This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer File: IE19hlKpn8F__y197MSeVWqg64A.cer (raw, json) Hash identifier: 6YQq1EQGsAkaXtoH+Wv2SpdQi86m/WC5DFM62TSzna4= Subject key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B7F1F85F05B46EA8487B837993B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.242.170.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b7:f1:f8:5f:05:b4:6e:a8:48:7b:83:79:93:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:1b:b2:9f:55:a6:a0:f2:aa:03:2f:7e:a4: 7f:63:83:54:f7:a3:12:bb:7d:91:21:09:15:ba:3d: 53:4c:e6:5f:34:3b:c3:39:a6:37:ee:86:a7:a3:06: 1f:2e:ce:4a:d5:62:6d:e6:87:cb:e5:f7:93:bc:8e: 00:17:c8:4f:63:3d:9d:de:15:ee:90:08:95:ee:35: 46:91:66:c7:6d:67:11:60:35:f6:45:73:38:c0:b1: 5d:a0:d4:46:4c:79:9e:a4:93:e9:d6:f5:df:c4:91: 6a:c6:53:0c:3b:16:0f:a6:fa:49:7e:08:bd:9f:9a: 6f:cc:f7:0c:95:6b:b2:4b:fa:4a:62:be:19:43:9d: 59:d9:6d:bd:5f:5e:cf:04:61:5e:b6:f8:dd:ef:85: 4c:97:fc:08:13:db:45:39:90:df:9a:ff:d0:05:32: 2b:92:69:7b:77:ef:f9:75:cd:ae:2e:3c:d8:56:44: 19:3f:58:fd:70:6b:75:9c:8a:f0:95:9f:ca:84:39: 38:d2:a2:40:47:a1:68:99:65:42:e2:9c:a1:68:87: 66:f6:b2:0b:11:b3:8b:f9:e8:2c:d2:e2:00:ee:1a: 46:fe:59:72:bf:44:fb:71:40:af:fb:75:d1:4c:4d: 9c:6d:d6:5d:b3:74:16:08:0a:0c:0e:f1:1f:1a:bb: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.170.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:59:75:0e:26:74:4b:66:7b:2d:44:6b:52:d4:73:06:c4:f3: 65:ec:e8:92:71:f9:58:ae:ca:51:0f:d6:97:8f:18:3c:f0:bf: 08:5a:80:1f:1d:c2:65:f3:b9:0f:40:8d:86:f9:23:d9:46:d7: 67:54:0a:ce:dd:57:ef:5b:f8:f8:42:17:3a:23:a2:ae:5a:12: de:c0:c6:7c:7c:ca:4a:c9:5d:b3:75:dc:c8:b7:d8:a6:c8:5b: dd:76:b6:0f:ee:e8:08:c2:f8:cd:9f:d7:d0:c4:d0:d5:47:a8: 8a:ae:51:75:8d:c9:62:d2:d5:25:af:4f:26:5a:f1:cd:a0:20: 20:48:6c:2c:fe:c7:90:cb:4f:54:75:06:b4:e1:79:e8:7f:31: 2f:b5:d1:fb:5a:b6:67:a1:57:09:a9:67:e0:07:fa:59:f8:25: ca:7f:c7:2d:48:94:e9:9d:95:96:96:17:80:a1:b9:ac:57:40: 9e:6d:60:40:a5:6d:08:ca:d5:17:1b:03:71:f9:25:3e:46:fe: f3:8d:b1:b4:22:fa:fc:fc:36:ea:76:a8:5b:20:ef:6b:b2:d6: fd:40:49:2b:d5:d8:4a:35:6b:85:f3:b7:e6:e1:b4:94:44:9d: d0:22:aa:ed:22:e1:76:82:6e:3a:de:a7:dc:26:09:68:f7:cd: 09:01:c1:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+prfx+F8FtG6oSHuDeZOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDRkN2Q4NjUyYTk5ZmMxN2ZmZjJkN2RlY2M0OWU1NTZhYTBlYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n4bsp9VpqDyqgMvfqR/Y4NU96MS u32RIQkVuj1TTOZfNDvDOaY37oanowYfLs5K1WJt5ofL5feTvI4AF8hPYz2d3hXu kAiV7jVGkWbHbWcRYDX2RXM4wLFdoNRGTHmepJPp1vXfxJFqxlMMOxYPpvpJfgi9 n5pvzPcMlWuyS/pKYr4ZQ51Z2W29X17PBGFetvjd74VMl/wIE9tFOZDfmv/QBTIr kml7d+/5dc2uLjzYVkQZP1j9cGt1nIrwlZ/KhDk40qJAR6FomWVC4pyhaIdm9rIL EbOL+egs0uIA7hpG/llyv0T7cUCv+3XRTE2cbdZds3QWCAoMDvEfGrvaSQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCBNfYZSqZ/Bf/8tfezEnlVqoOuAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2FjMDY5 NC0xZTIyLTQzNmQtODJjOS0xN2NlNjIwZTc0ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWMwNjk0 LTFlMjItNDM2ZC04MmM5LTE3Y2U2MjBlNzRmMS8xL0lFMTlobEtwbjhGX195MTk3 TVNlVldxZzY0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/KqMA0GCSqGSIb3DQEBCwUAA4IBAQAOWXUO JnRLZnstRGtS1HMGxPNl7OiScflYrspRD9aXjxg88L8IWoAfHcJl87kPQI2G+SPZ RtdnVArO3VfvW/j4Qhc6I6KuWhLewMZ8fMpKyV2zddzIt9imyFvddrYP7ugIwvjN n9fQxNDVR6iKrlF1jcli0tUlr08mWvHNoCAgSGws/seQy09UdQa04XnofzEvtdH7 WrZnoVcJqWfgB/pZ+CXKf8ctSJTpnZWWlheAobmsV0CebWBApW0IytUXGwNx+SU+ Rv7zjbG0Ivr8/DbqdqhbIO9rstb9QEkr1dhKNWuF87fm4bSURJ3QIqrtIuF2gm46 3qfcJglo980JAcGg -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:00 2026 by rpki-client