This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer File: IOQloyti05gYxMuwCBB1aG_EyOg.cer (raw, json) Hash identifier: ixYMWOf0XtkqEBD8cT86Eq5RyYASIsbAPalJpYb17WM= Subject key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35F15330F82FC2C6B09C19D1014A11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.170.0.0/21 IP: 95.170.12.0 -- 95.170.31.255 IP: 2a03:ac00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f1:53:30:f8:2f:c2:c6:b0:9c:19:d1:01:4a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:b2:ec:86:d2:04:62:5a:f7:c0:f7:b6:87: 82:3c:10:99:7e:fc:6b:02:8c:ab:90:7a:90:61:e7: a9:38:de:97:42:a3:b7:dc:49:e6:b4:26:b4:a3:5f: d7:5d:65:bf:6a:ff:84:ab:ce:d0:21:a3:10:30:df: b6:c1:25:91:e5:95:91:1c:63:39:6e:61:e6:c8:0e: e2:5d:55:88:46:af:d4:aa:28:c2:98:47:99:0c:4d: 84:a1:55:7d:1a:af:7c:c6:68:ed:09:9a:5b:b4:3b: 68:85:52:9b:e4:aa:c5:34:f6:89:91:de:ba:4b:96: 1f:66:7f:59:d2:56:21:dc:11:93:c0:b2:3a:d0:9f: dc:28:40:c1:81:5f:3a:d0:1e:77:c6:54:ec:91:ee: 83:72:27:fd:0b:a5:23:aa:c6:4a:c4:bb:a9:9e:d4: 1c:ad:38:be:61:d7:2d:1b:c1:93:42:93:c0:29:ff: c0:a6:e6:42:13:7a:08:0c:b9:60:7e:dc:5d:e0:4c: 54:0b:58:df:71:31:79:89:97:4e:ac:ed:9a:e8:83: 6e:60:8a:a2:83:38:d9:85:f1:3d:e5:fe:ef:e2:a9: cd:fd:71:25:e2:ed:66:75:b9:bd:99:46:0b:13:f6: 75:80:3f:00:ea:7a:9a:e4:ac:d4:84:5a:3b:67:e5: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.0.0/21 95.170.12.0-95.170.31.255 IPv6: 2a03:ac00::/32 Signature Algorithm: sha256WithRSAEncryption 11:01:50:2f:97:17:03:2b:80:ff:e2:78:15:f9:37:61:7c:bc: 6d:7c:0e:1b:62:9b:93:73:70:cf:e6:b4:2f:14:9e:cc:f6:65: 87:63:f9:9d:46:d2:60:3d:d2:a9:64:fe:e5:5f:8b:27:fe:19: 79:b5:a2:5f:d3:11:35:2f:a9:5d:3f:b9:e7:ae:dd:c8:e4:52: a0:ab:15:d3:68:23:7c:92:8b:66:98:58:ea:5d:75:ef:0f:d4: 08:d2:25:4b:6f:1d:8d:48:19:2c:57:ed:a6:aa:a5:33:26:3c: b4:8a:88:c3:46:20:5f:d9:f2:4f:26:6c:a9:19:ba:e2:95:11: 1e:c9:d6:3b:2d:ef:b9:f7:65:f0:2d:61:b9:d6:08:20:e8:bf: 01:3b:96:84:14:86:a2:20:43:40:fc:7e:d2:8d:19:8d:a2:1b: d6:a9:c6:d3:bb:97:03:20:51:dc:51:df:fb:d6:23:c5:15:51: dc:b7:d3:4f:c1:43:fd:77:43:92:d8:94:98:94:f6:72:51:eb: f3:d8:d6:43:9b:3e:0a:d5:ce:1a:6a:7b:6c:2e:fd:cc:61:a0: 16:5a:3c:ac:fb:97:0b:36:0d:0d:d6:da:c6:66:9c:9b:a4:ab: cf:5a:ac:c4:c7:3b:1d:ac:61:2e:c2:fd:04:b6:b0:48:bd:e5: f4:7b:f0:3f -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt7NfFTMPgvwsawnBnRAUoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGU0MjVhMzJiNjJkMzk4MThjNGNiYjAwODEwNzU2ODZmYzRjOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqiy7IbSBGJa98D3toeCPBCZfvxr AoyrkHqQYeepON6XQqO33EnmtCa0o1/XXWW/av+Eq87QIaMQMN+2wSWR5ZWRHGM5 bmHmyA7iXVWIRq/UqijCmEeZDE2EoVV9Gq98xmjtCZpbtDtohVKb5KrFNPaJkd66 S5YfZn9Z0lYh3BGTwLI60J/cKEDBgV860B53xlTske6Dcif9C6UjqsZKxLupntQc rTi+YdctG8GTQpPAKf/ApuZCE3oIDLlgftxd4ExUC1jfcTF5iZdOrO2a6INuYIqi gzjZhfE95f7v4qnN/XEl4u1mdbm9mUYLE/Z1gD8A6nqa5KzUhFo7Z+WZyQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFCDkJaMrYtOYGMTLsAgQdWhvxMjoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2ZkOGMw MS03YjcxLTQ0MmMtOWFkYi1lY2QyOTY1Y2I3ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvZmQ4YzAx LTdiNzEtNDQyYy05YWRiLWVjZDI5NjVjYjdlNy8xL0lPUWxveXRpMDVnWXhNdXdD QkIxYUdfRXlPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQDX6oAMAwDBAJfqgwDBAVfqgAwDQQCAAIwBwMF ACoDrAAwDQYJKoZIhvcNAQELBQADggEBABEBUC+XFwMrgP/ieBX5N2F8vG18Dhti m5NzcM/mtC8Unsz2ZYdj+Z1G0mA90qlk/uVfiyf+GXm1ol/TETUvqV0/ueeu3cjk UqCrFdNoI3ySi2aYWOpdde8P1AjSJUtvHY1IGSxX7aaqpTMmPLSKiMNGIF/Z8k8m bKkZuuKVER7J1jst77n3ZfAtYbnWCCDovwE7loQUhqIgQ0D8ftKNGY2iG9apxtO7 lwMgUdxR3/vWI8UVUdy300/BQ/13Q5LYlJiU9nJR6/PY1kObPgrVzhpqe2wu/cxh oBZaPKz7lws2DQ3W2sZmnJukq89arMTHOx2sYS7C/QS2sEi95fR78D8= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:29 2026 by rpki-client