This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer File: cIR_giGJfW6VLobqLDOauqzBMfU.cer (raw, json) Hash identifier: oQZQzlBjWDdAsOtuVzPwFVVIIrXuXQRWW8/IswmLbDQ= Subject key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E2A8795E26D7949922DD9F7DA469 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34884 AS: 43056 AS: 60972 IP: 185.38.28.0/22 IP: 185.95.252.0/22 IP: 2a05:fd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:a8:79:5e:26:d7:94:99:22:dd:9f:7d:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:15:8d:24:f0:be:70:72:6d:b5:5d:1a:ba: 7d:ef:a9:ba:44:8b:6b:b6:1c:e5:33:d1:73:7f:3d: e2:ec:b2:a6:4b:0e:98:40:83:69:2b:ed:f0:3b:af: a5:87:bd:96:ee:96:36:83:b0:2a:62:a2:89:9c:45: 1d:1c:9d:b8:59:69:15:19:75:c3:24:3c:35:76:31: 1d:23:80:e5:66:be:0c:21:a9:90:a1:9e:2c:37:c2: e3:56:52:03:43:a6:66:29:cb:df:89:53:5a:5b:d8: 6f:a4:76:07:60:4e:9b:9f:e2:81:a0:87:47:de:e6: 76:f6:ab:64:0f:99:f8:19:3d:e0:ab:fc:e2:94:e9: bd:4b:15:67:43:d8:51:f4:4f:03:4e:8c:5c:5e:8c: ce:de:e0:17:e9:ec:12:5e:4e:1a:88:38:96:c3:40: e9:bc:eb:12:f8:58:7f:d9:6d:68:b2:66:dc:de:cf: 74:8b:36:5a:02:35:60:11:fd:57:0a:f5:a3:b5:13: 4b:32:60:12:17:74:a7:1b:03:83:ae:ce:fa:a0:2f: 5b:53:a7:5d:1b:34:35:da:26:db:97:a7:c4:a2:1c: 86:aa:2f:b3:e7:9d:78:4d:cc:19:f0:c7:cf:f7:71: ff:7c:d5:37:04:34:83:46:58:21:a9:fd:af:7d:94: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.28.0/22 185.95.252.0/22 IPv6: 2a05:fd40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34884 43056 60972 Signature Algorithm: sha256WithRSAEncryption 77:13:44:1f:37:62:a8:6e:4d:f5:c8:bd:7f:9c:d4:02:b5:b1: 6c:a7:49:92:b5:c2:18:56:af:de:71:a8:33:02:06:80:99:ae: ad:d8:47:85:d2:fb:ff:2c:ce:27:34:62:17:f7:65:17:e8:57: 98:01:05:53:83:e8:3a:d1:94:f7:fd:8e:47:6a:36:d6:45:aa: 78:09:ec:d3:40:d3:d9:8c:b0:f7:a4:49:10:89:dc:c8:58:27: 30:ee:4f:7f:69:94:17:87:15:47:6a:61:df:be:47:a6:6d:b8: 39:13:7d:00:c6:4d:d6:41:87:f0:0a:70:11:71:de:10:08:38: bc:82:bc:ef:d0:e5:91:14:df:fd:d3:0f:0b:6d:b0:9e:01:2f: 2b:8a:56:fc:86:e6:a0:d2:ed:16:62:ce:4d:59:9b:6f:a1:8d: e7:e7:8a:c0:a9:0f:14:81:80:5e:04:d7:c5:dd:e7:a2:3d:74: 3b:7b:3b:b7:b8:f1:64:24:4e:92:76:13:26:2c:31:4a:93:b1: c3:b4:ed:ba:d1:db:84:7a:51:be:44:df:18:ac:07:7a:4d:00: 96:d5:7c:b4:44:2a:43:1b:66:0a:57:78:2b:21:eb:b7:f5:66: 98:e7:cc:ee:ff:78:fe:af:03:6b:a0:f6:da:2c:ff:11:c4:b9: 92:10:a9:7c -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt3xuKoeV4m15SZIt2ffaRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg0N2Y4MjIxODk3ZDZlOTUyZTg2ZWEyYzMzOWFiYWFjYzEzMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0sVjSTwvnBybbVdGrp976m6RItr thzlM9Fzfz3i7LKmSw6YQINpK+3wO6+lh72W7pY2g7AqYqKJnEUdHJ24WWkVGXXD JDw1djEdI4DlZr4MIamQoZ4sN8LjVlIDQ6ZmKcvfiVNaW9hvpHYHYE6bn+KBoIdH 3uZ29qtkD5n4GT3gq/zilOm9SxVnQ9hR9E8DToxcXozO3uAX6ewSXk4aiDiWw0Dp vOsS+Fh/2W1osmbc3s90izZaAjVgEf1XCvWjtRNLMmASF3SnGwODrs76oC9bU6dd GzQ12ibbl6fEohyGqi+z5514TcwZ8MfP93H/fNU3BDSDRlghqf2vfZQdGQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFHCEf4IhiX1ulS6G6iwzmrqswTH1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzcwNmMw My03ZDM1LTQ5MTMtOGExOC02ZTg3ODRhN2FkMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNzA2YzAz LTdkMzUtNDkxMy04YTE4LTZlODc4NGE3YWQwOS8xL2NJUl9naUdKZlc2VkxvYnFM RE9hdXF6Qk1mVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuSYcAwQCuV/8MA0EAgACMAcDBQMqBf1AMCQG CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCIRAIDAKgwAgMA7iwwDQYJKoZIhvcNAQEL BQADggEBAHcTRB83YqhuTfXIvX+c1AK1sWynSZK1whhWr95xqDMCBoCZrq3YR4XS +/8szic0Yhf3ZRfoV5gBBVOD6DrRlPf9jkdqNtZFqngJ7NNA09mMsPekSRCJ3MhY JzDuT39plBeHFUdqYd++R6ZtuDkTfQDGTdZBh/AKcBFx3hAIOLyCvO/Q5ZEU3/3T DwttsJ4BLyuKVvyG5qDS7RZizk1Zm2+hjefnisCpDxSBgF4E18Xd56I9dDt7O7e4 8WQkTpJ2EyYsMUqTscO07brR24R6Ub5E3xisB3pNAJbVfLREKkMbZgpXeCsh67f1 ZpjnzO7/eP6vA2ug9tos/xHEuZIQqXw= -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:37 2026 by rpki-client