This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer File: IY2yiCPzcIslWqEkum73QdET6vM.cer (raw, json) Hash identifier: PKk9LE+P+HxJxcsFi28CJ2Z1Iqy9WAG9sKijNmZgxfU= Subject key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF05EA636A6BB69A53D88B34A0B358B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.48.184.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:5e:a6:36:a6:bb:69:a5:3d:88:b3:4a:0b:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=218db28823f3708b255aa124ba6ef741d113eaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:5c:54:d6:5e:38:3c:d5:88:ac:be:16:39: 32:60:94:b6:cf:28:fa:7b:8b:15:7f:5a:79:f1:1d: 8a:11:6d:b3:70:7a:b8:5c:3b:ec:e5:90:ba:0f:50: fa:76:91:92:f5:86:47:7b:60:a4:00:3f:32:44:5b: 25:68:05:9e:d3:f0:55:54:9e:2d:94:30:a2:a8:50: 04:49:c7:23:ea:11:84:ab:f3:b5:57:ae:8d:a3:03: 19:d3:77:20:6e:45:ce:54:1b:a4:b9:a8:62:4b:20: f0:4c:a1:43:1d:a6:99:1c:50:14:06:df:46:69:20: ee:bf:7a:0d:ab:3b:7d:19:fd:8a:d9:92:20:87:d8: 40:3d:a1:98:44:92:b6:c3:d9:fc:2c:6d:4f:d0:60: 7b:d8:5a:85:cf:9d:1d:18:32:03:76:fa:2c:e6:b2: f7:01:34:a2:ab:df:11:53:67:4d:f0:8c:dc:73:3a: 93:b0:51:28:97:70:5b:5d:de:fc:2a:24:12:41:df: 29:1c:42:35:60:ec:c1:06:d0:5e:1d:bb:f3:64:52: 2a:ce:f0:2a:b2:fa:81:33:14:fe:df:70:ad:ec:ab: 39:ce:64:c2:b8:4f:e9:5d:59:65:50:08:8a:9d:45: eb:13:23:90:f6:2f:b4:28:8d:d1:10:b1:6b:83:ba: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.184.0/22 Signature Algorithm: sha256WithRSAEncryption 02:34:4c:ef:ac:f1:71:a0:db:26:62:f2:fa:ee:0b:ea:23:36: 9a:27:31:a5:f7:b7:61:66:a5:8d:ee:2e:34:4d:bb:53:f4:72: de:6e:2f:07:f7:df:cc:e1:bd:e1:82:8f:1e:4e:83:c8:64:48: 70:0c:e6:62:e0:b8:ec:56:6b:aa:08:38:2e:e8:6a:ab:7f:dd: 78:82:ae:15:9b:6c:55:02:b6:24:b7:5c:d3:44:c2:f1:68:1d: 2d:42:50:4c:31:3a:73:d7:4e:46:7f:7c:c6:57:9c:2c:73:68: 5a:4b:94:95:18:9c:0f:10:04:63:f6:36:69:36:cb:e8:11:88: 3e:5b:df:88:34:08:89:49:a6:1a:1a:a9:76:58:da:b0:7e:f4: 68:7b:29:d9:d1:fb:5a:60:2b:29:e1:75:d0:7e:92:40:bd:4b: a7:e5:3e:f7:67:08:a9:27:95:20:1d:7e:f7:5f:83:d9:0f:6f: ac:47:c3:41:14:e6:11:b6:54:15:2f:a7:e7:7c:47:66:0f:24: fd:81:d8:42:c1:9f:d8:99:33:93:44:fc:39:11:ba:09:7b:09: 7c:f1:7d:86:3a:e7:22:8d:4a:4a:c3:2e:6a:15:4a:28:33:99: f0:94:e2:b8:3f:6e:ae:99:2c:d1:59:37:03:c0:24:2b:dc:91: f1:4f:d7:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/8F6mNqa7aaU9iLNKCzWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMThkYjI4ODIzZjM3MDhiMjU1YWExMjRiYTZlZjc0MWQxMTNlYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01xcVNZeODzViKy+FjkyYJS2zyj6 e4sVf1p58R2KEW2zcHq4XDvs5ZC6D1D6dpGS9YZHe2CkAD8yRFslaAWe0/BVVJ4t lDCiqFAESccj6hGEq/O1V66NowMZ03cgbkXOVBukuahiSyDwTKFDHaaZHFAUBt9G aSDuv3oNqzt9Gf2K2ZIgh9hAPaGYRJK2w9n8LG1P0GB72FqFz50dGDIDdvos5rL3 ATSiq98RU2dN8IzcczqTsFEol3BbXd78KiQSQd8pHEI1YOzBBtBeHbvzZFIqzvAq svqBMxT+33Ct7Ks5zmTCuE/pXVllUAiKnUXrEyOQ9i+0KI3RELFrg7rTLwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCGNsogj83CLJVqhJLpu90HRE+rzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzc1MjEx ZS0zNjE5LTQyNWYtYmFiZC03OWRjM2QwYmJlZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNzUyMTFl LTM2MTktNDI1Zi1iYWJkLTc5ZGMzZDBiYmVkOC8xL0lZMnlpQ1B6Y0lzbFdxRWt1 bTczUWRFVDZ2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwjC4MA0GCSqGSIb3DQEBCwUAA4IBAQACNEzv rPFxoNsmYvL67gvqIzaaJzGl97dhZqWN7i40TbtT9HLebi8H99/M4b3hgo8eToPI ZEhwDOZi4LjsVmuqCDgu6Gqrf914gq4Vm2xVArYkt1zTRMLxaB0tQlBMMTpz105G f3zGV5wsc2haS5SVGJwPEARj9jZpNsvoEYg+W9+INAiJSaYaGql2WNqwfvRoeynZ 0ftaYCsp4XXQfpJAvUun5T73ZwipJ5UgHX73X4PZD2+sR8NBFOYRtlQVL6fnfEdm DyT9gdhCwZ/YmTOTRPw5EboJewl88X2GOucijUpKwy5qFUooM5nwlOK4P26umSzR WTcDwCQr3JHxT9eO -----END CERTIFICATE-----Generated at Mon Jan 26 22:38:43 2026 by rpki-client