This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer File: i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer (raw, json) Hash identifier: a/VEkclTyDEsRTkMp+v2F1td8oCdaus0S4d+KckZsjY= Subject key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1809545CCC81FFAB9070E4DE4CDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8987 AS: 9059 AS: 39111 IP: 46.51.128.0/17 IP: 46.137.0.0/16 IP: 79.125.0.0/17 IP: 87.238.80.0/21 IP: 176.32.64.0/18 IP: 176.34.0.0/16 IP: 178.236.0.0/20 IP: 185.48.120.0/22 IP: 2a05:d000::/25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:09:54:5c:cc:81:ff:ab:90:70:e4:de:4c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:8c:c4:13:26:bc:0e:fa:7f:50:6c:14:cf: fe:6d:a0:9b:50:10:04:8e:55:d9:58:35:5a:3a:f5: 9f:c6:35:94:29:4b:97:98:bb:4a:32:9d:b8:fa:ab: 46:65:8d:99:4b:89:81:0f:77:31:43:c4:51:7e:0e: af:3f:53:e7:fb:56:5c:8a:42:bb:50:68:b6:0d:cb: 00:77:89:ef:aa:96:fb:22:47:06:17:22:4a:1a:13: a8:a8:00:a1:69:f5:cd:96:99:d7:85:47:6a:33:7d: 74:bb:65:43:8c:5a:d3:1e:e8:01:ac:ab:82:a3:4f: a8:8a:72:ef:6c:cc:a0:8c:2f:4f:53:1c:42:b3:e6: cb:7c:47:d8:35:60:aa:85:f1:30:38:77:86:a3:db: e7:a6:cb:ef:c4:39:eb:20:e5:aa:fc:09:57:df:cc: c3:31:d8:bb:16:08:fb:4b:84:9e:f8:a7:78:d3:68: c9:ac:91:46:4f:b7:a0:c0:21:d5:0e:e5:25:27:0f: 57:38:b1:6b:cb:06:bf:2b:06:08:da:84:8d:c5:d4: 42:ff:25:2c:55:f0:e6:cf:2c:3e:b5:d0:ba:a5:f0: 31:8f:9a:5b:4b:80:7e:e7:d4:6a:4e:58:a0:66:b7: 24:68:cb:fc:8c:17:bc:3f:cd:7f:ee:df:a2:db:5e: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.51.128.0/17 46.137.0.0/16 79.125.0.0/17 87.238.80.0/21 176.32.64.0/18 176.34.0.0/16 178.236.0.0/20 185.48.120.0/22 IPv6: 2a05:d000::/25 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8987 9059 39111 Signature Algorithm: sha256WithRSAEncryption 24:55:d0:d9:55:b0:05:f9:9c:f5:9a:cf:0f:23:4d:82:12:81: 02:d9:2a:f0:01:76:31:12:44:eb:15:61:57:12:09:da:e8:ec: 7b:e9:f9:b3:ab:93:36:8e:2f:c2:a8:e1:a1:c3:2f:c3:7f:af: 03:6e:04:38:fa:84:51:3a:bc:b0:97:eb:a7:48:bd:e4:16:79: 1e:25:35:4f:bd:20:4c:4d:b2:02:ae:55:a6:1d:df:18:30:99: 29:ea:fd:1d:a3:65:0e:b5:37:ce:b4:92:63:2d:78:41:f2:66: ab:e0:b9:f8:b0:4a:4d:ba:b4:37:f8:f7:b6:f7:87:1a:b9:41: df:b3:f0:c7:16:c8:07:7e:43:80:01:9a:6c:be:5b:50:d7:69: 6d:23:00:5f:09:5e:ce:ff:ae:d5:74:30:44:0c:a3:2a:04:44: b2:93:5e:5b:cc:69:99:3e:d9:3d:c2:4a:7c:b0:3e:3b:cf:62: 51:08:c7:a2:11:43:06:cb:ba:cb:04:f0:1e:a3:32:53:53:c4: 27:82:de:b1:0f:c4:79:f3:b3:57:12:83:40:3c:cb:b6:fb:23: 7b:a9:0b:59:ec:98:99:26:42:ac:99:8e:84:57:25:b4:e8:a6: 99:5a:ee:87:3e:97:05:94:0c:3a:a1:f0:19:bc:13:8c:0f:49: db:95:47:1b -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISAZt26xgJVFzMgf+rkHDk3kzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjYyNjNkYmU5Nzk5ZGQ2NzkzZTBlODgyYWQyMWNiNDg0OTk3MGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp+MxBMmvA76f1BsFM/+baCbUBAE jlXZWDVaOvWfxjWUKUuXmLtKMp24+qtGZY2ZS4mBD3cxQ8RRfg6vP1Pn+1ZcikK7 UGi2DcsAd4nvqpb7IkcGFyJKGhOoqAChafXNlpnXhUdqM310u2VDjFrTHugBrKuC o0+oinLvbMygjC9PUxxCs+bLfEfYNWCqhfEwOHeGo9vnpsvvxDnrIOWq/AlX38zD Mdi7Fgj7S4Se+Kd402jJrJFGT7egwCHVDuUlJw9XOLFrywa/KwYI2oSNxdRC/yUs VfDmzyw+tdC6pfAxj5pbS4B+59RqTligZrckaMv8jBe8P81/7t+i216mXQIDAQAB o4IDKjCCAyYwHQYDVR0OBBYEFItiY9vpeZ3WeT4OiCrSHLSEmXC8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2RiYThmMDFjLTk2NjktNDRhMy1hYzZlLWRiMmVkYjA5OWI4NC8wgYIGCCsGAQUF BzAKhnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20v dm9sdW1lL2RiYThmMDFjLTk2NjktNDRhMy1hYzZlLWRiMmVkYjA5OWI4NC91T0Rh dGR0WWMxSHJodFVRVlF5ckRLMDhHZUkubWZ0MHAGCCsGAQUFBzANhmRodHRwczov L3Jwa2ktcnJkcC51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2RiYThmMDFj LTk2NjktNDRhMy1hYzZlLWRiMmVkYjA5OWI4NC9ub3RpZmljYXRpb24ueG1sMFkG A1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQH LjOAAwMALokDBAdPfQADBANX7lADBAawIEADAwCwIgMEBLLsAAMEArkweDANBAIA AjAHAwUHKgXQADAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgIjGwICI2MCAwCYxzAN BgkqhkiG9w0BAQsFAAOCAQEAJFXQ2VWwBfmc9ZrPDyNNghKBAtkq8AF2MRJE6xVh VxIJ2ujse+n5s6uTNo4vwqjhocMvw3+vA24EOPqEUTq8sJfrp0i95BZ5HiU1T70g TE2yAq5Vph3fGDCZKer9HaNlDrU3zrSSYy14QfJmq+C5+LBKTbq0N/j3tveHGrlB 37PwxxbIB35DgAGabL5bUNdpbSMAXwlezv+u1XQwRAyjKgREspNeW8xpmT7ZPcJK fLA+O89iUQjHohFDBsu6ywTwHqMyU1PEJ4LesQ/EefOzVxKDQDzLtvsje6kLWeyY mSZCrJmOhFcltOimmVruhz6XBZQMOqHwGbwTjA9J25VHGw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:37 2026 by rpki-client