This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer File: i4GUQccJMDSp1GVqL202qyQDP-Q.cer (raw, json) Hash identifier: x2OBcnVyVnK4P0u1RaoAzjm69j/E+Dzw4/4V0G7jc5M= Subject key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1120F90F4BE2F74B2AB972FD576CFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213405 IP: 2001:67c:2920::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:20:f9:0f:4b:e2:f7:4b:2a:b9:72:fd:57:6c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:f1:4d:17:d8:e0:0b:e9:26:34:98:02:40: 2e:c0:fd:c3:85:20:11:fe:2d:87:93:37:6b:ec:00: e0:8d:60:55:12:ce:c7:49:f7:79:38:d2:57:b6:46: f8:74:2b:55:af:55:96:bd:85:b9:0a:ca:54:07:12: 13:cb:08:4e:e9:3d:3c:9c:f0:e0:ce:ec:b2:a3:2a: fa:11:d7:2d:cc:75:a6:af:26:17:8e:c8:48:08:1f: 71:a0:00:42:20:77:f6:9e:18:2c:f9:3a:53:57:77: 59:ef:eb:9c:e9:a1:48:b4:f6:38:73:ab:24:42:e9: 07:e7:30:7b:04:26:79:54:4a:e0:71:6e:23:71:3a: 31:ff:0b:1d:3f:b3:e7:8b:c1:1c:05:a7:2c:3c:37: 65:32:4e:f3:80:6a:38:20:1b:23:4f:fe:c2:b9:8a: ca:41:69:ff:8c:cb:63:73:0c:07:98:3a:78:b3:92: 06:89:8a:ea:4b:8c:78:ea:17:fc:d1:a0:31:ee:11: cf:36:69:78:bc:d6:5c:8a:45:b3:5b:8d:3a:16:26: ba:4d:51:06:d5:9a:11:64:f7:cf:89:33:41:92:f4: d2:86:0d:9f:35:60:3f:33:f2:bd:8b:3b:52:2b:bf: 27:4b:a0:c6:74:06:e8:26:40:da:13:86:f9:1a:34: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2920::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213405 Signature Algorithm: sha256WithRSAEncryption 7c:f1:b9:44:c3:fc:94:3c:5c:4c:36:a8:89:7d:9d:31:23:9b: d1:29:f2:c0:a1:40:4c:01:59:05:d6:05:a8:02:12:cf:c4:23: d3:15:08:e8:38:19:2c:3f:20:51:f8:fd:ed:80:7f:cd:d3:8f: ef:fe:9c:1b:65:44:47:1a:a2:30:b7:50:87:a2:63:34:37:e5: a7:7e:69:76:83:8f:d6:69:82:ac:64:d5:49:9c:a4:81:20:65: 03:b5:93:c1:07:29:1d:45:3c:77:06:3b:2f:cf:4e:66:5e:75: 2f:0d:f3:14:f0:1e:65:96:76:7b:ab:ba:3d:62:f6:72:74:7a: ca:de:a5:11:68:c5:46:f5:ef:16:7f:fc:62:70:f4:18:2a:5d: 50:2d:a8:0f:b9:a1:7e:a1:a3:d0:a3:31:f4:9e:7d:fe:58:81: 31:68:92:d4:c8:e5:de:7a:fa:c4:90:d4:97:ce:4a:c9:8a:06: e0:11:c2:b5:ab:02:ce:7f:b5:23:07:fc:52:43:a1:58:5f:16: 0a:d5:ef:01:ff:47:1b:5b:83:77:17:88:df:fd:1b:57:ff:c2: 71:b6:af:95:0b:91:09:56:52:5a:70:61:50:fd:2a:09:81:60: 3b:fc:92:3d:d1:f2:b4:6d:84:60:e4:f3:64:ef:7f:c0:c9:a0: 39:a9:82:e5 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8ESD5D0vi90squXL9V2z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjgxOTQ0MWM3MDkzMDM0YTlkNDY1NmEyZjZkMzZhYjI0MDMzZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYrxTRfY4AvpJjSYAkAuwP3DhSAR /i2Hkzdr7ADgjWBVEs7HSfd5ONJXtkb4dCtVr1WWvYW5CspUBxITywhO6T08nPDg zuyyoyr6EdctzHWmryYXjshICB9xoABCIHf2nhgs+TpTV3dZ7+uc6aFItPY4c6sk QukH5zB7BCZ5VErgcW4jcTox/wsdP7Pni8EcBacsPDdlMk7zgGo4IBsjT/7CuYrK QWn/jMtjcwwHmDp4s5IGiYrqS4x46hf80aAx7hHPNml4vNZcikWzW406Fia6TVEG 1ZoRZPfPiTNBkvTShg2fNWA/M/K9iztSK78nS6DGdAboJkDaE4b5GjR1/QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFIuBlEHHCTA0qdRlai9tNqskAz/kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2RmZmIx OS1kNDY3LTRlZTUtOGNmNi1mNjNkMjBhNzhmNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvZGZmYjE5 LWQ0NjctNGVlNS04Y2Y2LWY2M2QyMGE3OGY3NS8xL2k0R1VRY2NKTURTcDFHVnFM MjAycXlRRFAtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCkgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNBnTANBgkqhkiG9w0BAQsFAAOCAQEAfPG5RMP8lDxcTDaoiX2dMSOb0Sny wKFATAFZBdYFqAISz8Qj0xUI6DgZLD8gUfj97YB/zdOP7/6cG2VERxqiMLdQh6Jj NDflp35pdoOP1mmCrGTVSZykgSBlA7WTwQcpHUU8dwY7L89OZl51Lw3zFPAeZZZ2 e6u6PWL2cnR6yt6lEWjFRvXvFn/8YnD0GCpdUC2oD7mhfqGj0KMx9J59/liBMWiS 1Mjl3nr6xJDUl85KyYoG4BHCtasCzn+1Iwf8UkOhWF8WCtXvAf9HG1uDdxeI3/0b V//CcbavlQuRCVZSWnBhUP0qCYFgO/ySPdHytG2EYOTzZO9/wMmgOamC5Q== -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:00 2026 by rpki-client