This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer File: IPpO3bIfCQGSPBifQej1x0mmWCk.cer (raw, json) Hash identifier: zwHm7ecX6gxQrSjrH2ptjickKG8q0vIhKjUg/gdOLJY= Subject key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC84D2712A7BFD8365DDC1121842450 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200302 IP: 94.242.0.0 -- 94.242.47.255 IP: 2a00:1838::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4d:27:12:a7:bf:d8:36:5d:dc:11:21:84:24:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:66:f1:42:7d:14:fd:17:1a:61:b1:e4:c0: 14:ff:1e:7c:75:f5:54:17:d7:9b:b1:90:a3:c9:ef: 37:67:d7:8b:ec:d0:ad:1d:f0:91:5c:b4:15:d4:cc: f6:f0:98:92:1a:91:5a:c7:66:fe:42:55:89:0e:91: 46:cb:70:95:ef:65:c0:4c:0d:6c:a4:30:34:15:14: c0:32:53:d0:e4:aa:ce:60:d9:ae:0c:f7:97:5d:57: ee:7f:db:1d:e4:88:e9:fe:9f:43:e8:e7:bb:ad:d7: 14:65:a6:ca:c1:0f:b7:36:18:40:03:9c:e0:06:68: 4f:25:12:80:59:08:75:da:17:31:8e:12:c5:d9:d1: 88:d8:4d:ea:12:d7:64:76:f7:81:7e:e9:e9:66:96: af:8c:82:c2:92:ef:09:86:bc:30:33:13:41:e5:0d: 0c:b1:22:07:e0:31:61:fc:66:db:10:53:26:a0:9e: e7:4b:5a:e5:1f:b1:1a:da:92:50:a5:f6:94:a6:65: e7:c7:70:96:59:bf:ae:09:d6:2e:71:e9:57:2a:f9: a6:3a:e4:ad:1c:00:c7:42:9a:dc:bd:7d:e8:2c:56: 3d:7e:f5:de:2f:d5:65:6a:db:4c:8f:f3:4c:a5:0d: 59:b5:10:cd:77:26:99:47:bf:07:5f:fd:ba:61:bc: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.242.0.0-94.242.47.255 IPv6: 2a00:1838::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200302 Signature Algorithm: sha256WithRSAEncryption 01:20:02:0b:ec:3a:ef:78:14:bb:6d:3c:0a:bd:6e:65:0c:26: ff:b9:c6:08:84:09:7d:f3:7a:a0:f1:c1:c0:8a:9a:e2:64:c3: 41:a4:a2:32:1d:0a:f4:19:d8:39:03:d4:e8:33:b8:10:91:0d: d1:00:9d:a1:81:e7:8b:8c:96:d0:5c:58:e8:c4:75:8b:28:3f: ff:28:1d:c0:3a:ef:35:8c:14:87:22:b5:a9:98:98:e1:81:b5: 23:55:36:b6:b2:08:ab:85:97:83:4b:40:d8:48:19:ee:b5:05: 49:87:0c:a1:cc:70:cc:de:cb:65:8d:cb:80:76:c6:7e:6e:11: d4:2d:87:d2:b9:34:95:75:7d:90:e4:91:c6:18:a1:f2:62:95: f8:92:4d:8b:60:aa:f8:a5:d3:46:1c:01:bd:ec:31:19:1d:ef: 27:3b:a2:93:b0:66:e5:2a:71:0c:c7:70:ee:4f:dd:4a:12:60: ca:68:aa:ba:6b:e1:b7:76:7f:f5:a3:49:7f:86:dd:60:87:ed: e8:ea:fa:a5:3e:b6:eb:b0:c0:5e:00:c6:e7:63:5c:62:e6:4f: 1d:80:36:bd:6b:0b:02:9b:56:22:fb:a3:07:62:05:57:c6:5f: e9:7a:36:15:9d:72:7f:a2:98:2e:37:f4:b2:25:2d:ca:16:73: 3c:78:c8:6c -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt6yE0nEqe/2DZd3BEhhCRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGZhNGVkZGIyMWYwOTAxOTIzYzE4OWY0MWU4ZjVjNzQ5YTY1ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mRm8UJ9FP0XGmGx5MAU/x58dfVU F9ebsZCjye83Z9eL7NCtHfCRXLQV1Mz28JiSGpFax2b+QlWJDpFGy3CV72XATA1s pDA0FRTAMlPQ5KrOYNmuDPeXXVfuf9sd5Ijp/p9D6Oe7rdcUZabKwQ+3NhhAA5zg BmhPJRKAWQh12hcxjhLF2dGI2E3qEtdkdveBfunpZpavjILCku8JhrwwMxNB5Q0M sSIH4DFh/GbbEFMmoJ7nS1rlH7Ea2pJQpfaUpmXnx3CWWb+uCdYucelXKvmmOuSt HADHQprcvX3oLFY9fvXeL9VlattMj/NMpQ1ZtRDNdyaZR78HX/26YbzQlwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzk1MWIx OC01MjQ0LTRiMmItYTIyZC1lZDVmMDBjOTUwNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvOTUxYjE4 LTUyNDQtNGIyYi1hMjJkLWVkNWYwMGM5NTA2Ny8xL0lQcE8zYklmQ1FHU1BCaWZR ZWoxeDBtbVdDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDATBAIAATANMAsDAwFe8gMEBF7yIDANBAIAAjAHAwUAKgAYODAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDm4wDQYJKoZIhvcNAQELBQADggEBAAEg AgvsOu94FLttPAq9bmUMJv+5xgiECX3zeqDxwcCKmuJkw0GkojIdCvQZ2DkD1Ogz uBCRDdEAnaGB54uMltBcWOjEdYsoP/8oHcA67zWMFIcitamYmOGBtSNVNrayCKuF l4NLQNhIGe61BUmHDKHMcMzey2WNy4B2xn5uEdQth9K5NJV1fZDkkcYYofJilfiS TYtgqvil00YcAb3sMRkd7yc7opOwZuUqcQzHcO5P3UoSYMpoqrpr4bd2f/WjSX+G 3WCH7ejq+qU+tuuwwF4AxudjXGLmTx2ANr1rCwKbViL7owdiBVfGX+l6NhWdcn+i mC439LIlLcoWczx4yGw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:53 2026 by rpki-client