This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer (raw, json) Hash identifier: cqImv1blGRHIsOVm5TNuN19n8s9bP7AReeY5VDKNEHY= Subject key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D35CE8EE5B40B425B71B321443E4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216274 IP: 83.97.36.0/24 IP: 185.165.194.0/24 IP: 2a10:a180::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:ce:8e:e5:b4:0b:42:5b:71:b3:21:44:3e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:2e:7e:b8:4e:ff:54:b6:4b:56:10:b1:2d: 79:f9:96:d0:8f:cb:07:59:3e:e8:17:ba:17:6a:65: 8f:2f:8a:d4:27:bb:27:f1:57:72:d9:35:99:a5:f4: 00:f6:ee:bd:e0:aa:e1:ab:78:44:94:ce:23:be:fd: 26:40:57:75:36:d3:32:2c:35:91:30:95:46:8b:d8: d4:5e:0e:d5:a6:a7:08:33:a8:70:02:a6:35:32:6d: ac:ab:82:ba:58:a8:50:cf:ef:bb:1d:9a:71:14:75: 37:ec:f7:a5:aa:81:53:83:76:29:a8:45:d5:7b:aa: 65:50:de:af:3e:6d:28:8d:7e:2f:8e:80:34:18:11: 4c:f6:42:be:93:9b:2f:0b:87:32:0a:ee:fe:9e:f1: a2:d6:ac:05:ee:93:32:8c:4a:a9:8f:62:75:9b:17: 1e:b0:e8:1b:a0:3e:e9:d5:1d:ed:cf:df:a5:25:d3: 89:29:11:5e:62:96:8f:1a:f0:f0:01:23:b0:c3:f4: 99:d4:c5:d7:6a:2f:5d:cc:73:cd:33:ed:f5:98:4d: 3c:8a:d2:70:18:14:db:d4:ea:49:f6:e0:41:06:a0: d7:81:f0:6c:78:5a:44:fb:87:ce:11:6d:23:9c:3a: bf:f0:2e:35:18:7c:20:95:2f:44:1f:11:90:95:81: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.36.0/24 185.165.194.0/24 IPv6: 2a10:a180::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216274 Signature Algorithm: sha256WithRSAEncryption ae:0e:f6:b0:e8:df:ce:29:50:be:42:3e:ae:15:da:00:56:14: 36:8c:80:a3:8f:54:88:a7:e8:a7:91:9a:32:6a:cb:0b:bf:36: 85:9c:e5:75:d0:7e:97:7d:9b:bc:d3:4a:b5:7f:ec:c3:60:0b: 63:e8:66:d4:22:75:ba:0a:ac:af:e1:6b:7b:d6:a7:99:d2:6d: e6:a9:ca:8d:d8:9d:e1:28:6e:f9:4d:99:65:5a:3c:1d:de:1f: 49:18:e0:97:e7:56:d6:d2:f2:23:ca:80:d6:62:f8:0f:3a:b3: d1:51:07:f2:7c:4c:c9:d6:47:c2:ba:e2:a5:2f:fb:21:6b:0f: ab:17:04:a0:b8:9f:6f:83:88:b1:6a:38:d9:bb:ba:82:c9:1c: d3:94:b6:ea:96:e2:3f:28:37:03:9f:68:c0:a0:98:0d:42:5f: 34:d0:c6:05:c7:b3:9a:3b:28:83:23:8d:9f:48:ae:2c:17:82: e5:3d:d8:78:c5:f0:06:b5:f0:1d:93:37:e5:34:fa:4f:0f:ed: 9f:66:27:80:4d:39:95:65:f3:e4:d8:6e:c3:d0:2c:69:1d:f4: fa:7c:a2:95:d2:98:6c:c7:16:2a:98:4b:35:6e:1b:d2:2c:09: 7e:01:3c:c9:5f:2d:d0:c8:2f:f1:6e:33:4e:27:f2:cd:96:b4: 3f:8e:f7:de -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XTXOjuW0C0JbcbMhRD5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzgxMGVkYzUxYWJkNjFlNjlmM2M2OWVlNDlkODhlOTg5NmE2ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoufrhO/1S2S1YQsS15+ZbQj8sH WT7oF7oXamWPL4rUJ7sn8Vdy2TWZpfQA9u694Krhq3hElM4jvv0mQFd1NtMyLDWR MJVGi9jUXg7VpqcIM6hwAqY1Mm2sq4K6WKhQz++7HZpxFHU37PelqoFTg3YpqEXV e6plUN6vPm0ojX4vjoA0GBFM9kK+k5svC4cyCu7+nvGi1qwF7pMyjEqpj2J1mxce sOgboD7p1R3tz9+lJdOJKRFeYpaPGvDwASOww/SZ1MXXai9dzHPNM+31mE08itJw GBTb1OpJ9uBBBqDXgfBseFpE+4fOEW0jnDq/8C41GHwglS9EHxGQlYFc7wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIyBDtxRq9YeafPGnuSdiOmJam8JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzM5MjU0 Yy01Mjg2LTRiODQtYjY5MS00MDE0NDc4YmI2YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvMzkyNTRj LTUyODYtNGI4NC1iNjkxLTQwMTQ0NzhiYjZjOC8xL2pJRU8zRkdyMWg1cDg4YWU1 SjJJNllscWJ3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAU2EkAwQAuaXCMA0EAgACMAcDBQIqEKGAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNM0jANBgkqhkiG9w0BAQsFAAOCAQEArg72 sOjfzilQvkI+rhXaAFYUNoyAo49UiKfop5GaMmrLC782hZzlddB+l32bvNNKtX/s w2ALY+hm1CJ1ugqsr+Fre9anmdJt5qnKjdid4Shu+U2ZZVo8Hd4fSRjgl+dW1tLy I8qA1mL4Dzqz0VEH8nxMydZHwrripS/7IWsPqxcEoLifb4OIsWo42bu6gskc05S2 6pbiPyg3A59owKCYDUJfNNDGBcezmjsogyONn0iuLBeC5T3YeMXwBrXwHZM35TT6 Tw/tn2YngE05lWXz5Nhuw9AsaR30+nyildKYbMcWKphLNW4b0iwJfgE8yV8t0Mgv 8W4zTifyzZa0P4733g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:09 2026 by rpki-client