This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer File: miIdT5cAcYIi7es06TinZjQ_JOE.cer (raw, json) Hash identifier: 1It+6Wt7bvgoaHcnooqq0CrK4JZfy+xsbR7xKTofcJw= Subject key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA65251DF69900149C112FC934AC78F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205218 IP: 185.225.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:52:51:df:69:90:01:49:c1:12:fc:93:4a:c7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a221d4f9700718222edeb34e938a766343f24e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:1a:42:68:cc:fa:91:5f:75:97:3f:92:23: 12:a1:6d:45:a9:6b:0a:82:83:36:4e:57:43:5b:53: 8f:44:96:a7:13:59:bc:33:f2:d5:57:46:c5:e8:38: 24:f3:20:66:15:a2:90:39:95:76:8c:71:57:f4:1b: 0b:88:f9:4a:9a:e1:90:97:d7:cc:f7:af:47:77:31: 7b:b1:11:98:3a:b7:11:c9:be:f8:11:fb:2a:c2:be: 82:4d:e3:50:0d:19:b6:60:7a:5c:67:e3:2f:40:b1: 08:40:c0:23:c0:51:77:cb:06:93:08:27:ea:62:a7: c8:55:20:d2:21:e9:ff:16:a3:1e:46:09:5a:cc:b8: 7b:3d:8a:7b:26:b9:d4:cf:b1:7d:1f:d1:9b:79:d0: 48:2a:25:9a:1e:dd:48:cc:2b:bb:81:a0:1c:09:bc: 12:3e:d5:0f:4d:e7:d2:6f:9f:88:de:f6:f1:42:f6: 1f:45:f5:01:fb:3d:71:91:22:e7:5f:5e:46:2a:b9: 57:52:c7:8e:b5:9e:b8:ad:6a:e3:72:07:36:ab:e6: a7:08:0c:32:fb:7d:c1:61:da:a9:f2:1b:fe:d7:e3: 08:e5:b9:b5:3a:69:81:8d:e8:81:e8:e6:42:cd:d4: e2:da:32:fd:44:c8:90:25:78:0b:e5:39:27:73:d2: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205218 Signature Algorithm: sha256WithRSAEncryption ab:50:a8:1f:dd:cb:ed:08:98:36:d8:fb:f3:49:d4:a4:f3:f3: 9d:3c:d4:24:ef:0e:96:ab:92:c3:88:45:8e:66:a4:07:bd:fb: 04:3a:29:cf:c0:c5:41:c9:f3:a5:cd:d0:c3:05:17:0e:19:e2: de:8d:a3:aa:8f:ae:2e:64:60:0a:f2:64:c1:b3:86:f3:f5:19: 54:30:44:70:1d:ca:04:cc:c8:73:74:2a:8b:ac:be:b4:52:41: d0:22:74:37:ca:0e:8b:fe:d0:90:90:8d:44:05:99:3c:1c:0d: 30:6d:48:4c:38:b5:50:c2:1b:dd:3c:51:f6:86:bb:06:2e:6e: 1b:51:6e:fe:77:8e:98:77:a5:32:74:53:a1:b6:08:4c:7c:68: b9:26:9c:96:02:bb:52:5b:5b:c3:bd:cb:29:4a:13:c4:e3:80: 45:83:5e:61:43:9b:b3:20:fd:ba:71:42:7e:e9:47:55:c5:d7: 17:d2:7c:01:f2:2c:c7:d5:e0:08:fb:07:d5:6e:2e:9b:4f:12: df:c0:be:80:0a:ff:33:b3:96:9c:b0:e5:2b:ec:de:ef:f4:10: 60:a3:29:b9:e0:59:1e:8a:5a:84:e2:95:3a:95:08:f1:23:73: b4:ce:2a:05:dc:7c:2b:7a:41:ea:bd:b5:de:8a:18:ab:b9:d9: 2e:9e:48:1a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+plJR32mQAUnBEvyTSsePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTIyMWQ0Zjk3MDA3MTgyMjJlZGViMzRlOTM4YTc2NjM0M2YyNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiUaQmjM+pFfdZc/kiMSoW1FqWsK goM2TldDW1OPRJanE1m8M/LVV0bF6Dgk8yBmFaKQOZV2jHFX9BsLiPlKmuGQl9fM 969HdzF7sRGYOrcRyb74Efsqwr6CTeNQDRm2YHpcZ+MvQLEIQMAjwFF3ywaTCCfq YqfIVSDSIen/FqMeRglazLh7PYp7JrnUz7F9H9GbedBIKiWaHt1IzCu7gaAcCbwS PtUPTefSb5+I3vbxQvYfRfUB+z1xkSLnX15GKrlXUseOtZ64rWrjcgc2q+anCAwy +33BYdqp8hv+1+MI5bm1OmmBjeiB6OZCzdTi2jL9RMiQJXgL5Tknc9L51wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJoiHU+XAHGCIu3rNOk4p2Y0PyThMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2FjNjNi Ni01NWM2LTQ2ZGYtOGMxMS03ZGU3YTdjNWJmNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYWM2M2I2 LTU1YzYtNDZkZi04YzExLTdkZTdhN2M1YmY3Mi8xL21pSWRUNWNBY1lJaTdlczA2 VGluWmpRX0pPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCueFcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMhojANBgkqhkiG9w0BAQsFAAOCAQEAq1CoH93L7QiYNtj780nUpPPznTzUJO8O lquSw4hFjmakB737BDopz8DFQcnzpc3QwwUXDhni3o2jqo+uLmRgCvJkwbOG8/UZ VDBEcB3KBMzIc3Qqi6y+tFJB0CJ0N8oOi/7QkJCNRAWZPBwNMG1ITDi1UMIb3TxR 9oa7Bi5uG1Fu/neOmHelMnRTobYITHxouSaclgK7Ultbw73LKUoTxOOARYNeYUOb syD9unFCfulHVcXXF9J8AfIsx9XgCPsH1W4um08S38C+gAr/M7OWnLDlK+ze7/QQ YKMpueBZHopahOKVOpUI8SNztM4qBdx8K3pB6r213ooYq7nZLp5IGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:05 2026 by rpki-client