This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer File: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer (raw, json) Hash identifier: EeWpLWWpC5cYpzmSpu5SQJUqIUtOwljfqpULrJ01Ra4= Subject key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2EA6ECBC6D1AE79C117701F3EBA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204114 AS: 210605 AS: 213336 IP: 45.148.176.0/22 IP: 185.25.112.0/22 IP: 2a00:7e60::/32 IP: 2a11:61c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:a6:ec:bc:6d:1a:e7:9c:11:77:01:f3:eb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5a:a1:1c:f1:0e:6b:b6:7a:86:30:3f:4e:ae: ee:d2:d1:bf:32:61:a4:17:55:e9:86:97:f6:69:d3: d5:9e:03:32:40:59:22:97:93:87:02:3c:de:3d:36: a7:a3:5f:7e:1d:9d:2c:51:bb:b5:51:8a:4c:34:5e: f9:f6:f5:62:1e:0f:3f:33:f4:50:86:0c:ec:8b:20: ff:cf:65:54:f9:4b:77:c8:53:6e:0e:75:5f:13:18: 91:02:b2:c6:f3:aa:a8:c7:05:62:63:73:11:4e:fd: ce:db:ad:78:db:4e:35:9a:88:38:04:ab:c0:23:78: b8:8c:ec:84:b8:e7:41:6d:6e:bf:fc:df:1b:90:8c: 1e:39:25:ed:9b:eb:e1:ed:67:ca:d8:4a:d5:73:0d: 5f:75:c3:49:b3:d5:4d:70:6d:c7:84:38:e0:93:2b: 26:07:98:cf:59:ea:ee:c2:71:3d:d9:c1:9e:7c:37: ee:39:f6:4c:ad:5c:26:ef:5f:1a:ce:6a:7a:05:b6: 50:b9:9b:70:1f:88:4b:fa:a6:a8:9c:cb:6d:bc:fb: b4:d2:74:cb:32:35:1c:4a:0b:a6:60:09:70:18:11: b1:bd:8c:db:3b:ea:54:ec:ed:56:de:66:58:9e:f8: 92:41:37:22:45:15:c6:ab:20:14:2c:f1:0e:c2:1f: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.176.0/22 185.25.112.0/22 IPv6: 2a00:7e60::/32 2a11:61c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204114 210605 213336 Signature Algorithm: sha256WithRSAEncryption a6:bb:c5:ff:fc:b9:97:54:9c:c9:6c:8f:8f:9e:ff:7e:d5:ab: 26:f1:b5:2f:fa:77:7d:de:b9:f1:25:ac:4d:b4:ad:2b:b1:1f: 09:ae:3f:9f:ea:28:fe:9e:b7:f6:ca:2b:26:34:07:8f:20:b3: d8:67:82:23:3a:4f:67:35:ca:a2:7a:62:70:0c:ba:2d:14:97: ec:e1:be:ac:88:ce:85:9d:e9:dd:a2:c5:0b:88:7c:4a:34:6e: 63:79:c2:5a:a7:89:a1:27:cb:45:c0:6f:14:9d:9c:b9:5e:fe: 2e:e1:89:fc:3f:52:1f:a3:7e:a5:cc:e2:63:f7:75:12:0b:aa: c9:d9:d4:5b:fa:b7:1d:78:80:c9:66:8f:41:99:83:36:84:11: a0:0d:d6:c4:ec:b8:41:62:f8:e7:e8:19:de:03:2f:49:09:da: 60:68:51:f6:96:c9:72:39:b5:4c:9a:7d:b5:d1:74:99:15:e5: 1d:db:9b:d9:52:e4:c5:5b:f6:b8:5c:13:38:c1:96:dd:4c:0e: 9c:e4:91:f7:bd:7f:f6:8b:ee:13:2a:27:b5:90:30:fc:06:c0: 5a:29:ea:ac:56:90:6d:b7:86:3b:d6:13:59:ee:47:04:02:1e: bd:cd:9f:f1:ff:6d:e0:18:74:df:53:9b:6c:02:95:2e:2a:83: ca:5b:ae:01 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt87i6m7LxtGuecEXcB8+ukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWMxNjcyZGJiYmY3MTY1YTZhODNiMzIyN2E3MTE5ZjBkMzFlOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lqhHPEOa7Z6hjA/Tq7u0tG/MmGk F1Xphpf2adPVngMyQFkil5OHAjzePTano19+HZ0sUbu1UYpMNF759vViHg8/M/RQ hgzsiyD/z2VU+Ut3yFNuDnVfExiRArLG86qoxwViY3MRTv3O26142041mog4BKvA I3i4jOyEuOdBbW6//N8bkIweOSXtm+vh7WfK2ErVcw1fdcNJs9VNcG3HhDjgkysm B5jPWeruwnE92cGefDfuOfZMrVwm718azmp6BbZQuZtwH4hL+qaonMttvPu00nTL MjUcSgumYAlwGBGxvYzbO+pU7O1W3mZYnviSQTciRRXGqyAULPEOwh8D3wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFCHBZy27v3Flpqg7MienEZ8NMejuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2MwNWQ0 Yy05NmQzLTRiNTctYWUzNC0zNDc3YzdmY2Q0ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYzA1ZDRj LTk2ZDMtNGI1Ny1hZTM0LTM0NzdjN2ZjZDRkOS8xL0ljRm5MYnVfY1dXbXFEc3lK NmNSbncweDZPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLZSwAwQCuRlwMBQEAgACMA4DBQAqAH5gAwUA KhFhwDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDHVICAwM2rQIDA0FYMA0GCSqG SIb3DQEBCwUAA4IBAQCmu8X//LmXVJzJbI+Pnv9+1asm8bUv+nd93rnxJaxNtK0r sR8Jrj+f6ij+nrf2yismNAePILPYZ4IjOk9nNcqiemJwDLotFJfs4b6siM6Fnend osULiHxKNG5jecJap4mhJ8tFwG8UnZy5Xv4u4Yn8P1Ifo36lzOJj93USC6rJ2dRb +rcdeIDJZo9BmYM2hBGgDdbE7LhBYvjn6BneAy9JCdpgaFH2lslyObVMmn210XSZ FeUd25vZUuTFW/a4XBM4wZbdTA6c5JH3vX/2i+4TKie1kDD8BsBaKeqsVpBtt4Y7 1hNZ7kcEAh69zZ/x/23gGHTfU5tsApUuKoPKW64B -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:09 2026 by rpki-client