This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer File: IvLC57wdpU2RnKW1lB03iJKyzLI.cer (raw, json) Hash identifier: E/ISAyLuWZnvbchN6U5r6DkFSXp1rHbN7A3jVVpe8vQ= Subject key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1399618A64954879196B467E528D67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49074 AS: 50437 AS: 51474 AS: 56887 AS: 56940 IP: 31.131.40.0/21 IP: 31.131.160.0/21 IP: 46.151.224.0/21 IP: 85.255.112.0/20 IP: 91.219.16.0/22 IP: 91.228.140.0/22 IP: 91.228.145.0/24 IP: 91.229.12.0/22 IP: 91.232.182.0/24 IP: 91.232.184.0/23 IP: 91.233.192.0/22 IP: 91.234.56.0/22 IP: 91.236.88.0/22 IP: 91.239.164.0/22 IP: 91.242.48.0/22 IP: 109.166.32.0 -- 109.166.55.255 IP: 151.248.64.0/19 IP: 176.108.224.0/21 IP: 176.113.96.0/20 IP: 176.114.56.0/21 IP: 176.116.128.0/21 IP: 176.118.80.0/21 IP: 176.124.72.0/21 IP: 178.212.200.0/21 IP: 185.76.52.0/22 IP: 193.242.196.0/22 IP: 194.40.204.0/22 IP: 194.107.122.0/24 IP: 194.213.6.0/24 IP: 195.54.54.0/23 IP: 2a00:aa80::/32 IP: 2a04:2040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:99:61:8a:64:95:48:79:19:6b:46:7e:52:8d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:58:9b:39:80:6a:63:9c:70:c9:bb:76:5e: 33:c7:98:ba:76:8c:bb:80:ef:4b:f4:e3:9b:14:97: 51:fb:6e:35:f2:38:b9:f3:28:16:e3:04:85:28:16: 0d:dc:92:f5:3c:b6:f2:44:32:73:24:8f:7c:7d:13: 23:be:cb:2b:5a:58:51:92:f0:bb:37:68:a8:99:48: c6:85:59:4d:fc:8a:e3:e5:03:8f:cc:cc:6b:eb:a8: 43:37:f4:a4:c3:3e:be:72:c5:c4:cb:ff:42:f7:5f: f1:67:09:7d:b4:20:58:c1:84:99:f7:98:a2:58:9c: b6:b7:3c:69:da:7a:7e:58:50:aa:88:dd:26:cf:34: 44:57:47:62:ee:48:29:63:05:e3:18:c6:d3:b6:e4: ef:c8:22:ec:e0:a3:70:c8:dd:f1:32:49:96:38:d6: 6c:b2:e5:e8:a9:75:0f:de:c8:9a:21:24:50:95:1d: 69:d9:ea:92:34:6a:b6:d0:40:71:0b:3b:ad:e6:fc: 42:32:92:fd:6c:b0:f3:ae:de:28:cd:a7:95:69:5b: 98:92:04:17:f9:fc:d6:79:14:4f:51:cc:f7:c1:f8: 2b:27:77:22:f8:1f:0a:92:74:08:f2:3c:cf:3e:ce: 98:6b:23:42:65:41:1c:af:8f:fa:fc:a1:13:e7:30: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.40.0/21 31.131.160.0/21 46.151.224.0/21 85.255.112.0/20 91.219.16.0/22 91.228.140.0/22 91.228.145.0/24 91.229.12.0/22 91.232.182.0/24 91.232.184.0/23 91.233.192.0/22 91.234.56.0/22 91.236.88.0/22 91.239.164.0/22 91.242.48.0/22 109.166.32.0-109.166.55.255 151.248.64.0/19 176.108.224.0/21 176.113.96.0/20 176.114.56.0/21 176.116.128.0/21 176.118.80.0/21 176.124.72.0/21 178.212.200.0/21 185.76.52.0/22 193.242.196.0/22 194.40.204.0/22 194.107.122.0/24 194.213.6.0/24 195.54.54.0/23 IPv6: 2a00:aa80::/32 2a04:2040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49074 50437 51474 56887 56940 Signature Algorithm: sha256WithRSAEncryption 5a:f7:1d:de:e5:2d:e1:7e:05:68:38:04:f2:e6:fb:35:88:1e: ee:8d:da:e1:e0:72:1a:00:53:96:71:fb:5f:34:9d:2b:0e:52: d6:32:81:c5:43:4c:ad:ed:70:81:f5:71:ac:83:0a:fa:d0:ab: 54:1b:b7:ba:3f:c5:a3:24:09:b3:4b:b9:cd:90:0a:ef:da:94: 5e:3a:2f:ae:31:52:d5:c9:31:b5:d7:20:45:9a:00:5c:1c:48: e9:07:79:ef:8d:68:ba:2f:ff:73:90:7f:4f:ff:1a:2a:a9:58: ba:61:88:b3:91:96:18:0a:0c:b5:da:00:c4:b8:36:58:01:7a: bd:b5:f0:03:a9:de:af:41:02:58:1f:80:26:be:76:d3:86:ac: 7e:0e:6d:d2:4b:3e:ee:46:4a:65:2b:c4:4d:b1:01:37:17:4a: c2:c5:15:ca:d1:87:96:e7:c7:75:17:93:73:8b:ef:19:d9:1d: 66:d6:23:4c:1b:9a:54:c9:f7:70:91:22:39:99:bd:1d:a3:7f: 81:76:75:ff:fc:c6:22:48:cc:c9:80:77:2c:be:53:81:90:d7: 23:2f:e2:02:07:11:5a:c1:b8:f3:21:da:f3:71:a4:c3:b0:46: 19:25:f0:3e:48:86:4b:f0:6e:be:54:af:f6:f7:63:b8:0b:e5: f5:dc:6b:68 -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgISAZt/E5lhimSVSHkZa0Z+Uo1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmYyYzJlN2JjMWRhNTRkOTE5Y2E1YjU5NDFkMzc4ODkyYjJjY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3BYmzmAamOccMm7dl4zx5i6doy7 gO9L9OObFJdR+2418ji58ygW4wSFKBYN3JL1PLbyRDJzJI98fRMjvssrWlhRkvC7 N2iomUjGhVlN/Irj5QOPzMxr66hDN/Skwz6+csXEy/9C91/xZwl9tCBYwYSZ95ii WJy2tzxp2np+WFCqiN0mzzREV0di7kgpYwXjGMbTtuTvyCLs4KNwyN3xMkmWONZs suXoqXUP3siaISRQlR1p2eqSNGq20EBxCzut5vxCMpL9bLDzrt4ozaeVaVuYkgQX +fzWeRRPUcz3wfgrJ3ci+B8KknQI8jzPPs6YayNCZUEcr4/6/KET5zB10QIDAQAB o4IDhTCCA4EwHQYDVR0OBBYEFCLywue8HaVNkZyltZQdN4iSssyyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzYwMjUz MC02ZDIyLTQ2ZjEtOGUwNS0wMmRlZjZlODRjOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNjAyNTMw LTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8xL0l2TEM1N3dkcFUyUm5LVzFs QjAzaUpLeXpMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHvBggrBgEF BQcBBwEB/wSB3zCB3DCBwwQCAAEwgbwDBAMfgygDBAMfg6ADBAMul+ADBARV/3AD BAJb2xADBAJb5IwDBABb5JEDBAJb5QwDBABb6LYDBAFb6LgDBAJb6cADBAJb6jgD BAJb7FgDBAJb76QDBAJb8jAwDAMEBW2mIAMEA22mMAMEBZf4QAMEA7Bs4AMEBLBx YAMEA7ByOAMEA7B0gAMEA7B2UAMEA7B8SAMEA7LUyAMEArlMNAMEAsHyxAMEAsIo zAMEAMJregMEAMLVBgMEAcM2NjAUBAIAAjAOAwUAKgCqgAMFAyoEIEAwLgYIKwYB BQUHAQgBAf8EHzAdoBswGQIDAL+yAgMAxQUCAwDJEgIDAN43AgMA3mwwDQYJKoZI hvcNAQELBQADggEBAFr3Hd7lLeF+BWg4BPLm+zWIHu6N2uHgchoAU5Zx+180nSsO UtYygcVDTK3tcIH1cayDCvrQq1Qbt7o/xaMkCbNLuc2QCu/alF46L64xUtXJMbXX IEWaAFwcSOkHee+NaLov/3OQf0//GiqpWLphiLORlhgKDLXaAMS4NlgBer218AOp 3q9BAlgfgCa+dtOGrH4ObdJLPu5GSmUrxE2xATcXSsLFFcrRh5bnx3UXk3OL7xnZ HWbWI0wbmlTJ93CRIjmZvR2jf4F2df/8xiJIzMmAdyy+U4GQ1yMv4gIHEVrBuPMh 2vNxpMOwRhkl8D5Ihkvwbr5Ur/b3Y7gL5fXca2g= -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:11 2026 by rpki-client