This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer (raw, json) Hash identifier: kZ4E8wbhvqgvbM4Xf7lBBPvlS7+ixbAmubN30lTDubQ= Subject key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F811B3E20B2FAB6B1D53ED300735F22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211368 IP: 185.45.253.0/24 IP: 2a13:e6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1b:3e:20:b2:fa:b6:b1:d5:3e:d3:00:73:5f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b03dca76319903152f246e05c069fd1a1db5c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:53:71:cd:af:36:ee:ec:82:8f:89:d0:cc: 90:39:69:1a:7b:29:b4:ef:0d:a7:17:c7:26:f2:81: 26:89:1a:02:d3:6b:38:a7:89:95:5f:bf:1b:f4:6c: f1:a0:89:e5:83:aa:12:96:91:3a:ed:aa:07:68:56: ba:b3:c9:a1:4e:bf:74:6c:b1:76:3f:7b:91:f9:35: 20:60:bc:eb:1d:ff:65:6a:7a:19:f9:11:52:f7:84: 9d:72:c9:9c:17:40:09:8a:99:dd:39:0e:d1:60:80: f5:76:88:2b:e0:a5:8b:fd:e6:9e:1b:12:15:3c:1d: 30:67:8a:38:24:a2:20:d2:2f:14:76:c0:d5:1b:6c: 5c:22:c7:64:94:36:fa:d9:a7:83:9a:80:e3:a8:8e: 7b:bb:e1:0d:57:f2:15:12:d6:14:4c:97:44:46:44: 9a:39:27:44:0d:44:97:2d:3b:29:57:7c:85:1b:c6: 1f:24:07:18:ad:e7:84:03:d1:e7:12:3c:58:e1:bc: df:3f:5c:db:b8:11:ab:69:e6:e7:aa:4a:5c:49:8a: 8d:b0:eb:f3:2f:34:7f:ff:0f:e7:00:43:2e:ec:c9: 0e:c1:89:26:d1:8d:68:b2:33:02:97:01:44:3f:ff: b5:7a:8e:d7:3f:f7:80:82:f6:cc:51:da:6e:11:74: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.253.0/24 IPv6: 2a13:e6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211368 Signature Algorithm: sha256WithRSAEncryption 8f:07:12:ef:f8:65:6d:a9:cb:00:35:8f:29:a8:b9:1e:8b:3c: 0e:e5:26:11:a0:70:52:87:c5:f3:35:b0:b9:50:62:b6:43:b6: c9:60:57:d5:53:23:0b:b8:f3:f0:a8:a3:1c:93:cc:17:db:07: 92:d4:a5:7f:8d:e3:ea:c3:25:94:fc:01:c2:6b:db:53:2f:2f: 9e:db:60:52:1d:55:5d:11:37:85:67:18:fa:5c:9e:b2:4a:e6: 80:af:26:f0:06:cd:f0:8d:cc:9c:76:9c:a3:29:a6:51:4d:ac: 34:01:6a:bf:15:1a:47:0a:40:f8:02:1d:58:ec:d0:7b:7b:35: 68:69:d6:14:4e:a8:c5:70:f7:d5:3f:e0:e4:8e:85:e2:de:62: 15:69:47:f5:33:83:48:91:cd:34:fc:80:0d:67:f9:c5:9c:36: ee:69:6e:de:e8:73:f0:e9:ba:0f:cd:48:3b:fe:43:84:1e:61: 7c:8d:a3:9b:ff:5a:fa:2c:d5:91:b6:9a:60:2e:09:e8:b1:1a: ea:db:36:61:16:de:8d:1d:89:ad:a6:b4:c7:ae:3e:f7:af:e0: f2:ea:ba:25:86:33:6f:42:c4:38:ce:34:70:fb:fe:4b:56:c3: 44:20:38:1d:71:d5:ae:47:8e:2a:2a:b9:f1:e7:ed:55:ed:6c: aa:e7:c6:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gRs+ILL6trHVPtMAc18iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjAzZGNhNzYzMTk5MDMxNTJmMjQ2ZTA1YzA2OWZkMWExZGI1YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhFTcc2vNu7sgo+J0MyQOWkaeym0 7w2nF8cm8oEmiRoC02s4p4mVX78b9GzxoInlg6oSlpE67aoHaFa6s8mhTr90bLF2 P3uR+TUgYLzrHf9lanoZ+RFS94SdcsmcF0AJipndOQ7RYID1dogr4KWL/eaeGxIV PB0wZ4o4JKIg0i8UdsDVG2xcIsdklDb62aeDmoDjqI57u+ENV/IVEtYUTJdERkSa OSdEDUSXLTspV3yFG8YfJAcYreeEA9HnEjxY4bzfP1zbuBGraebnqkpcSYqNsOvz LzR//w/nAEMu7MkOwYkm0Y1osjMClwFEP/+1eo7XP/eAgvbMUdpuEXSeXQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIsD3KdjGZAxUvJG4FwGn9Gh21xZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzMwY2Ri ZS0xMWUxLTQ0Y2EtYjY1NC0wMjllNjNmMDg4OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMzBjZGJl LTExZTEtNDRjYS1iNjU0LTAyOWU2M2YwODg5YS8xL2l3UGNwMk1aa0RGUzhrYmdY QWFmMGFIYlhGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuS39MA0EAgACMAcDBQMqE+bAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5qDANBgkqhkiG9w0BAQsFAAOCAQEAjwcS7/hlbanL ADWPKai5Hos8DuUmEaBwUofF8zWwuVBitkO2yWBX1VMjC7jz8KijHJPMF9sHktSl f43j6sMllPwBwmvbUy8vnttgUh1VXRE3hWcY+lyeskrmgK8m8AbN8I3MnHacoymm UU2sNAFqvxUaRwpA+AIdWOzQe3s1aGnWFE6oxXD31T/g5I6F4t5iFWlH9TODSJHN NPyADWf5xZw27mlu3uhz8Om6D81IO/5DhB5hfI2jm/9a+izVkbaaYC4J6LEa6ts2 YRbejR2Jraa0x64+96/g8uq6JYYzb0LEOM40cPv+S1bDRCA4HXHVrkeOKiq58eft Ve1squfGiA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:40 2026 by rpki-client