This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer File: iyTYS_9MkhfR3vpd0zTIyFMiams.cer (raw, json) Hash identifier: OKAsYgfXorBdrq5Y8UL0tqqXRXk1faJrvM8JPeRZyqE= Subject key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0E4B0C0E7712835748B0BD6DE1451017 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 30 Jan 2026 09:45:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.60.60.0/22 IP: 2a02:7220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:4b:0c:0e:77:12:83:57:48:b0:bd:6d:e1:45:10:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 30 09:45:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:3f:dc:a1:4c:43:08:35:f0:1e:4e:20:b3: 74:e6:a8:0c:4f:58:9a:c8:7d:e1:b3:04:6e:a4:ba: ab:09:e7:0a:80:e5:a2:02:9a:f6:9e:07:f0:2c:e5: 22:8a:4f:ae:32:c1:3e:d0:f1:1b:af:45:21:c9:c4: e9:4c:e0:40:c3:92:16:9a:55:50:27:8a:b2:d2:0a: b7:a7:82:7b:4c:c6:c1:77:9c:fc:49:7b:51:73:97: 57:ed:4c:d0:cb:08:cd:15:59:5f:b0:cb:09:47:2b: 74:79:f6:02:b0:d2:cb:56:1c:a6:bd:4d:94:41:6f: c6:e9:93:58:b3:52:c3:f3:4b:b9:90:93:09:9d:76: 71:b6:bc:30:0d:02:ed:5a:32:f8:c0:f5:f3:af:f6: d0:81:d7:84:4f:59:67:b0:9f:60:4b:9b:cb:d4:e0: 8c:05:ac:d8:1a:9a:06:50:d8:37:3f:23:34:72:46: 3d:9e:95:3c:78:40:6b:4a:91:48:6a:81:ce:aa:92: ed:cc:45:45:36:c9:37:90:3c:57:de:3d:f1:dc:75: 2c:46:29:4c:67:04:81:8c:0a:af:34:db:d3:44:b8: 41:09:5c:b8:82:56:59:81:76:1a:33:1b:e6:db:e7: 07:cf:cb:ee:e7:ae:7b:44:ba:7d:09:1c:de:66:f1: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.60.0/22 IPv6: 2a02:7220::/32 Signature Algorithm: sha256WithRSAEncryption 85:43:f2:c7:6f:f0:f4:27:bf:70:5d:d1:7b:93:20:f0:5e:f0: 75:43:22:fe:cc:ef:ac:1e:a3:c8:a3:8c:57:50:47:44:24:c3: 67:2d:ef:c2:5c:1d:45:d7:a6:c4:af:14:48:56:4e:1f:f9:98: d5:2c:a4:36:1d:58:7e:a2:c4:29:2b:f0:54:da:ce:6a:fc:2b: 21:ee:33:16:38:0c:8b:51:89:c4:cb:62:cf:59:8c:44:73:2d: 3e:ec:a5:47:36:d3:68:69:e5:6d:2e:2e:bd:37:82:63:27:2d: 50:f9:a4:e5:33:b7:ff:1d:54:b9:4d:69:65:f0:53:c7:95:3a: 5d:25:e0:30:22:65:fe:9c:87:95:16:7d:d0:3e:97:e3:e3:64: 73:30:90:77:1d:2e:8f:d9:5c:a6:75:1f:8b:e3:34:1f:49:ba: c0:3a:27:eb:f0:f9:8f:01:12:89:0e:16:4c:18:6d:1b:f9:90: 60:b6:2a:3a:f6:7c:b1:db:88:5f:c2:07:ed:8d:f2:bd:3c:a1: 7b:7a:f9:9f:37:84:f2:ea:6b:85:06:ba:a8:6a:58:42:a5:9a: b6:08:48:19:a1:39:7b:04:7a:ec:5d:53:45:d6:cf:27:a9:58: ab:bc:35:2e:56:c4:62:9b:03:7b:bb:e1:02:7e:32:20:ea:1e: a1:8b:8e:28 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZwOSwwOdxKDV0iwvW3hRRAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTMwMDk0NTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjI0ZDg0YmZmNGM5MjE3ZDFkZWZhNWRkMzM0YzhjODUzMjI2YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi8/3KFMQwg18B5OILN05qgMT1ia yH3hswRupLqrCecKgOWiApr2ngfwLOUiik+uMsE+0PEbr0UhycTpTOBAw5IWmlVQ J4qy0gq3p4J7TMbBd5z8SXtRc5dX7UzQywjNFVlfsMsJRyt0efYCsNLLVhymvU2U QW/G6ZNYs1LD80u5kJMJnXZxtrwwDQLtWjL4wPXzr/bQgdeET1lnsJ9gS5vL1OCM BazYGpoGUNg3PyM0ckY9npU8eEBrSpFIaoHOqpLtzEVFNsk3kDxX3j3x3HUsRilM ZwSBjAqvNNvTRLhBCVy4glZZgXYaMxvm2+cHz8vu5657RLp9CRzeZvF1YwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIsk2Ev/TJIX0d76XdM0yMhTImprMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2I1Njli ZS01NDNhLTRiNTktOGFkMC02NTYwY2U0YWQwNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvYjU2OWJl LTU0M2EtNGI1OS04YWQwLTY1NjBjZTRhZDA2ZC8xL2l5VFlTXzlNa2hmUjN2cGQw elRJeUZNaWFtcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTw8MA0EAgACMAcDBQAqAnIgMA0GCSqGSIb3 DQEBCwUAA4IBAQCFQ/LHb/D0J79wXdF7kyDwXvB1QyL+zO+sHqPIo4xXUEdEJMNn Le/CXB1F16bErxRIVk4f+ZjVLKQ2HVh+osQpK/BU2s5q/Csh7jMWOAyLUYnEy2LP WYxEcy0+7KVHNtNoaeVtLi69N4JjJy1Q+aTlM7f/HVS5TWll8FPHlTpdJeAwImX+ nIeVFn3QPpfj42RzMJB3HS6P2VymdR+L4zQfSbrAOifr8PmPARKJDhZMGG0b+ZBg tio69nyx24hfwgftjfK9PKF7evmfN4Ty6muFBrqoalhCpZq2CEgZoTl7BHrsXVNF 1s8nqVirvDUuVsRimwN7u+ECfjIg6h6hi44o -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:42 2026 by rpki-client