This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer File: ITUYZbdn3XucIjFL_IBVvVfbAGU.cer (raw, json) Hash identifier: mR3T5iPypRGE2RPbeT6kYvndlPd8tI1HI507x/qen4g= Subject key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A9814A7B2C88A2240461C14DEA97 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205381 IP: 45.88.32.0/22 IP: 185.220.56.0/22 IP: 194.107.229.0/24 IP: 194.110.1.0/24 IP: 194.110.7.0/24 IP: 194.110.19.0/24 IP: 2a07:86c0::/29 IP: 2a0c:f580::/29 IP: 2a0f:ac40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:81:4a:7b:2c:88:a2:24:04:61:c1:4d:ea:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:ee:10:b6:d1:64:51:09:e2:1e:ef:fa:d2: 36:ca:c0:87:68:01:01:71:3b:71:65:3a:ab:77:9a: 03:57:7c:80:57:cc:75:97:e0:65:da:4f:87:56:9d: 4e:fc:53:a5:28:7a:72:5e:2b:4f:86:e6:a5:03:e8: 4b:d8:69:b0:c9:49:b4:d9:04:6a:50:60:df:6b:c1: b9:01:be:11:14:50:dc:54:79:6a:2c:15:23:f1:c3: 01:75:ed:ee:6e:a7:e7:51:1e:30:2d:e7:16:f4:2b: e5:3f:f6:bb:25:d0:ad:9f:b2:3c:fc:23:ac:1d:cb: bb:9c:0e:6d:23:6b:8e:a0:99:78:68:04:c7:a9:68: 7f:fa:53:26:ea:cf:62:d1:eb:cc:c9:0e:01:16:8a: 1d:e1:a7:de:bf:fc:4f:22:24:2a:12:16:e0:8d:b0: 9a:7b:2c:eb:a9:cf:35:f3:80:65:49:43:75:2e:51: 3a:67:de:cf:f2:3a:13:3c:6b:b3:02:b2:d1:ce:cf: 50:c0:2e:8b:62:e2:19:54:cb:49:80:81:46:f8:32: 71:96:db:a4:0d:cc:68:cf:a5:42:5e:39:dc:87:3e: f5:df:3a:c8:2e:b3:1e:95:a2:56:10:0c:bc:2f:6a: a7:cd:92:0c:82:2e:be:a7:9c:0c:90:b8:d9:65:82: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.32.0/22 185.220.56.0/22 194.107.229.0/24 194.110.1.0/24 194.110.7.0/24 194.110.19.0/24 IPv6: 2a07:86c0::/29 2a0c:f580::/29 2a0f:ac40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205381 Signature Algorithm: sha256WithRSAEncryption af:ff:46:c1:e0:32:6a:e6:e9:42:ec:7d:39:02:b7:ef:75:7d: 57:ca:33:88:18:ac:b4:4e:33:a0:bd:d3:b0:b2:b3:b4:f2:52: 45:bd:e7:e1:4b:a2:45:d0:34:bd:bb:03:3e:0c:f8:0e:7c:8a: 5d:e8:82:b8:47:59:20:72:fa:1e:89:d6:66:c0:b0:04:3e:36: 38:1e:35:7b:23:88:3a:49:15:03:7d:da:0c:e0:b7:d7:49:ca: db:04:32:e9:55:77:94:e6:a5:2a:10:d6:af:1b:92:29:d3:0b: ca:69:7e:5c:a4:29:af:a4:4d:c3:93:57:e0:53:db:91:9f:23: 24:af:b1:37:6f:11:33:d9:f8:74:7a:0f:68:c5:f6:91:30:f5: aa:12:9e:8d:cc:2f:64:e1:b4:39:18:a0:71:cc:1e:1f:c5:ed: be:69:db:ab:ab:9e:43:44:c1:27:79:38:24:6f:1d:29:02:3a: 7b:36:3f:9b:28:d2:34:4b:06:fb:37:b4:eb:84:e1:40:29:c5: 12:2c:69:f2:99:1f:2a:0a:f7:f1:a8:65:e8:fd:40:2b:74:b8: 07:55:0e:10:7d:b0:76:92:2e:dd:0b:4c:4f:97:ed:33:94:ce: 66:d3:79:e5:b2:4d:bc:9f:03:4a:71:11:c6:d7:10:7a:c1:83: d0:ae:3d:eb -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt6yKmBSnssiKIkBGHBTeqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTM1MTg2NWI3NjdkZDdiOWMyMjMxNGJmYzgwNTViZDU3ZGIwMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D3uELbRZFEJ4h7v+tI2ysCHaAEB cTtxZTqrd5oDV3yAV8x1l+Bl2k+HVp1O/FOlKHpyXitPhualA+hL2GmwyUm02QRq UGDfa8G5Ab4RFFDcVHlqLBUj8cMBde3ubqfnUR4wLecW9CvlP/a7JdCtn7I8/COs Hcu7nA5tI2uOoJl4aATHqWh/+lMm6s9i0evMyQ4BFood4afev/xPIiQqEhbgjbCa eyzrqc8184BlSUN1LlE6Z97P8joTPGuzArLRzs9QwC6LYuIZVMtJgIFG+DJxltuk Dcxoz6VCXjnchz713zrILrMelaJWEAy8L2qnzZIMgi6+p5wMkLjZZYKKjQIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFCE1GGW3Z917nCIxS/yAVb1X2wBlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2U1MmIw Ny1mMmE0LTQ3YzEtOTQ2MC0xZTRlMDQwMDg0NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvZTUyYjA3 LWYyYTQtNDdjMS05NDYwLTFlNGUwNDAwODQ0Yi8xL0lUVVlaYmRuM1h1Y0lqRkxf SUJWdlZmYkFHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQCLVggAwQCudw4AwQAwmvlAwQAwm4BAwQAwm4H AwQAwm4TMBsEAgACMBUDBQMqB4bAAwUDKgz1gAMFAyoPrEAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAyJFMA0GCSqGSIb3DQEBCwUAA4IBAQCv/0bB4DJq5ulC7H05 ArfvdX1XyjOIGKy0TjOgvdOwsrO08lJFvefhS6JF0DS9uwM+DPgOfIpd6IK4R1kg cvoeidZmwLAEPjY4HjV7I4g6SRUDfdoM4LfXScrbBDLpVXeU5qUqENavG5Ip0wvK aX5cpCmvpE3Dk1fgU9uRnyMkr7E3bxEz2fh0eg9oxfaRMPWqEp6NzC9k4bQ5GKBx zB4fxe2+adurq55DRMEneTgkbx0pAjp7Nj+bKNI0Swb7N7TrhOFAKcUSLGnymR8q CvfxqGXo/UArdLgHVQ4QfbB2ki7dC0xPl+0zlM5m03nlsk28nwNKcRHG1xB6wYPQ rj3r -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:43 2026 by rpki-client