e8:c5:01:80:d9:33: 70:34:aa:42:ed:13:c6:58:cc:ff:9a:2d:63:93:f7:ff:10:b4: 70:39:12:b4:62:85:5e:50:6a:2c:96:8c:c0:a9:fa:60:b8:11: bb:11:57:a1:1f:d2:ac:39:fd:2f:85:5a:5d:c3:83:50:df:d3: c0:ba:26:c5:9d:3e:65:af:95:86:69:39:a0:81:d7:ae:b9:43: be:94:15:fc:8b:77:f1:4f:f7:94:f4:ab:db:41:7e:90:ce:e5: a7:5d:7f:5b:1b:53:56:39:74:b0:ac:d6:e5:ea:8b:da:c5:55: dd:8c:e0:82 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57Ii+mMC0ES5k439gPmsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWMxNDk4NWNiNTQ0YzZkMjNkMTliYjQzYWM5MzcxMWFmZTkxZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lvNuyxBOoHKat2YRGmrptxIXqtA WdqzLA74x638mSHlvkQO5ZUp13mL5MJSlq5+svoqPVR6TGiBaiE/zMhpmEkJ/4BE 4zZ+jAeulNGPdcIkGHNrloDQj9MxTu7D2Ti18cbUC4v1Nov1ghloW9P0zRlqoblM ra6HODBegli+E9nZqeXeKPDmOS8NoNAZ5RT1VvYjfO1U8/XH0Y9l7s+vTLwgfRKa gQNLb52xrMuIGKDwq9kck64HB07FTXRx4DpHHbNN1NgUpKm2XR+9mHCDzTz+WyVe 6KNgJ+wSJesAicQ/RtFgcD6Gjgk+fDftCQo6y4v6vYdLXFij8WaD+ZsBcwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIrBSYXLVExtI9GbtDrJNxGv6R8YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzU4NmY3 Ny02ZjMyLTRiOTYtOTgzOC1hNTg5NDY5M2FmMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvNTg2Zjc3 LTZmMzItNGI5Ni05ODM4LWE1ODk0NjkzYWYxMC8xL2lzRkpoY3RVVEcwajBadTBP c2szRWFfcEh4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAudgxAwQAudmCMA0EAgACMAcDBQMqEKkAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDJpTANBgkqhkiG9w0BAQsFAAOCAQEAj6rw 63Tg7Fi5uEQJvLo+5qJiMtxlCc7yfiBgrGM29ip/1HLXo2i+I6eM4BEWdHoQCIL4 KLcvF1L3eTIdQQ2R53MLxGr04U3lwLNgniqC2mXn2NnitK7EmDSam9qCUU9Phnru +5K3nECkE01hhNlcCDRJ2MKyhFE1HSf6OtSHLzmVWE4Trkkv9MQz6MUBgNkzcDSq Qu0TxljM/5otY5P3/xC0cDkStGKFXlBqLJaMwKn6YLgRuxFXoR/SrDn9L4VaXcOD UN/TwLomxZ0+Za+Vhmk5oIHXrrlDvpQV/It38U/3lPSr20F+kM7lp11/WxtTVjl0 sKzW5eqL2sVV3Yzggg== -----END CERTIFICATE-----Generated at Sat Jan 24 02:13:26 2026 by rpki-client