This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer File: IvNEpj3LcOiQV9644nYdxFFliBo.cer (raw, json) Hash identifier: F60i/EgRTJZ/djLFv/OCjSedxhzXnPuE/yU/6yAOfHU= Subject key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D3D91D4C7C5F8A9AF9437B518AA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31643 IP: 85.28.0.0/18 IP: 109.238.192.0/20 IP: 217.151.16.0/20 IP: 2a09:680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d3:d9:1d:4c:7c:5f:8a:9a:f9:43:7b:51:8a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f344a63dcb70e89057deb8e2761dc45165881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:2f:60:a1:ec:2f:f6:a0:73:15:f1:33:b4: a9:8c:5c:85:2d:1a:76:c3:3f:f9:ae:c5:b4:16:43: cf:88:35:c7:ac:aa:99:dd:a4:50:e1:a0:87:90:cc: 6d:3d:ce:4c:91:07:33:8b:a5:23:68:9e:73:0d:58: 2b:b3:da:3d:57:a1:27:f2:19:6b:e5:32:de:83:40: 9b:e8:60:a3:b3:e6:8f:7e:13:ec:78:b4:a3:9b:6d: e7:63:d8:c7:49:fb:7a:7f:2b:9a:62:6e:f9:7b:3c: 2f:8f:9a:82:c2:13:e7:fe:b6:ca:75:cd:c2:bb:38: 8a:92:f5:9b:1d:32:0a:2a:90:9b:a4:35:30:3c:48: 58:cf:04:2a:40:fc:d1:d2:8d:eb:8f:a1:b8:87:01: 59:4e:cb:eb:b7:65:8e:7d:b3:26:0b:d1:44:bd:54: 31:75:e1:6b:06:11:7f:58:65:76:b2:64:6b:48:bd: b9:8b:83:2d:04:5f:b6:87:e1:7a:a3:35:51:b3:f6: 48:88:e9:83:ac:9d:4e:cd:c5:a8:05:43:9c:f4:82: ff:c4:04:cc:c2:80:88:6b:29:e8:42:f3:83:16:aa: ad:cf:16:78:70:21:f5:a0:08:6b:31:01:71:ec:f7: 0d:69:d8:bc:4a:ba:30:bc:92:f8:80:fd:b0:43:47: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.28.0.0/18 109.238.192.0/20 217.151.16.0/20 IPv6: 2a09:680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31643 Signature Algorithm: sha256WithRSAEncryption 9a:94:3e:b4:e1:c0:61:71:c7:a0:c1:64:ee:16:4d:df:00:22: c9:a6:02:09:5f:ee:3c:f2:53:f9:46:18:aa:79:43:f4:db:71: 14:2a:86:ed:9a:85:df:4b:73:68:86:01:83:fa:20:1e:e9:c4: f6:41:5d:d9:56:1f:b9:4b:c1:fb:4d:46:94:12:f6:74:70:a9: 73:4c:dc:a6:d1:2e:a2:4d:94:a8:fa:68:58:96:95:fe:d4:d6: 14:f1:83:f4:46:5a:60:51:c7:02:5b:b6:67:9a:4a:a2:97:f4: 06:3d:a6:67:e2:b5:b8:04:6b:ad:55:e3:30:a7:6f:ac:92:0c: fa:b3:8a:97:13:f7:1c:f9:5d:93:c9:51:0e:0d:9f:77:9b:7d: 5e:b9:f5:3d:c0:d6:4b:a6:7a:7d:58:84:86:29:ac:fc:d8:a9: b7:09:6e:8b:2b:f2:d8:f7:20:2b:9f:a3:6f:d8:a4:b0:51:7b: 69:be:22:4c:63:4e:0c:cf:9e:46:c6:e1:6d:07:ec:e0:72:ac: 67:7c:af:f3:a3:01:bf:a0:e7:5e:3b:15:58:c6:9e:a7:df:ff: 38:b0:d7:18:94:f0:c9:de:9c:ce:65:03:1e:ec:4f:db:46:fb: 08:5c:48:33:e5:71:70:9c:5d:96:18:d5:d1:b8:9e:26:30:d7: 45:9f:5f:e3 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xtPZHUx8X4qa+UN7UYqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmYzNDRhNjNkY2I3MGU4OTA1N2RlYjhlMjc2MWRjNDUxNjU4ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu8vYKHsL/agcxXxM7SpjFyFLRp2 wz/5rsW0FkPPiDXHrKqZ3aRQ4aCHkMxtPc5MkQczi6UjaJ5zDVgrs9o9V6En8hlr 5TLeg0Cb6GCjs+aPfhPseLSjm23nY9jHSft6fyuaYm75ezwvj5qCwhPn/rbKdc3C uziKkvWbHTIKKpCbpDUwPEhYzwQqQPzR0o3rj6G4hwFZTsvrt2WOfbMmC9FEvVQx deFrBhF/WGV2smRrSL25i4MtBF+2h+F6ozVRs/ZIiOmDrJ1OzcWoBUOc9IL/xATM woCIaynoQvODFqqtzxZ4cCH1oAhrMQFx7PcNadi8SrowvJL4gP2wQ0e1DwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFCLzRKY9y3DokFfeuOJ2HcRRZYgaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzUzNjBl Ny1mMDJhLTQ3MzctOTljNy1mZWJiNjRiNWUxNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNTM2MGU3 LWYwMmEtNDczNy05OWM3LWZlYmI2NGI1ZTE2NC8xL0l2TkVwajNMY09pUVY5NjQ0 bllkeEZGbGlCby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQGVRwAAwQEbe7AAwQE2ZcQMA0EAgACMAcDBQMq CQaAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnubMA0GCSqGSIb3DQEBCwUAA4IB AQCalD604cBhccegwWTuFk3fACLJpgIJX+488lP5RhiqeUP023EUKobtmoXfS3No hgGD+iAe6cT2QV3ZVh+5S8H7TUaUEvZ0cKlzTNym0S6iTZSo+mhYlpX+1NYU8YP0 RlpgUccCW7Znmkqil/QGPaZn4rW4BGutVeMwp2+skgz6s4qXE/cc+V2TyVEODZ93 m31eufU9wNZLpnp9WISGKaz82Km3CW6LK/LY9yArn6Nv2KSwUXtpviJMY04Mz55G xuFtB+zgcqxnfK/zowG/oOdeOxVYxp6n3/84sNcYlPDJ3pzOZQMe7E/bRvsIXEgz 5XFwnF2WGNXRuJ4mMNdFn1/j -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:04 2026 by rpki-client