This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer File: IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer (raw, json) Hash identifier: uVdjHo0ZrBjiYUIZKJvNBNmbjOvRV2erf4M8MVoMJ0o= Subject key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6642855CED4343CE1FB3B5122A490 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16030 IP: 77.75.176.0/21 IP: 91.209.234.0/24 IP: 91.219.21.0/24 IP: 185.154.8.0/22 IP: 185.184.148.0/22 IP: 185.193.68.0/22 IP: 185.251.13.0/24 IP: 194.116.152.0/23 IP: 212.121.224.0/19 IP: 213.148.192.0/19 IP: 2001:4d10::/32 IP: 2a07:8b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:64:28:55:ce:d4:34:3c:e1:fb:3b:51:22:a4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:08:f5:63:72:1c:af:80:1e:92:6d:1d:c8: 2a:e0:6f:a0:3a:86:90:dc:3a:24:21:08:85:df:e2: d2:3e:12:14:d8:b0:9b:2f:49:7d:d4:7f:75:10:70: a0:26:50:1f:98:56:04:08:58:ac:ee:36:0f:59:af: 0f:86:c5:f7:21:9c:ed:54:86:76:61:04:5f:ad:d0: a0:60:82:f8:53:04:49:9b:74:cf:23:e2:b9:c9:e2: 5d:38:cf:d1:79:3c:ae:aa:08:dd:1a:b3:09:9d:54: 60:4e:8b:dd:27:f2:80:33:07:ec:02:ad:9e:20:d1: 82:b9:06:91:92:d1:a5:c0:7e:ef:ba:cd:9b:57:06: d3:79:8d:13:f7:1d:64:e3:2a:b7:9a:a2:61:03:8d: a5:33:bc:8b:a4:f3:48:eb:e8:53:10:7d:25:ce:93: aa:cf:1d:5a:b6:93:f0:1b:4e:16:17:d7:45:39:8a: 37:5a:98:52:f6:a2:a9:ca:89:6b:75:2e:ec:0e:d6: e3:d2:fb:6c:d7:09:35:44:6d:3b:db:8c:08:50:56: 4c:c5:e7:80:a8:c4:a4:16:ab:aa:db:1b:84:6d:d4: d9:58:3d:d9:f4:59:fd:77:25:23:a5:a1:b1:8b:25: 0a:48:aa:32:7b:8d:02:ff:61:4a:07:68:ff:0c:a4: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.176.0/21 91.209.234.0/24 91.219.21.0/24 185.154.8.0/22 185.184.148.0/22 185.193.68.0/22 185.251.13.0/24 194.116.152.0/23 212.121.224.0/19 213.148.192.0/19 IPv6: 2001:4d10::/32 2a07:8b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16030 Signature Algorithm: sha256WithRSAEncryption 4c:54:7f:8a:2a:f6:5b:89:72:07:9b:2a:14:17:c6:0c:37:71: be:fe:09:36:6d:22:9e:29:c2:fd:28:dd:9e:ee:69:e0:66:56: aa:9b:3a:d6:6a:5e:c8:7a:3b:1b:e5:76:26:15:30:a0:41:77: f1:59:3a:81:65:6a:b0:48:ec:45:53:94:f8:4e:d0:90:03:0f: 13:60:df:5b:23:f2:ad:61:42:92:42:63:4d:08:26:6e:8c:cb: 03:4e:c5:a5:f4:3a:a3:0f:0c:d5:c8:0d:06:d2:42:8a:5e:12: 7f:e8:ec:4c:bd:7d:18:a7:7e:31:80:d3:1a:ae:71:3c:4f:0f: 06:94:8b:5c:4a:ef:3e:88:3f:65:98:5b:3f:ca:7d:5a:71:24: 0e:ba:23:02:10:41:94:86:37:5d:05:ca:c4:e0:6c:c6:51:6c: 58:57:1e:e4:fa:23:31:50:e2:24:7e:6b:55:0c:76:ac:3d:36: d2:d0:2f:7b:93:10:93:4b:55:02:ec:3e:84:8a:37:09:20:12: 36:35:a7:a8:dc:7b:00:ac:6d:0f:f5:bc:78:c5:67:44:a9:1b: 3b:21:31:04:59:f9:7a:ef:e8:58:b0:0a:85:28:33:5b:23:68: 8f:8e:af:98:1f:be:69:9d:b9:61:af:9d:3f:a9:45:19:20:db: e6:c9:0c:b0 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt+pmQoVc7UNDzh+ztRIqSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM3Y2RhNzVmNGUxNWU0ODZkZWU1YTY1MDFjYmUyMDE4YmMwZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nUI9WNyHK+AHpJtHcgq4G+gOoaQ 3DokIQiF3+LSPhIU2LCbL0l91H91EHCgJlAfmFYECFis7jYPWa8PhsX3IZztVIZ2 YQRfrdCgYIL4UwRJm3TPI+K5yeJdOM/ReTyuqgjdGrMJnVRgTovdJ/KAMwfsAq2e INGCuQaRktGlwH7vus2bVwbTeY0T9x1k4yq3mqJhA42lM7yLpPNI6+hTEH0lzpOq zx1atpPwG04WF9dFOYo3WphS9qKpyolrdS7sDtbj0vts1wk1RG0724wIUFZMxeeA qMSkFquq2xuEbdTZWD3Z9Fn9dyUjpaGxiyUKSKoye40C/2FKB2j/DKQL1wIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFCLHzadfThXkht7lplAcviAYvA4PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2I5MjMz MS0yYmI0LTRhNTktOTk3OC03NTFiMTdkMWM0MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvYjkyMzMx LTJiYjQtNGE1OS05OTc4LTc1MWIxN2QxYzQzNy8xL0lzZk5wMTlPRmVTRzN1V21V QnktSUJpOERnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQDTUuwAwQAW9HqAwQAW9sVAwQCuZoIAwQCubiU AwQCucFEAwQAufsNAwQBwnSYAwQF1HngAwQF1ZTAMBQEAgACMA4DBQAgAU0QAwUD KgeLADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI+njANBgkqhkiG9w0BAQsFAAOC AQEATFR/iir2W4lyB5sqFBfGDDdxvv4JNm0ininC/Sjdnu5p4GZWqps61mpeyHo7 G+V2JhUwoEF38Vk6gWVqsEjsRVOU+E7QkAMPE2DfWyPyrWFCkkJjTQgmbozLA07F pfQ6ow8M1cgNBtJCil4Sf+jsTL19GKd+MYDTGq5xPE8PBpSLXErvPog/ZZhbP8p9 WnEkDrojAhBBlIY3XQXKxOBsxlFsWFce5PojMVDiJH5rVQx2rD020tAve5MQk0tV Auw+hIo3CSASNjWnqNx7AKxtD/W8eMVnRKkbOyExBFn5eu/oWLAKhSgzWyNoj46v mB++aZ25Ya+dP6lFGSDb5skMsA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:00 2026 by rpki-client