This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer File: i5HgoQS1s93x9dCOessreeDVZvk.cer (raw, json) Hash identifier: xQZ78ISAMqar3JpfB0X6vc1NWdS9cmYQiL3yPbZenXM= Subject key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32BC91DD69A83A82B9EEE3B06B875 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.92.116.0/22 IP: 194.28.46.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2b:c9:1d:d6:9a:83:a8:2b:9e:ee:3b:06:b8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:f8:bf:b9:96:1a:79:47:ff:a4:a3:2a:b8: d2:9c:19:e7:c7:b3:06:26:68:cc:4d:7a:6b:92:43: d0:ac:a7:ac:a9:0c:0e:3c:40:cd:ca:7c:64:65:29: 7e:88:23:4c:f2:ae:47:34:37:72:82:fb:c0:0d:e8: 02:9b:50:95:32:d1:09:ca:0b:9a:ea:4a:6c:4f:64: 7a:7c:28:d3:1a:fc:2b:6e:e3:b0:2e:9a:64:d9:1d: 60:b5:43:64:63:c4:e6:67:aa:3e:ea:c4:4a:aa:18: 89:ed:d3:7c:2f:ce:30:0d:6a:75:b7:72:91:1f:2f: e3:96:f3:df:09:82:39:14:41:ef:1a:dd:bb:45:b2: 00:4a:c9:5d:a5:3f:06:87:5f:90:8a:e5:98:10:54: 51:8d:c5:ec:9e:07:df:44:56:4c:7e:b4:08:05:eb: d3:92:54:6d:9c:88:e1:3c:ab:e3:a3:c1:be:5b:6e: 78:89:ac:37:27:df:0e:51:78:97:bb:71:88:ea:af: 65:73:6e:70:6f:9a:8d:06:ae:f2:19:bc:49:c0:29: 0a:92:92:8f:4d:b2:80:c8:34:31:eb:56:0b:ae:6d: 3a:f1:41:21:f8:80:ec:0d:ec:0f:4d:d4:89:57:13: b5:79:d9:4a:e1:57:cd:c6:39:70:9e:ad:0c:95:a8: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.116.0/22 194.28.46.0/23 Signature Algorithm: sha256WithRSAEncryption 56:53:31:dc:bc:43:31:d0:13:87:53:e6:4c:a3:62:2a:6b:83: c1:fd:d1:62:f9:23:d7:4b:cb:2e:c1:b5:24:02:8c:03:df:22: 7a:ac:ae:98:e9:5d:56:2d:8b:1b:da:23:0f:80:32:e7:1e:b1: 23:92:9a:2d:3f:cc:16:cd:f2:3c:51:c0:56:ac:50:ff:8c:3f: 02:21:e5:b3:66:34:8e:19:5d:00:e9:6e:df:d1:79:e4:5b:a4: cb:52:94:7e:fb:ae:2d:ed:93:42:33:59:51:aa:2d:b6:cc:e9: 59:79:ac:bd:dc:32:ac:bd:9b:2b:ad:34:26:67:28:42:03:8c: 8b:eb:b5:c1:e5:fc:28:89:ed:a2:95:0d:a7:f9:40:65:a0:cd: ea:9c:63:7f:3c:a3:2c:33:a7:50:01:ea:e9:f4:0a:0b:76:ea: 6d:f8:4c:ba:83:5c:bc:6c:5f:26:3a:ab:14:21:e6:7a:20:04: ef:3a:94:92:12:02:54:6d:16:ec:84:1f:84:8a:d7:9b:fe:2d: 5c:7e:b7:62:60:5d:5a:94:ae:cc:f7:c3:9b:7b:88:26:25:f6: c7:ad:ae:54:56:fb:cb:d4:29:82:5f:17:2c:58:ae:21:2c:b3: 36:44:ce:28:db:ae:a1:00:0c:04:32:75:b0:71:11:e5:ba:91: f1:62:52:2a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7oyvJHdaag6grnu47Brh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjkxZTBhMTA0YjViM2RkZjFmNWQwOGU3YWNiMmI3OWUwZDU2NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TH4v7mWGnlH/6SjKrjSnBnnx7MG JmjMTXprkkPQrKesqQwOPEDNynxkZSl+iCNM8q5HNDdygvvADegCm1CVMtEJygua 6kpsT2R6fCjTGvwrbuOwLppk2R1gtUNkY8TmZ6o+6sRKqhiJ7dN8L84wDWp1t3KR Hy/jlvPfCYI5FEHvGt27RbIASsldpT8Gh1+QiuWYEFRRjcXsngffRFZMfrQIBevT klRtnIjhPKvjo8G+W254iaw3J98OUXiXu3GI6q9lc25wb5qNBq7yGbxJwCkKkpKP TbKAyDQx61YLrm068UEh+IDsDewPTdSJVxO1edlK4VfNxjlwnq0MlagfiQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2RmYmZj NC1jYzNmLTQ3N2MtOGQ3Ni1hOGM1NzYyMjRiYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZGZiZmM0 LWNjM2YtNDc3Yy04ZDc2LWE4YzU3NjIyNGJhMi8xL2k1SGdvUVMxczkzeDlkQ09l c3NyZWVEVlp2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLVx0AwQBwhwuMA0GCSqGSIb3DQEBCwUAA4IB AQBWUzHcvEMx0BOHU+ZMo2Iqa4PB/dFi+SPXS8suwbUkAowD3yJ6rK6Y6V1WLYsb 2iMPgDLnHrEjkpotP8wWzfI8UcBWrFD/jD8CIeWzZjSOGV0A6W7f0XnkW6TLUpR+ +64t7ZNCM1lRqi22zOlZeay93DKsvZsrrTQmZyhCA4yL67XB5fwoie2ilQ2n+UBl oM3qnGN/PKMsM6dQAerp9AoLdupt+Ey6g1y8bF8mOqsUIeZ6IATvOpSSEgJUbRbs hB+Eiteb/i1cfrdiYF1alK7M98Obe4gmJfbHra5UVvvL1CmCXxcsWK4hLLM2RM4o 266hAAwEMnWwcRHlupHxYlIq -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:14 2026 by rpki-client