This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer File: ivp-CzSkdiIssfW8DAXsE7uxSnk.cer (raw, json) Hash identifier: 9x2Rnz7BHDodoffXIb2/RnsMxpBEjcdOqqsAbwX1N1E= Subject key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB88348AE08E03830B19BA39528331 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.31.188.0/22 IP: 2a00:bea0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:88:34:8a:e0:8e:03:83:0b:19:ba:39:52:83:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:3a:ae:53:fa:0b:9c:8a:53:dc:f2:54:19: 16:2f:6d:18:b1:f2:1a:34:8d:52:9e:3c:71:c9:e7: f6:4c:0a:8d:fe:3e:c0:a7:b0:e0:65:b9:e8:35:0c: 51:01:0b:45:ff:42:a1:86:f8:4c:69:9a:75:dc:61: ea:62:0f:d6:32:18:d8:65:67:ae:5a:2d:05:ea:78: 9b:26:6f:1d:ff:14:e0:a9:32:da:dc:81:ae:f0:f1: b3:6b:51:64:3e:d3:0f:c6:3c:da:51:4f:2e:c8:f3: fd:36:ca:86:ae:bc:93:75:dd:3a:3f:2d:47:1b:98: 15:81:25:b5:6a:f8:d6:fb:e3:1d:8e:27:9d:19:a1: fb:70:ef:f7:01:ac:52:de:88:b6:c6:9b:79:24:c7: d8:ba:4f:e0:4b:cc:70:b4:be:24:a1:a2:c3:b3:98: bd:56:7e:73:ce:65:89:be:80:78:1a:5f:56:4c:af: 48:5c:eb:6b:f8:37:14:63:d5:a4:fb:0a:b3:3f:7d: 3f:4a:b7:6e:d2:85:b2:e8:62:a6:cb:23:23:52:69: 64:dc:70:9c:2e:ea:ec:9c:28:ad:2f:32:92:68:28: 4e:d4:8a:22:e3:46:3d:f2:4a:c5:8e:4f:80:cb:d7: 40:48:8e:d5:99:09:85:8b:26:42:8a:e9:43:91:5d: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.188.0/22 IPv6: 2a00:bea0::/32 Signature Algorithm: sha256WithRSAEncryption 89:f6:d5:d1:94:ce:ce:d8:2d:d1:04:f6:a8:64:ea:42:a0:c9: b3:68:47:6c:04:e6:54:13:a9:d2:ea:dd:f8:33:21:41:67:35: 03:8c:82:3e:34:ab:27:eb:8c:ad:01:71:ec:1b:33:ba:47:dc: 63:d5:97:11:8a:1c:c8:be:db:1d:e9:78:57:64:5b:de:1a:e6: a3:21:59:a5:cb:8a:e0:91:55:e4:e3:aa:d8:70:31:04:f3:c5: f3:29:29:3d:22:9f:ec:5a:a6:28:97:cd:11:f6:45:11:2c:ef: 9f:cb:ea:f2:c6:c6:2f:91:68:22:e6:95:db:7c:0a:c9:42:58: 8b:c9:a7:4c:2e:c3:1b:d4:96:2d:92:44:3b:db:0a:8c:e1:0c: bb:2e:74:86:4a:d4:2c:9d:76:71:20:cb:c4:ac:d6:3e:59:a9: 1e:3c:0d:d9:a3:0d:62:41:d0:00:33:36:cb:54:72:87:22:23: 76:0f:a9:34:14:18:7a:83:9a:d7:ca:8e:01:af:30:ef:eb:ce: 31:fb:05:c1:3c:72:82:e4:e3:f2:ff:c8:38:d2:96:c7:6a:c3: e8:92:07:ac:b1:8e:6f:ed:94:f0:07:47:60:c4:ed:48:59:bc: a3:00:e3:74:62:5f:cf:1f:88:19:47:89:1c:44:b7:c3:ed:86: 21:a5:ea:be -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt264g0iuCOA4MLGbo5UoMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWZhN2UwYjM0YTQ3NjIyMmNiMWY1YmMwYzA1ZWMxM2JiYjE0YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Q6rlP6C5yKU9zyVBkWL20YsfIa NI1Snjxxyef2TAqN/j7Ap7DgZbnoNQxRAQtF/0KhhvhMaZp13GHqYg/WMhjYZWeu Wi0F6nibJm8d/xTgqTLa3IGu8PGza1FkPtMPxjzaUU8uyPP9NsqGrryTdd06Py1H G5gVgSW1avjW++MdjiedGaH7cO/3AaxS3oi2xpt5JMfYuk/gS8xwtL4koaLDs5i9 Vn5zzmWJvoB4Gl9WTK9IXOtr+DcUY9Wk+wqzP30/Srdu0oWy6GKmyyMjUmlk3HCc LursnCitLzKSaChO1Ioi40Y98krFjk+Ay9dASI7VmQmFiyZCiulDkV0mswIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIr6fgs0pHYiLLH1vAwF7BO7sUp5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2JhODc2 OS04ZDhhLTRjMTctOTFjNy02YmE3YTk0N2E3ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvYmE4NzY5 LThkOGEtNGMxNy05MWM3LTZiYTdhOTQ3YTdmNy8xL2l2cC1DelNrZGlJc3NmVzhE QVhzRTd1eFNuay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR+8MA0EAgACMAcDBQAqAL6gMA0GCSqGSIb3 DQEBCwUAA4IBAQCJ9tXRlM7O2C3RBPaoZOpCoMmzaEdsBOZUE6nS6t34MyFBZzUD jII+NKsn64ytAXHsGzO6R9xj1ZcRihzIvtsd6XhXZFveGuajIVmly4rgkVXk46rY cDEE88XzKSk9Ip/sWqYol80R9kURLO+fy+ryxsYvkWgi5pXbfArJQliLyadMLsMb 1JYtkkQ72wqM4Qy7LnSGStQsnXZxIMvErNY+WakePA3Zow1iQdAAMzbLVHKHIiN2 D6k0FBh6g5rXyo4BrzDv684x+wXBPHKC5OPy/8g40pbHasPokgessY5v7ZTwB0dg xO1IWbyjAON0Yl/PH4gZR4kcRLfD7YYhpeq+ -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:52 2026 by rpki-client