This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer File: iuS5P-tx3eKCO3DH27eeD5m1bBs.cer (raw, json) Hash identifier: n9gviFBVodRkziiHbOi7zZf8T3JmdOZipcnP816+J5w= Subject key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79BBD5C26AA4D63DD3D26BB6EFEDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199162 IP: 46.245.235.0/24 IP: 194.180.6.0/23 IP: 2a13:da80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9b:bd:5c:26:aa:4d:63:dd:3d:26:bb:6e:fe:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:d7:16:70:27:72:f0:8b:68:40:ee:81:e1: bb:62:c6:b4:84:ea:a9:86:e8:fc:eb:8d:08:95:2a: 0a:4f:9f:54:0f:3d:75:f1:27:6d:a1:d5:5c:fe:00: b1:83:ad:a0:6b:31:7a:8d:e8:87:38:b6:c4:53:e5: 2a:a9:00:73:73:3b:a3:de:cf:af:e6:9f:81:6b:70: 90:81:8c:01:13:fe:da:93:11:a2:01:19:6a:72:96: 4f:16:d4:cc:40:f5:b2:76:c7:43:2f:1e:94:26:9a: 7f:31:d9:36:2d:3e:1e:7b:45:1a:de:6c:c9:7d:0b: d5:ba:30:b6:27:c9:ac:dc:2a:e2:11:b5:8a:a2:a9: b8:af:c5:82:81:46:fa:84:c3:60:98:ba:6e:d5:76: 3d:42:ac:98:a3:06:7b:d5:68:e7:f6:1a:5b:31:a4: be:99:66:30:c2:d6:f0:61:12:c7:4c:d0:ca:5a:ec: 2e:9d:8b:bd:db:31:04:c8:9c:17:6d:95:3b:5e:09: 14:1c:18:91:0b:24:e1:62:14:e8:d8:df:66:2e:78: 9e:b4:26:f5:0c:95:86:38:7b:ca:73:65:88:39:f6: 7c:45:ec:34:43:71:ec:b0:58:7f:03:79:f2:bc:24: c3:f6:e0:6c:1d:b6:2c:97:44:9b:eb:ca:5b:a7:08: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.235.0/24 194.180.6.0/23 IPv6: 2a13:da80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199162 Signature Algorithm: sha256WithRSAEncryption 81:a2:fa:a4:55:11:97:de:38:23:b5:06:b0:62:ac:65:af:3d: 2b:00:b5:0f:6e:53:04:63:02:f6:dd:cf:21:2e:ce:a9:8a:7f: ea:13:9f:04:cf:71:58:ea:16:66:5b:9b:c4:64:7a:9a:f8:b7: fd:4e:23:2b:43:78:04:fa:49:dd:e6:a2:59:3b:49:c4:3d:42: 21:ef:95:2a:d9:d7:23:ff:da:45:09:37:4e:9a:72:48:c2:98: 89:32:dd:ec:e0:09:09:91:1a:1b:28:1c:5f:85:a4:dd:92:05: 1e:52:0c:c2:bc:08:6a:12:9e:36:58:69:57:41:24:bd:0a:ef: a6:05:71:dd:09:0f:44:b7:3c:b8:2f:1b:23:a0:55:c2:68:5e: f3:9e:b6:ca:a7:76:b2:93:16:45:0c:e2:d3:31:61:dd:83:0e: 5e:d3:dd:53:d1:23:49:ae:44:f6:30:39:df:51:06:0f:5e:3f: ce:e8:04:eb:f0:02:12:da:d3:a5:5c:60:64:f4:01:04:97:dd: 78:12:47:1c:c1:f6:f5:7d:e3:f8:10:1b:40:45:ed:35:71:7b: f7:3b:33:b4:41:f8:8b:61:38:cc:5d:c1:1e:da:fd:6a:57:e6: a3:3f:37:26:41:32:cf:78:3c:e9:e8:c6:91:e1:81:e7:7f:38: 21:d2:69:98 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6x5u9XCaqTWPdPSa7bv7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWU0YjkzZmViNzFkZGUyODIzYjcwYzdkYmI3OWUwZjk5YjU2YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo53XFnAncvCLaEDugeG7Ysa0hOqp huj8640IlSoKT59UDz118SdtodVc/gCxg62gazF6jeiHOLbEU+UqqQBzczuj3s+v 5p+Ba3CQgYwBE/7akxGiARlqcpZPFtTMQPWydsdDLx6UJpp/Mdk2LT4ee0Ua3mzJ fQvVujC2J8ms3CriEbWKoqm4r8WCgUb6hMNgmLpu1XY9QqyYowZ71Wjn9hpbMaS+ mWYwwtbwYRLHTNDKWuwunYu92zEEyJwXbZU7XgkUHBiRCyThYhTo2N9mLnietCb1 DJWGOHvKc2WIOfZ8Rew0Q3HssFh/A3nyvCTD9uBsHbYsl0Sb68pbpwjTqwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIrkuT/rcd3igjtwx9u3ng+ZtWwbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzcwZTY3 OC04NDk1LTQ2YWUtOTZkNy0yOWM1MTc2OTAyYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNzBlNjc4 LTg0OTUtNDZhZS05NmQ3LTI5YzUxNzY5MDJjNi8xL2l1UzVQLXR4M2VLQ08zREgy N2VlRDVtMWJCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALvXrAwQBwrQGMA0EAgACMAcDBQMqE9qAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMJ+jANBgkqhkiG9w0BAQsFAAOCAQEAgaL6 pFURl944I7UGsGKsZa89KwC1D25TBGMC9t3PIS7OqYp/6hOfBM9xWOoWZlubxGR6 mvi3/U4jK0N4BPpJ3eaiWTtJxD1CIe+VKtnXI//aRQk3TppySMKYiTLd7OAJCZEa GygcX4Wk3ZIFHlIMwrwIahKeNlhpV0EkvQrvpgVx3QkPRLc8uC8bI6BVwmhe8562 yqd2spMWRQzi0zFh3YMOXtPdU9EjSa5E9jA531EGD14/zugE6/ACEtrTpVxgZPQB BJfdeBJHHMH29X3j+BAbQEXtNXF79zsztEH4i2E4zF3BHtr9alfmoz83JkEyz3g8 6ejGkeGB5384IdJpmA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:59 2026 by rpki-client