This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer File: Igqw164Bx7p9pp1xqRRys5DNcJE.cer (raw, json) Hash identifier: z6OCBmdciBW3FBlZ3nX+sqCvQxncFIyl2d+srMunvwU= Subject key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29E01EAF3ED980220EEC6930FDFFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209427 IP: 45.66.88.0/22 IP: 2a09:6640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9e:01:ea:f3:ed:98:02:20:ee:c6:93:0f:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:d5:25:0a:b6:f1:eb:f8:80:10:ae:b7:0d: e0:d3:d6:b0:90:36:71:09:92:79:db:fc:8b:62:b8: 7b:6f:dd:bd:6c:99:1c:ee:b7:b4:64:1d:26:10:2f: b2:2f:75:c8:45:a4:e4:73:97:26:6f:9b:40:36:45: 45:d0:3c:62:a1:b2:46:13:60:96:49:cc:9c:b9:71: b7:3a:5a:1b:21:50:b1:37:17:25:67:bb:4e:b1:f4: fe:4d:b8:f0:ca:10:52:a4:72:4c:31:06:ea:f0:3a: 5c:98:bf:14:09:0a:35:44:10:9d:ae:2c:ff:0c:35: b8:64:c9:23:94:c6:0e:9d:2f:ac:e4:cb:ac:b0:bf: bd:ea:d9:61:8c:81:e6:b0:ef:b4:27:d7:26:a5:a4: 54:a9:01:c8:88:1b:8a:2d:f3:da:4b:f9:ac:15:f5: 2a:fa:54:b7:2f:84:de:0b:a2:a9:47:dd:e0:f0:a3: 89:32:0e:17:85:0a:c2:fb:b4:59:21:fb:94:5b:1f: ad:4a:f9:72:97:f9:97:a7:0b:7f:84:a5:76:6d:cb: 36:8e:0b:17:13:42:cc:3a:e7:04:ad:67:21:c7:87: eb:b1:e2:21:dd:35:63:4d:cf:10:19:a1:71:3d:62: 2f:0d:3f:b4:92:b5:27:0f:03:5c:84:81:2b:ec:c3: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.88.0/22 IPv6: 2a09:6640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209427 Signature Algorithm: sha256WithRSAEncryption 3b:40:dc:db:0e:de:6b:e8:a2:7f:79:0e:dd:46:73:35:76:6d: 05:43:a6:f8:1b:73:61:e2:db:dc:f7:0d:eb:b4:6b:24:09:6a: 70:78:e8:ed:f1:df:2c:6c:fb:a7:54:c4:08:80:d3:89:df:1f: 60:b8:34:26:16:47:a6:df:28:58:e5:7f:af:68:15:ad:99:a5: 8f:a5:db:99:b1:95:27:5e:71:8c:b8:c2:0f:9f:a2:85:38:11: dd:67:a1:9e:46:ad:56:85:f3:32:be:c6:e3:ed:cb:3c:49:65: 0b:36:14:91:43:66:78:7b:92:5a:cb:ad:a3:ab:7a:85:49:f7: c9:5c:7b:2f:31:78:66:d0:71:58:05:c8:21:77:b8:4c:40:4b: f9:61:32:31:7c:40:b3:8d:2e:0f:b4:51:d3:63:8a:3c:a5:2b: b6:d0:b4:bb:a3:b3:ba:54:9d:44:b3:72:00:b5:8a:61:c6:ec: ed:66:e4:23:7d:3b:15:5f:f2:54:96:94:c2:ec:59:d4:3d:34: 36:61:98:92:06:79:c3:21:5a:e6:53:e5:d3:8a:1c:ac:70:d2: 5d:a0:db:cb:ed:df:74:87:7f:6b:32:d9:07:9c:4f:21:3c:33: fc:67:42:a9:e7:43:08:c5:e3:4d:7a:b3:69:cd:2d:d1:8c:fc: 46:30:3d:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4op4B6vPtmAIg7saTD9/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjBhYjBkN2FlMDFjN2JhN2RhNjlkNzFhOTE0NzJiMzkwY2Q3MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HVJQq28ev4gBCutw3g09awkDZx CZJ52/yLYrh7b929bJkc7re0ZB0mEC+yL3XIRaTkc5cmb5tANkVF0DxiobJGE2CW ScycuXG3OlobIVCxNxclZ7tOsfT+TbjwyhBSpHJMMQbq8DpcmL8UCQo1RBCdriz/ DDW4ZMkjlMYOnS+s5MussL+96tlhjIHmsO+0J9cmpaRUqQHIiBuKLfPaS/msFfUq +lS3L4TeC6KpR93g8KOJMg4XhQrC+7RZIfuUWx+tSvlyl/mXpwt/hKV2bcs2jgsX E0LMOucErWchx4frseIh3TVjTc8QGaFxPWIvDT+0krUnDwNchIEr7MMJbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCIKsNeuAce6faadcakUcrOQzXCRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2YwNDY1 OC1mYWQ3LTQyM2MtYmI0Mi04MmZhM2QyNjA4NjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvZjA0NjU4 LWZhZDctNDIzYy1iYjQyLTgyZmEzZDI2MDg2OS8xL0lncXcxNjRCeDdwOXBwMXhx UlJ5czVETmNKRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUJYMA0EAgACMAcDBQMqCWZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyEzANBgkqhkiG9w0BAQsFAAOCAQEAO0Dc2w7ea+ii f3kO3UZzNXZtBUOm+BtzYeLb3PcN67RrJAlqcHjo7fHfLGz7p1TECIDTid8fYLg0 JhZHpt8oWOV/r2gVrZmlj6XbmbGVJ15xjLjCD5+ihTgR3WehnkatVoXzMr7G4+3L PEllCzYUkUNmeHuSWsuto6t6hUn3yVx7LzF4ZtBxWAXIIXe4TEBL+WEyMXxAs40u D7RR02OKPKUrttC0u6OzulSdRLNyALWKYcbs7WbkI307FV/yVJaUwuxZ1D00NmGY kgZ5wyFa5lPl04ocrHDSXaDby+3fdId/azLZB5xPITwz/GdCqedDCMXjTXqzac0t 0Yz8RjA9gQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:35:08 2026 by rpki-client