This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer File: i024ekl6Fbp5pwbRLukExESdG1U.cer (raw, json) Hash identifier: dWTvJmSGTZay7Mw9HcToSOVqamvVXVujhUYFRohWodE= Subject key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA717EF360320BF7C91A65D08469E6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198115 IP: 194.126.232.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:ef:36:03:20:bf:7c:91:a6:5d:08:46:9e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:e8:c1:a0:f5:49:10:f7:2a:3e:2f:29:8b: f5:9b:e9:b6:8a:41:e5:f6:04:cc:37:35:30:04:12: 80:16:e9:a9:df:ef:06:4c:8c:7b:af:36:e8:12:ba: e3:67:c2:31:af:24:6a:9e:7b:56:9d:f6:ef:f8:a5: c3:bf:0e:7b:a4:7d:ea:13:5b:f4:21:06:f2:61:c5: 93:92:84:4c:1c:1b:72:b3:d1:12:46:b1:b6:20:98: 2b:ad:b8:9c:24:ef:11:12:dc:fc:46:eb:6b:23:fe: 33:22:c3:ac:50:0d:ee:8a:13:04:d5:16:5d:a8:41: 88:db:27:23:1c:63:b2:69:ae:83:14:94:6b:0e:d4: a6:7a:b5:49:62:81:6a:35:45:36:ce:0c:a4:e1:48: 7f:a7:24:18:96:60:32:20:cf:a3:88:7e:48:d7:fe: f7:6b:e1:7d:3f:b5:3b:fc:cb:69:dd:b5:0e:00:8a: ca:1b:20:51:5f:d4:e5:f3:a5:db:9b:b8:46:23:cb: 85:7f:2e:0b:e6:11:84:42:90:65:ca:9a:5a:0a:36: e7:14:a0:83:a6:84:dd:67:e4:d3:e5:af:2a:9d:31: 9e:4a:a5:0d:60:c6:3b:e8:c7:4b:f1:95:b7:fd:2a: 6d:c5:43:fa:1b:40:27:c5:57:41:46:82:38:2e:8a: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.232.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198115 Signature Algorithm: sha256WithRSAEncryption 01:e7:29:fc:cf:db:66:5e:69:19:ac:b5:fe:84:e7:12:1a:5a: 16:6c:a6:3a:f0:fc:27:c2:8c:41:c9:30:97:32:f1:03:13:29: 8a:03:44:b9:c7:32:66:79:b5:72:d3:c3:88:12:7a:88:16:45: 16:f5:af:89:d7:3a:b7:74:bf:51:f0:e9:c1:58:dc:06:bc:3f: 8a:77:ce:8d:94:6d:ba:e0:d3:b2:da:60:70:3d:b4:9c:c4:95: 73:c8:9c:79:86:f1:71:8c:b9:a2:9a:d1:ad:79:db:66:20:c3: 06:09:70:16:1e:a2:c6:42:95:82:ed:8d:56:db:7c:12:4a:9c: f9:6c:27:bc:e4:c2:b6:19:e3:8a:db:18:da:2b:07:e1:f1:84: 63:07:00:28:60:4e:41:70:e5:73:50:c1:da:86:6c:db:7e:4b: 6f:c6:14:37:8c:3e:7d:55:b4:d2:a5:22:4d:2f:3f:8c:4c:66: a8:de:15:a7:70:d7:c5:08:61:7e:67:91:45:fd:82:84:f9:9c: db:10:d2:86:ea:73:e0:b4:78:ba:b9:a5:72:f8:33:23:55:3f: 69:67:a3:8e:5f:de:0b:6b:30:4c:b3:fb:8a:6a:fa:0b:58:d4: 30:c3:19:32:3c:ca:65:a0:60:df:36:56:2e:20:03:69:15:72: e5:c0:48:ab -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pxfvNgMgv3yRpl0IRp5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjRkYjg3YTQ5N2ExNWJhNzlhNzA2ZDEyZWU5MDRjNDQ0OWQxYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vvowaD1SRD3Kj4vKYv1m+m2ikHl 9gTMNzUwBBKAFump3+8GTIx7rzboErrjZ8IxryRqnntWnfbv+KXDvw57pH3qE1v0 IQbyYcWTkoRMHBtys9ESRrG2IJgrrbicJO8REtz8RutrI/4zIsOsUA3uihME1RZd qEGI2ycjHGOyaa6DFJRrDtSmerVJYoFqNUU2zgyk4Uh/pyQYlmAyIM+jiH5I1/73 a+F9P7U7/Mtp3bUOAIrKGyBRX9Tl86Xbm7hGI8uFfy4L5hGEQpBlyppaCjbnFKCD poTdZ+TT5a8qnTGeSqUNYMY76MdL8ZW3/SptxUP6G0AnxVdBRoI4LooepQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFItNuHpJehW6eacG0S7pBMREnRtVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2Q4MTRi NC0wMmIxLTRmYjMtYWNlZi0xNjAxZDQxZmRjMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZDgxNGI0 LTAyYjEtNGZiMy1hY2VmLTE2MDFkNDFmZGMxZi8xL2kwMjRla2w2RmJwNXB3YlJM dWtFeEVTZEcxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwn7oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF4zANBgkqhkiG9w0BAQsFAAOCAQEAAecp/M/bZl5pGay1/oTnEhpaFmymOvD8 J8KMQckwlzLxAxMpigNEuccyZnm1ctPDiBJ6iBZFFvWvidc6t3S/UfDpwVjcBrw/ infOjZRtuuDTstpgcD20nMSVc8iceYbxcYy5oprRrXnbZiDDBglwFh6ixkKVgu2N Vtt8Ekqc+WwnvOTCthnjitsY2isH4fGEYwcAKGBOQXDlc1DB2oZs235Lb8YUN4w+ fVW00qUiTS8/jExmqN4Vp3DXxQhhfmeRRf2ChPmc2xDShupz4LR4urmlcvgzI1U/ aWejjl/eC2swTLP7imr6C1jUMMMZMjzKZaBg3zZWLiADaRVy5cBIqw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:07 2026 by rpki-client