This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer File: IbgvyO2I-ZyrV9doAxdusnqfC_o.cer (raw, json) Hash identifier: zs9ad44a/7iu1l1K/XJhsRcn8et+TKveP3TgnAFGMNU= Subject key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA6A0F0AB44E4B4DCA6A35CC6F21F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60845 IP: 185.113.164.0/22 IP: 2001:67c:1700::/48 IP: 2a03:1480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:a0:f0:ab:44:e4:b4:dc:a6:a3:5c:c6:f2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:9d:80:3c:78:51:e8:b0:b5:a1:56:d5:69: d1:ea:64:61:47:6e:9d:52:8f:11:fe:f7:45:72:f5: 30:35:74:2a:fe:e4:0d:6b:2b:6d:48:4b:f2:0d:df: e5:f8:a4:6c:f3:76:86:b4:6a:2f:05:ba:f2:61:d8: 75:59:c6:90:e1:47:da:68:a7:c3:52:ed:75:99:fc: 68:1e:20:21:16:3e:95:b4:b3:57:9a:dd:60:7d:81: 2b:12:ef:14:cc:cd:ac:06:a4:78:aa:34:10:9c:cf: 3d:60:af:b1:fa:aa:ae:db:01:2e:08:80:a4:fe:3b: 82:3c:d3:fb:66:47:52:58:0c:40:82:ab:f9:79:90: 48:01:a6:b2:7d:cb:36:a6:64:8c:18:c7:b7:a6:e8: 39:be:f1:89:10:3c:bc:cb:2b:6b:50:57:76:c4:e9: ec:f2:7a:b5:b9:8e:5a:32:6e:57:bd:f2:28:d4:d0: 40:79:a7:9f:19:83:9c:1f:f1:d6:a7:1e:68:12:37: 18:51:66:f9:59:a9:f8:dd:72:c0:64:91:8e:53:c6: ce:3b:13:2c:57:38:79:d3:5d:3c:cf:73:f3:af:64: 72:56:07:85:8c:10:59:8f:b9:5c:4f:b4:3a:9d:d4: f1:56:48:98:7d:16:b6:27:db:bb:c7:9f:7e:bd:38: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.164.0/22 IPv6: 2001:67c:1700::/48 2a03:1480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60845 Signature Algorithm: sha256WithRSAEncryption 76:68:1b:a1:c5:58:c4:70:a6:05:7c:94:bb:e5:dc:8c:74:ae: f6:8c:0f:b2:36:3b:6f:1a:f5:63:a4:4b:cc:f9:4f:9b:48:b7: 8e:35:7d:78:c0:32:75:c7:23:f4:d8:04:f6:d8:ca:f6:6a:0d: 8b:f5:83:be:f6:a4:df:f3:33:a6:a3:05:93:da:57:62:0d:cf: a7:cf:4a:f6:50:af:12:f6:cc:75:ac:a7:a1:68:f4:f2:8c:6f: 93:eb:24:3b:f1:c6:a9:54:23:1b:2f:b1:02:63:f5:95:08:64: bf:33:04:e6:64:98:c6:55:b8:8e:99:79:2e:e9:75:68:67:9d: a8:bc:be:2f:f1:8b:2c:9e:28:4e:69:60:7c:a1:7a:65:a8:51: d6:2a:d1:5c:f0:bb:5c:a2:6b:9b:1e:e7:5e:27:3a:52:f2:96: c3:ae:c7:8c:18:e0:0f:44:de:5c:c8:43:6e:ee:89:17:8b:d4: 90:22:25:aa:05:9d:8f:9c:97:01:77:5b:e7:7a:0a:59:02:f1: a7:08:13:4a:e0:fc:bc:2c:85:13:a6:65:2d:a8:53:7b:28:f7: 60:5c:9e:f9:3f:5e:a8:32:57:ca:ca:9a:d8:ed:62:a3:e0:54: 9b:33:de:03:64:3e:a5:f2:c1:4e:cb:5f:73:f4:1f:03:f8:f8: 23:25:4c:fd -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt5fqag8KtE5LTcpqNcxvIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWI4MmZjOGVkODhmOTljYWI1N2Q3NjgwMzE3NmViMjdhOWYwYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOdgDx4UeiwtaFW1WnR6mRhR26d Uo8R/vdFcvUwNXQq/uQNayttSEvyDd/l+KRs83aGtGovBbryYdh1WcaQ4UfaaKfD Uu11mfxoHiAhFj6VtLNXmt1gfYErEu8UzM2sBqR4qjQQnM89YK+x+qqu2wEuCICk /juCPNP7ZkdSWAxAgqv5eZBIAaayfcs2pmSMGMe3pug5vvGJEDy8yytrUFd2xOns 8nq1uY5aMm5XvfIo1NBAeaefGYOcH/HWpx5oEjcYUWb5Wan43XLAZJGOU8bOOxMs Vzh50108z3Pzr2RyVgeFjBBZj7lcT7Q6ndTxVkiYfRa2J9u7x59+vTgDQwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFCG4L8jtiPmcq1fXaAMXbrJ6nwv6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2FiNjVm Ni0zMWJlLTQxNDktYTZlMy1hZTVmYTUzYjkzYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYWI2NWY2 LTMxYmUtNDE0OS1hNmUzLWFlNWZhNTNiOTNiMi8xL0liZ3Z5TzJJLVp5clY5ZG9B eGR1c25xZkNfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQCuXGkMBYEAgACMBADBwAgAQZ8FwADBQAqAxSA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtrTANBgkqhkiG9w0BAQsFAAOCAQEA dmgbocVYxHCmBXyUu+XcjHSu9owPsjY7bxr1Y6RLzPlPm0i3jjV9eMAydccj9NgE 9tjK9moNi/WDvvak3/MzpqMFk9pXYg3Pp89K9lCvEvbMdaynoWj08oxvk+skO/HG qVQjGy+xAmP1lQhkvzME5mSYxlW4jpl5Lul1aGedqLy+L/GLLJ4oTmlgfKF6ZahR 1irRXPC7XKJrmx7nXic6UvKWw67HjBjgD0TeXMhDbu6JF4vUkCIlqgWdj5yXAXdb 53oKWQLxpwgTSuD8vCyFE6ZlLahTeyj3YFye+T9eqDJXysqa2O1io+BUmzPeA2Q+ pfLBTstfc/QfA/j4IyVM/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:23 2026 by rpki-client