This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer (raw, json) Hash identifier: JS+Aaspy2K6Lt1bPV6uyZb3t5jJZQwIswGfgLDXUwAo= Subject key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB41187F3F07087748562ECE60D35C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12858 IP: 212.101.96.0/19 IP: 2a06:cf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:41:18:7f:3f:07:08:77:48:56:2e:ce:60:d3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:2b:32:70:e0:c7:0c:90:ee:9b:d4:a9:ba: d4:5a:88:6c:81:61:b5:72:42:27:ab:b8:dd:c3:a9: ec:a4:38:e2:80:5a:13:5f:3e:aa:6d:a4:40:e5:a3: f1:c3:99:98:16:ed:62:d4:18:14:ce:63:ff:7c:73: d1:f0:a0:00:6b:f1:42:ce:ae:a3:d0:cc:39:02:fc: 85:df:5a:6d:a9:5e:24:4b:1e:77:61:1c:fe:8e:6a: fa:4a:bd:f3:af:f2:d3:fd:29:ad:8e:a3:8a:4e:57: a4:98:94:3a:1d:fb:8c:d5:84:3c:fd:52:86:d9:73: ed:b8:21:18:38:30:77:f0:f6:a1:2f:ec:b3:32:6d: 0a:15:2b:5a:04:5a:db:86:03:59:cb:7b:35:02:e1: 94:61:d1:e2:89:d2:31:cd:5e:47:88:88:1b:47:b5: 5c:8b:d3:ae:33:0e:d6:fa:2c:fa:b6:10:fe:a7:91: da:c9:66:54:3e:aa:c6:54:a5:71:a7:3a:4c:2b:91: 12:e3:aa:c3:73:6d:3a:69:86:58:96:d1:fc:4f:00: 91:cf:9a:21:70:d2:97:7a:95:71:75:cd:e8:96:6e: 99:3f:3a:25:48:89:06:33:6f:67:99:73:bf:59:e3: dc:03:1e:a9:57:de:53:a1:6d:cc:44:8e:80:2a:a4: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.101.96.0/19 IPv6: 2a06:cf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12858 Signature Algorithm: sha256WithRSAEncryption 35:a6:db:ff:3c:78:89:cf:8f:3f:ed:f6:c5:d6:63:29:20:01: 4d:e2:8c:27:b6:e1:b6:ca:d0:65:58:6a:82:af:5f:fa:f1:d1: 71:6f:4e:26:8d:9f:38:4e:1d:0c:08:69:79:18:1a:1e:77:d6: 4d:ca:76:d3:78:26:ae:11:dd:4a:b9:4a:c5:21:44:62:71:4d: 9f:75:e3:69:ec:ad:ab:f4:6d:49:03:35:04:b0:f8:a0:11:7c: 54:a3:8c:ea:35:be:a7:29:a2:45:55:5c:bb:0b:ff:27:c1:06: 03:73:3f:c6:1f:10:b8:48:b6:59:c1:df:f1:18:47:c5:fc:c1: 55:28:40:44:33:14:7b:6f:1c:5f:c2:dd:bf:aa:10:4b:3e:3c: 9f:42:79:08:dd:e9:1c:09:76:e4:34:31:b0:30:d5:0c:ce:af: e8:1a:d1:44:4c:b3:dd:0e:2a:b0:aa:8a:c7:19:e9:0a:af:cf: 78:a4:bc:4f:5f:10:70:9a:66:7e:68:80:7c:c6:95:0d:8d:6d: 17:cf:27:2c:6b:4d:21:d7:7f:62:c0:63:16:49:bd:bb:76:22: 94:74:82:32:43:a4:f9:93:c6:a5:3d:53:bc:a9:5d:15:c1:ab: 99:45:fd:7f:f4:79:c3:13:2f:ab:92:ee:a3:46:e5:cb:4b:f7: d0:19:95:e0 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt260EYfz8HCHdIVi7OYNNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDUwZGY1MWYwZTViYzgxZGI0YjA1ZjQ0OWY3NDMwOGQ3ZmNmYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAErMnDgxwyQ7pvUqbrUWohsgWG1 ckInq7jdw6nspDjigFoTXz6qbaRA5aPxw5mYFu1i1BgUzmP/fHPR8KAAa/FCzq6j 0Mw5AvyF31ptqV4kSx53YRz+jmr6Sr3zr/LT/SmtjqOKTlekmJQ6HfuM1YQ8/VKG 2XPtuCEYODB38PahL+yzMm0KFStaBFrbhgNZy3s1AuGUYdHiidIxzV5HiIgbR7Vc i9OuMw7W+iz6thD+p5HayWZUPqrGVKVxpzpMK5ES46rDc206aYZYltH8TwCRz5oh cNKXepVxdc3olm6ZPzolSIkGM29nmXO/WePcAx6pV95ToW3MRI6AKqQuDwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFCBQ31Hw5byB20sF9En3QwjX/PouMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzYwZTM3 Ni05OTNjLTRiYWYtYjU5MC02ZTY0ODFlNTc2NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvNjBlMzc2 LTk5M2MtNGJhZi1iNTkwLTZlNjQ4MWU1NzY1Yy8xL0lGRGZVZkRsdklIYlN3WDBT ZmREQ05mOC1pNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1GVgMA0EAgACMAcDBQMqBs9AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjI6MA0GCSqGSIb3DQEBCwUAA4IBAQA1ptv/PHiJz48/ 7fbF1mMpIAFN4owntuG2ytBlWGqCr1/68dFxb04mjZ84Th0MCGl5GBoed9ZNynbT eCauEd1KuUrFIURicU2fdeNp7K2r9G1JAzUEsPigEXxUo4zqNb6nKaJFVVy7C/8n wQYDcz/GHxC4SLZZwd/xGEfF/MFVKEBEMxR7bxxfwt2/qhBLPjyfQnkI3ekcCXbk NDGwMNUMzq/oGtFETLPdDiqwqorHGekKr894pLxPXxBwmmZ+aIB8xpUNjW0Xzycs a00h139iwGMWSb27diKUdIIyQ6T5k8alPVO8qV0VwauZRf1/9HnDEy+rku6jRuXL S/fQGZXg -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:24 2026 by rpki-client