This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer (raw, json) Hash identifier: eiA217DV1eyJRdThhTQzYlCkPMimds/eEWKttW9AlF8= Subject key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6126169097473227C98902EDC512 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.242.140.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:61:26:16:90:97:47:32:27:c9:89:02:ed:c5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8af7f32d33f6646779a51fb23201c6442d1451ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:fc:28:0a:27:6a:60:0f:37:1f:cc:c6:29: 60:a5:3f:24:62:d0:bb:c0:1b:e1:aa:fd:26:3f:8b: f8:4d:f9:e1:f6:3c:ac:36:af:b5:59:b4:b6:ef:66: 54:81:bf:61:61:64:dd:79:a1:45:4d:af:a8:bf:d5: ec:d4:71:90:0e:5c:11:49:88:21:9e:7b:66:d6:7d: 57:2a:44:26:38:98:09:d0:3c:7f:f8:a9:7e:bc:a5: c6:2d:70:f3:5c:2e:b2:19:26:ff:ed:2a:db:f5:da: 2e:27:c7:9a:38:a3:92:5b:aa:02:f5:0e:eb:db:71: 71:c3:42:99:6a:4e:9f:42:90:c3:f7:f9:6d:19:13: ac:74:19:48:a3:6a:41:72:3b:38:37:5c:9f:e1:e4: 5f:f6:3d:b3:5d:29:cd:5a:89:fe:76:8c:f2:7b:0a: 8d:ae:f9:31:45:4e:46:f5:57:eb:c9:4b:26:34:6b: ea:e2:78:ee:ef:98:72:15:f3:fe:12:b6:0c:7e:0a: 06:db:86:2e:79:df:da:29:df:65:07:45:f2:40:b4: 74:74:c6:24:5e:4e:70:2d:41:a6:8c:ed:f5:2d:c9: 41:18:00:90:d7:51:fc:df:78:67:29:f5:82:24:45: 3f:64:7b:27:fe:1f:0d:39:8d:a6:ac:76:3b:4e:a9: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.140.0/23 Signature Algorithm: sha256WithRSAEncryption 31:09:43:17:fe:29:48:38:96:7a:62:67:d5:ae:3f:34:cf:c0: 62:ad:0b:b8:0e:08:e4:5a:11:65:c3:ab:65:5c:d6:06:2f:60: 00:ee:a8:1f:7f:e0:27:26:c8:7a:c6:93:0a:db:49:a6:11:17: c8:75:b2:af:76:39:89:21:f4:53:89:9b:f2:3e:d4:a1:29:d2: d5:8a:fc:4a:cb:1c:20:94:d1:79:41:9a:6e:b3:80:43:ac:2c: c0:44:ba:f6:6c:de:a0:4f:7a:73:8d:f0:75:42:9c:c9:dc:ad: 5e:cc:90:e6:9f:35:1f:bc:9e:fe:5a:3f:2e:19:77:a9:5c:b5: 2c:79:2b:fc:aa:f8:74:6d:7e:b3:f9:20:ce:3c:0c:19:15:02: 50:7a:0d:db:ed:c8:b6:60:55:11:47:22:dc:e6:55:7d:84:6e: a6:c6:25:3d:44:dc:7f:fb:2e:62:bf:9d:db:b9:cf:34:08:6b: 28:a2:d7:4d:77:60:3f:ba:ed:84:5b:41:f3:9c:cc:97:ae:e7: 8a:59:12:8c:f0:db:ad:33:d5:55:a5:05:6f:a9:12:5c:72:a0: 51:61:cb:a8:9c:6b:45:04:4e:e9:64:bb:8f:62:06:7d:f0:9d: 1e:e9:0e:9e:bd:a3:01:74:f4:7e:35:2f:eb:45:04:45:b0:28: 0f:e7:93:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt262EmFpCXRzInyYkC7cUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWY3ZjMyZDMzZjY2NDY3NzlhNTFmYjIzMjAxYzY0NDJkMTQ1MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQf8KAonamAPNx/MxilgpT8kYtC7 wBvhqv0mP4v4Tfnh9jysNq+1WbS272ZUgb9hYWTdeaFFTa+ov9Xs1HGQDlwRSYgh nntm1n1XKkQmOJgJ0Dx/+Kl+vKXGLXDzXC6yGSb/7Srb9douJ8eaOKOSW6oC9Q7r 23Fxw0KZak6fQpDD9/ltGROsdBlIo2pBcjs4N1yf4eRf9j2zXSnNWon+dozyewqN rvkxRU5G9VfryUsmNGvq4nju75hyFfP+ErYMfgoG24Yued/aKd9lB0XyQLR0dMYk Xk5wLUGmjO31LclBGACQ11H833hnKfWCJEU/ZHsn/h8NOY2mrHY7TqkHNQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIr38y0z9mRneaUfsjIBxkQtFFHKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2FmZmNi Yi1jMWIzLTQ0NGEtODc2Yy01YjcyZmI5MjdkMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYWZmY2Ji LWMxYjMtNDQ0YS04NzZjLTViNzJmYjkyN2QxYy8xL2l2ZnpMVFAyWkdkNXBSLXlN Z0hHUkMwVVVjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/KMMA0GCSqGSIb3DQEBCwUAA4IBAQAxCUMX /ilIOJZ6YmfVrj80z8BirQu4DgjkWhFlw6tlXNYGL2AA7qgff+AnJsh6xpMK20mm ERfIdbKvdjmJIfRTiZvyPtShKdLVivxKyxwglNF5QZpus4BDrCzARLr2bN6gT3pz jfB1QpzJ3K1ezJDmnzUfvJ7+Wj8uGXepXLUseSv8qvh0bX6z+SDOPAwZFQJQeg3b 7ci2YFURRyLc5lV9hG6mxiU9RNx/+y5iv53buc80CGsootdNd2A/uu2EW0HznMyX rueKWRKM8NutM9VVpQVvqRJccqBRYcuonGtFBE7pZLuPYgZ98J0e6Q6evaMBdPR+ NS/rRQRFsCgP55NZ -----END CERTIFICATE-----Generated at Wed Jan 28 17:53:57 2026 by rpki-client