This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer File: IPY4EHq7hK5vsDzB2yz9G8RIf40.cer (raw, json) Hash identifier: dZOG9KO4jN/bWI2aBIIz9KOJTZGrignoaawP92R/tV4= Subject key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0F12947947468539AD29B2858BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35199 AS: 61233 IP: 80.73.245.0/24 IP: 91.246.13.0/24 IP: 178.219.16.0/22 IP: 185.14.148.0/22 IP: 185.29.12.0/22 IP: 185.99.172.0/22 IP: 185.120.64.0/22 IP: 185.135.192.0/22 IP: 185.143.160.0/22 IP: 185.214.67.0/24 IP: 185.226.98.0/24 IP: 185.234.208.0/22 IP: 193.19.164.0/22 IP: 194.146.4.0/22 IP: 217.28.134.0/24 IP: 2a03:ae40::/32 IP: 2a13:2800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0f:12:94:79:47:46:85:39:ad:29:b2:85:8b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:ee:2c:f4:75:8b:82:29:6f:f8:08:f8:c7: e7:72:a7:5e:c2:a0:a9:71:8a:51:5b:ea:c1:1d:3b: ed:95:db:cc:01:33:69:01:75:a7:c3:db:76:b9:69: 8f:45:1f:91:ee:40:39:1c:85:bb:4f:25:3b:2e:52: ca:33:c9:aa:d3:90:3d:0a:df:99:f0:35:1a:b1:bf: 45:3c:d2:f9:03:93:c1:0d:6e:52:83:2b:78:8c:f7: bc:1e:f2:6b:d2:8b:de:a9:04:c3:78:02:66:91:b3: d0:e4:c0:27:31:d5:05:27:7d:a8:fe:9c:7c:68:f0: f8:d8:f9:aa:11:46:d4:0f:56:ff:74:1b:19:a3:dc: 53:47:3f:3f:93:a8:a3:bb:f4:ae:65:47:0e:bf:8e: 81:88:92:8f:ff:ee:a4:51:c6:21:44:39:c5:38:a7: 03:68:51:15:66:80:a0:61:31:57:01:30:c0:f7:68: 08:cb:de:c5:c5:f0:27:ef:51:d9:52:f3:d6:bd:30: 05:07:2e:59:53:63:a6:1e:30:9b:d6:4a:69:a5:86: ed:67:15:af:a2:99:f4:e0:ad:39:d1:cc:cd:be:4a: f9:6d:b2:f8:17:0d:9d:85:7c:8c:55:36:b0:d2:7f: 57:25:5a:9c:4c:1c:5a:3e:ef:80:78:f5:ad:5a:49: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.245.0/24 91.246.13.0/24 178.219.16.0/22 185.14.148.0/22 185.29.12.0/22 185.99.172.0/22 185.120.64.0/22 185.135.192.0/22 185.143.160.0/22 185.214.67.0/24 185.226.98.0/24 185.234.208.0/22 193.19.164.0/22 194.146.4.0/22 217.28.134.0/24 IPv6: 2a03:ae40::/32 2a13:2800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35199 61233 Signature Algorithm: sha256WithRSAEncryption 76:64:4b:e9:ce:cf:bb:28:ac:72:c8:c6:0a:f9:9f:d9:1a:25: 58:7f:bb:32:44:08:81:12:0e:3d:fb:52:b9:8a:cf:47:11:3c: 72:02:54:73:2d:13:c7:6e:b2:e0:87:bc:51:61:f2:e3:f2:4c: cb:ba:5f:85:f7:a0:1b:71:ad:a8:d4:15:da:ab:89:ee:05:6d: a1:44:c6:a0:f5:58:63:2f:e8:99:3e:53:22:5c:5d:e8:7a:75: 29:3e:7f:6a:4b:41:cb:d2:0e:e4:60:5e:43:eb:9c:60:6a:a5: 46:be:c9:94:cf:27:c8:39:63:41:8e:dd:fd:6a:54:88:61:b7: 5f:51:e6:29:af:b8:d0:75:a2:63:c0:18:20:b1:fa:86:94:c3: b8:df:a5:ba:fa:c3:a2:2d:c6:09:fb:c4:47:cb:40:46:ee:c3: 44:51:3a:fb:57:4c:73:00:2c:b4:e4:f8:6d:7d:5a:b4:a8:7d: 39:1d:ec:97:35:9d:07:b9:9d:d6:e3:10:34:30:3a:67:a9:c3: b1:44:40:bd:d3:c4:d3:82:28:e7:27:d4:39:7e:a0:1b:85:61: e2:c6:bb:b9:57:74:88:d0:eb:de:7a:9a:cb:55:47:04:bf:8e: 71:a3:40:16:e4:cb:3a:b4:7c:32:76:57:8d:2b:74:59:2e:a0: 54:b1:9f:e6 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZt5fw8SlHlHRoU5rSmyhYvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGY2MzgxMDdhYmI4NGFlNmZiMDNjYzFkYjJjZmQxYmM0NDg3ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv7uLPR1i4Ipb/gI+MfncqdewqCp cYpRW+rBHTvtldvMATNpAXWnw9t2uWmPRR+R7kA5HIW7TyU7LlLKM8mq05A9Ct+Z 8DUasb9FPNL5A5PBDW5Sgyt4jPe8HvJr0oveqQTDeAJmkbPQ5MAnMdUFJ32o/px8 aPD42PmqEUbUD1b/dBsZo9xTRz8/k6iju/SuZUcOv46BiJKP/+6kUcYhRDnFOKcD aFEVZoCgYTFXATDA92gIy97FxfAn71HZUvPWvTAFBy5ZU2OmHjCb1kpppYbtZxWv opn04K050czNvkr5bbL4Fw2dhXyMVTaw0n9XJVqcTBxaPu+AePWtWkk5SQIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFCD2OBB6u4Sub7A8wdss/RvESH+NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzRmNTgw OC0xYzA0LTQyNTUtOWI4NC1hODI4MzZkZTA1ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNGY1ODA4 LTFjMDQtNDI1NS05Yjg0LWE4MjgzNmRlMDVmYy8xL0lQWTRFSHE3aEs1dnNEekIy eXo5RzhSSWY0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGJBggrBgEF BQcBBwEB/wR6MHgwYAQCAAEwWgMEAFBJ9QMEAFv2DQMEArLbEAMEArkOlAMEArkd DAMEArljrAMEArl4QAMEArmHwAMEArmPoAMEALnWQwMEALniYgMEArnq0AMEAsET pAMEAsKSBAMEANkchjAUBAIAAjAOAwUAKgOuQAMFAyoTKAAwHwYIKwYBBQUHAQgB Af8EEDAOoAwwCgIDAIl/AgMA7zEwDQYJKoZIhvcNAQELBQADggEBAHZkS+nOz7so rHLIxgr5n9kaJVh/uzJECIESDj37UrmKz0cRPHICVHMtE8dusuCHvFFh8uPyTMu6 X4X3oBtxrajUFdqrie4FbaFExqD1WGMv6Jk+UyJcXeh6dSk+f2pLQcvSDuRgXkPr nGBqpUa+yZTPJ8g5Y0GO3f1qVIhht19R5imvuNB1omPAGCCx+oaUw7jfpbr6w6It xgn7xEfLQEbuw0RROvtXTHMALLTk+G19WrSofTkd7Jc1nQe5ndbjEDQwOmepw7FE QL3TxNOCKOcn1Dl+oBuFYeLGu7lXdIjQ6956mstVRwS/jnGjQBbkyzq0fDJ2V40r dFkuoFSxn+Y= -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:20 2026 by rpki-client