This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer File: IjbtX1Yj7et5EKzTHV9u6B5csX4.cer (raw, json) Hash identifier: gmwXJihJqA9jIbtl05p05Zw3lejAKu02qtFITuklWko= Subject key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910134C78BF18D20EFF0D1E4A335BB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31562 AS: 42543 IP: 83.166.64.0/19 IP: 2a03:9600::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:13:4c:78:bf:18:d2:0e:ff:0d:1e:4a:33:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:ee:9b:cf:06:59:64:b1:0d:04:0c:19:c8: 3b:ba:38:4a:fb:ea:37:a8:90:82:16:8e:3d:ba:6a: e3:16:37:59:b9:d6:7f:37:c8:7e:b4:01:2b:a9:2e: 4d:d0:0c:1b:d9:b6:55:1a:21:bf:0e:44:bb:96:b0: a6:f0:28:9d:ab:e7:b4:fe:60:ee:d0:b5:4f:6c:2b: fe:38:6f:1b:82:88:de:9c:62:f6:bc:cf:80:07:98: 56:c9:f1:f6:ea:70:ab:51:3e:c5:92:cf:a3:0b:7f: 13:cb:08:4f:aa:4c:99:46:4e:36:21:02:bd:66:72: bd:9c:5b:5e:5b:b3:e9:e2:40:b3:ad:6b:5c:ac:51: 57:7d:aa:7f:b9:54:34:9a:76:1f:f1:20:5c:8d:5e: 43:d2:ee:7b:f8:48:03:b6:53:b2:10:17:74:92:06: 3b:c3:0e:9f:41:aa:d4:d0:76:ba:be:42:f6:a0:ba: 9b:5a:8e:df:57:b7:22:15:5e:57:8a:53:a5:d9:4c: 42:5b:82:b6:18:92:98:fa:67:98:7d:87:a4:ed:7b: 3e:80:6f:db:da:3b:ec:34:1d:59:de:ee:5f:b4:53: 14:88:49:7d:c2:0d:ea:ec:7b:1f:64:c3:58:66:47: 17:2a:a0:ff:5a:82:9a:23:e5:cf:06:dd:d9:30:13: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.166.64.0/19 IPv6: 2a03:9600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31562 42543 Signature Algorithm: sha256WithRSAEncryption 02:74:86:17:38:8c:88:68:98:17:2e:64:93:52:e0:d4:67:3f: 78:90:a5:98:fc:4c:1d:2f:e9:75:d0:01:ac:4d:19:c1:ed:1e: 32:1b:2c:14:d5:24:0e:d4:98:25:b8:99:81:6f:93:22:bf:4c: 9e:0e:e3:91:63:66:81:72:45:36:0b:73:6c:d0:aa:1c:d8:91: 8c:fe:af:04:02:29:69:c9:84:b7:0f:fc:eb:75:12:52:01:6d: a7:12:d4:7b:9e:73:c4:75:32:b7:66:6b:11:06:0f:5a:2a:a4: 84:5f:ce:ae:7e:42:94:51:db:e8:24:ab:cd:91:90:cd:2d:bb: c8:eb:ea:3b:30:b0:9e:57:e7:6a:f1:df:3c:fd:54:85:69:bf: 1b:95:f4:2e:56:97:b3:36:28:fd:d4:9f:e4:c9:9d:dd:b5:d2: 89:24:5c:93:f1:ba:e7:f2:a0:3e:8e:d9:be:7a:0e:4b:b0:14: 18:13:a3:66:05:b8:f3:86:6c:c5:60:91:02:54:5e:67:7e:d4: 42:60:07:78:ea:d1:11:f7:23:5a:58:eb:8b:7e:3d:42:e3:5f: 8d:b9:58:3d:6c:0c:2d:b1:0a:8a:ab:23:78:df:0f:15:a3:cb: 7a:00:4b:5a:80:53:59:65:28:07:aa:f3:6c:46:18:4f:75:77: 84:cd:36:69 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt5EBNMeL8Y0g7/DR5KM1uyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjM2ZWQ1ZjU2MjNlZGViNzkxMGFjZDMxZDVmNmVlODFlNWNiMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gXum88GWWSxDQQMGcg7ujhK++o3 qJCCFo49umrjFjdZudZ/N8h+tAErqS5N0Awb2bZVGiG/DkS7lrCm8Cidq+e0/mDu 0LVPbCv+OG8bgojenGL2vM+AB5hWyfH26nCrUT7Fks+jC38TywhPqkyZRk42IQK9 ZnK9nFteW7Pp4kCzrWtcrFFXfap/uVQ0mnYf8SBcjV5D0u57+EgDtlOyEBd0kgY7 ww6fQarU0Ha6vkL2oLqbWo7fV7ciFV5XilOl2UxCW4K2GJKY+meYfYek7Xs+gG/b 2jvsNB1Z3u5ftFMUiEl9wg3q7HsfZMNYZkcXKqD/WoKaI+XPBt3ZMBOSUQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFCI27V9WI+3reRCs0x1fbugeXLF+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzFkOWRk YS0yYWRmLTQ2YmQtOGFmNy00ZDE2YmU5YmExMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvMWQ5ZGRh LTJhZGYtNDZiZC04YWY3LTRkMTZiZTliYTEzMi8xL0lqYnRYMVlqN2V0NUVLelRI Vjl1NkI1Y3NYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFU6ZAMA0EAgACMAcDBQAqA5YAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAntKAgMApi8wDQYJKoZIhvcNAQELBQADggEBAAJ0hhc4 jIhomBcuZJNS4NRnP3iQpZj8TB0v6XXQAaxNGcHtHjIbLBTVJA7UmCW4mYFvkyK/ TJ4O45FjZoFyRTYLc2zQqhzYkYz+rwQCKWnJhLcP/Ot1ElIBbacS1Huec8R1Mrdm axEGD1oqpIRfzq5+QpRR2+gkq82RkM0tu8jr6jswsJ5X52rx3zz9VIVpvxuV9C5W l7M2KP3Un+TJnd210okkXJPxuufyoD6O2b56DkuwFBgTo2YFuPOGbMVgkQJUXmd+ 1EJgB3jq0RH3I1pY64t+PULjX425WD1sDC2xCoqrI3jfDxWjy3oAS1qAU1llKAeq 82xGGE91d4TNNmk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:49 2026 by rpki-client