This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer (raw, json) Hash identifier: hprfZwIlmv1PltfcuIuQV3HUXKsF0m66L5XPtHZI+gs= Subject key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E2563E135D46D5E6E07CE955E714 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.225.248.0/22 IP: 144.2.0.0/19 IP: 144.2.176.0 -- 144.2.239.255 IP: 185.63.144.0/22 IP: 2a04:f540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e2:56:3e:13:5d:46:d5:e6:e0:7c:e9:55:e7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:02:01:4d:93:0f:89:b3:21:ea:de:80:5b: 12:da:c7:26:c6:1b:9c:f4:8e:95:8d:f3:04:c4:06: 29:11:3c:92:7b:ba:58:23:7a:b2:40:4c:dd:4e:ea: 9b:6c:8e:28:56:6b:56:64:00:90:bf:f8:a2:d9:04: bc:89:4f:d3:99:93:44:52:15:d8:78:fa:99:9d:7c: 73:c6:8e:2e:6a:ec:fb:e3:1b:82:69:35:7c:27:06: 51:b8:1f:5f:44:6b:2b:88:6a:2d:c3:d6:38:4a:42: 48:10:70:fd:52:82:80:2e:4a:2e:c3:35:e1:01:e6: 99:b0:22:ca:a3:52:31:88:5c:a2:e9:fc:0c:1c:a9: 54:8c:55:30:1d:bb:7e:32:89:e0:2d:80:72:42:0d: 8f:02:64:b7:a2:ad:65:c5:46:6b:c0:12:1c:fd:ca: e9:5f:21:9a:44:ae:c7:cc:6f:c7:8f:c5:0d:12:49: 65:25:3e:96:f4:33:34:2b:78:2c:e7:fd:a1:d1:1c: 4d:6d:48:7c:7e:41:03:ff:5c:05:b8:36:b1:48:97: c7:3c:48:b7:43:59:5d:06:44:0f:f4:aa:b1:75:f7: b3:85:23:92:43:cb:c5:80:8f:51:d6:7c:f8:be:fc: 36:11:11:43:4c:c7:e3:38:b6:dd:c1:5f:2e:36:97: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.248.0/22 144.2.0.0/19 144.2.176.0-144.2.239.255 185.63.144.0/22 IPv6: 2a04:f540::/29 Signature Algorithm: sha256WithRSAEncryption 0d:f2:2d:3e:bc:6d:91:89:b6:8c:13:51:8e:d6:ac:f2:25:8f: f5:86:72:0f:e0:29:46:52:5b:ad:6a:4d:6f:1e:c1:e1:26:5f: ee:31:c9:41:6f:12:88:fc:9e:ee:36:0b:af:7d:78:1f:4e:3e: e3:f1:2a:34:a2:d8:16:d0:99:a6:1e:7c:8c:47:82:7e:8f:21: 93:cf:15:bc:94:cb:e5:9b:5b:88:27:df:5f:70:34:dc:ae:ee: 30:04:34:1e:6e:95:b5:f8:83:e2:2b:3e:4c:16:48:65:51:bb: 72:9d:ce:30:ab:28:19:bb:68:42:db:36:2d:42:c4:d1:de:47: cd:fb:55:a6:95:1a:85:2d:d5:b3:a5:6e:09:22:62:6d:77:5f: d9:6d:e1:a1:cc:ce:af:16:b6:a1:be:c0:b3:95:6d:ed:c2:a2: f8:03:41:9a:cc:5a:17:09:f7:4b:25:61:5a:9e:13:c5:a0:74: 82:01:76:03:51:41:7a:1d:77:98:4a:23:3b:5c:5c:74:a8:0b: ff:2e:af:72:90:a5:00:84:71:6d:62:10:00:69:2f:9d:80:68: 18:cc:7c:79:8b:a8:87:61:bc:72:af:83:fb:d2:5a:3e:ea:1f: d3:ad:05:56:c6:ef:bc:32:46:65:93:58:8f:f2:6d:cc:f2:d1: 58:29:7d:5d -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt5EOJWPhNdRtXm4HzpVecUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWU4NmZmOTk3M2M5M2FiZTYzOThmMDMxOTY2YzI5ZDc1YTNiYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQCAU2TD4mzIeregFsS2scmxhuc 9I6VjfMExAYpETySe7pYI3qyQEzdTuqbbI4oVmtWZACQv/ii2QS8iU/TmZNEUhXY ePqZnXxzxo4uauz74xuCaTV8JwZRuB9fRGsriGotw9Y4SkJIEHD9UoKALkouwzXh AeaZsCLKo1IxiFyi6fwMHKlUjFUwHbt+MongLYByQg2PAmS3oq1lxUZrwBIc/crp XyGaRK7HzG/Hj8UNEkllJT6W9DM0K3gs5/2h0RxNbUh8fkED/1wFuDaxSJfHPEi3 Q1ldBkQP9KqxdfezhSOSQ8vFgI9R1nz4vvw2ERFDTMfjOLbdwV8uNpdwoQIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFCHob/mXPJOr5jmPAxlmwp11o7qGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzJmNmRk MC1iNzZmLTQ3ZDUtYTRhYi0zMmZlZWI1NjZlZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMmY2ZGQw LWI3NmYtNDdkNS1hNGFiLTMyZmVlYjU2NmVlNi8xL0llaHYtWmM4azZ2bU9ZOERH V2JDblhXanVvWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCW+H4AwQFkAIAMAwDBASQArADBASQAuADBAK5 P5AwDQQCAAIwBwMFAyoE9UAwDQYJKoZIhvcNAQELBQADggEBAA3yLT68bZGJtowT UY7WrPIlj/WGcg/gKUZSW61qTW8eweEmX+4xyUFvEoj8nu42C699eB9OPuPxKjSi 2BbQmaYefIxHgn6PIZPPFbyUy+WbW4gn319wNNyu7jAENB5ulbX4g+IrPkwWSGVR u3KdzjCrKBm7aELbNi1CxNHeR837VaaVGoUt1bOlbgkiYm13X9lt4aHMzq8WtqG+ wLOVbe3CovgDQZrMWhcJ90slYVqeE8WgdIIBdgNRQXodd5hKIztcXHSoC/8ur3KQ pQCEcW1iEABpL52AaBjMfHmLqIdhvHKvg/vSWj7qH9OtBVbG77wyRmWTWI/ybczy 0VgpfV0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client