This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer (raw, json) Hash identifier: hPx0HBGRKW0AEJ+qOscL7YgOE+ru+Ryl/S5U//iPFgg= Subject key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB8E0F338C79F402508AABD93EE0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.63.228.0/22 IP: 2a03:1060::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b8:e0:f3:38:c7:9f:40:25:08:aa:bd:93:ee:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:89:2c:b5:73:83:fc:22:34:5b:fe:28:89: 2b:ba:d8:8b:1e:b6:79:d6:0b:6f:a3:4f:1c:94:d1: b2:ac:95:60:1d:f4:d6:ec:e4:6e:a8:f9:af:00:25: 3f:50:b1:ed:2b:47:b9:34:c5:0b:bd:bf:63:8c:28: 72:0f:05:03:f7:c1:3a:19:fe:99:46:81:75:7b:10: 2b:59:b2:a3:25:79:e6:48:e3:1d:15:e9:15:1b:f8: 45:d4:8e:68:27:f4:51:16:da:44:1a:5f:0c:04:83: f0:c0:ab:13:d0:16:fe:5b:81:ba:d3:ec:d5:1b:e5: a0:53:5c:dc:82:9d:ae:ee:3f:1d:dc:37:c5:ac:8e: ab:35:f9:87:22:69:f8:71:69:42:31:50:df:06:5c: fe:39:1e:7d:42:a4:dc:f4:e1:d1:0e:e1:4e:d9:56: 39:da:62:4a:cd:2e:e7:49:96:85:e4:5d:22:2f:72: 5d:f2:dc:83:05:2a:3b:28:15:c9:8c:c1:50:7b:fe: ab:b6:e7:13:a6:5d:0b:ce:f1:af:3c:39:39:a9:7e: 79:b6:e6:ce:eb:5a:b0:09:0e:2b:e8:9c:6f:f4:9f: ce:59:ea:3c:e9:20:c3:17:3f:73:3c:97:2c:40:69: 18:13:32:53:7b:39:61:e4:30:f8:ad:c7:51:a4:30: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.228.0/22 IPv6: 2a03:1060::/32 Signature Algorithm: sha256WithRSAEncryption 69:0c:14:c2:cd:f1:59:bf:a4:c9:4b:6f:ac:14:b0:61:0c:37: 8a:80:0d:6e:2b:1a:70:b4:86:19:96:31:14:c9:59:a0:e3:76: 4a:7a:ba:b1:c3:eb:e0:c5:40:06:ab:09:f7:e6:b0:79:37:91: 8d:63:22:02:1a:ab:31:b7:f1:17:bc:7a:c6:bb:82:67:25:86: 28:98:6d:fc:2e:e7:78:59:50:cf:e6:0f:b4:38:74:a0:0e:4e: 0a:d2:70:2f:56:f8:3a:0c:4c:e2:90:8c:d4:e0:7e:f1:d0:5c: ab:6d:07:45:c2:e6:6f:13:af:fc:df:21:9f:05:b3:11:5b:96: 80:e5:47:1c:5e:65:df:04:e5:92:16:2a:87:35:4c:c9:88:f1: 72:4c:44:ed:0b:b3:fd:d2:0c:16:ae:fb:77:47:1e:ab:12:27: e2:b8:a9:7c:0a:80:f4:aa:ab:52:88:32:af:41:ca:7e:4f:53: 41:1d:9c:fd:3d:01:d1:dc:c9:cc:24:bd:9d:53:cb:c9:dd:61: ea:cf:b5:22:6b:27:1e:5d:96:9a:d5:74:13:04:b5:4e:6e:07: b3:06:89:7b:74:46:2d:02:06:9f:2a:6b:d1:3d:0d:0d:c5:0d: 12:55:4f:8f:7d:31:7a:81:a5:6a:16:fa:62:cb:60:c1:c3:6b: 51:c1:b6:4c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yrjg8zjHn0AlCKq9k+4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjQ4OWZiZTk4OTk0Y2JjMDk4Yzg3NmJhNjNlNTYwYWMxN2U1YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ6JLLVzg/wiNFv+KIkrutiLHrZ5 1gtvo08clNGyrJVgHfTW7ORuqPmvACU/ULHtK0e5NMULvb9jjChyDwUD98E6Gf6Z RoF1exArWbKjJXnmSOMdFekVG/hF1I5oJ/RRFtpEGl8MBIPwwKsT0Bb+W4G60+zV G+WgU1zcgp2u7j8d3DfFrI6rNfmHImn4cWlCMVDfBlz+OR59QqTc9OHRDuFO2VY5 2mJKzS7nSZaF5F0iL3Jd8tyDBSo7KBXJjMFQe/6rtucTpl0LzvGvPDk5qX55tubO 61qwCQ4r6Jxv9J/OWeo86SDDFz9zPJcsQGkYEzJTezlh5DD4rcdRpDCG5wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNtIn76YmUy8CYyHa6Y+VgrBflsvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzZjYWM1 MC0zZjEzLTRlZjktOGI2ZC1kZWNlYzQxYTcxZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNmNhYzUw LTNmMTMtNGVmOS04YjZkLWRlY2VjNDFhNzFkMS8xLzIwaWZ2cGlaVEx3SmpJZHJw ajVXQ3NGLVd5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT/kMA0EAgACMAcDBQAqAxBgMA0GCSqGSIb3 DQEBCwUAA4IBAQBpDBTCzfFZv6TJS2+sFLBhDDeKgA1uKxpwtIYZljEUyVmg43ZK erqxw+vgxUAGqwn35rB5N5GNYyICGqsxt/EXvHrGu4JnJYYomG38Lud4WVDP5g+0 OHSgDk4K0nAvVvg6DEzikIzU4H7x0FyrbQdFwuZvE6/83yGfBbMRW5aA5UccXmXf BOWSFiqHNUzJiPFyTETtC7P90gwWrvt3Rx6rEifiuKl8CoD0qqtSiDKvQcp+T1NB HZz9PQHR3MnMJL2dU8vJ3WHqz7UiayceXZaa1XQTBLVObgezBol7dEYtAgafKmvR PQ0NxQ0SVU+PfTF6gaVqFvpiy2DBw2tRwbZM -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:13 2026 by rpki-client