This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer File: i5uprd6WNXd79Yb9ST4UzTD3xMo.cer (raw, json) Hash identifier: ih2EmKbLXGJNNzqkdhTaBly9LtG3l5ZoYgfdYFfxex0= Subject key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAFEC379A64FC50C5B0A1D5F81D565 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199673 IP: 188.164.152.0/21 IP: 2a01:bbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:c3:79:a6:4f:c5:0c:5b:0a:1d:5f:81:d5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:47:3f:53:3a:e8:a2:ff:58:aa:e3:e4:20: ee:96:a2:cf:54:10:2d:5b:56:57:4f:8f:68:b5:c1: 10:9c:05:c6:b5:b5:0f:d0:e5:cb:39:e5:5b:d5:5b: 4f:09:68:9f:77:9f:08:89:fd:64:30:13:2c:96:47: 70:65:62:4c:af:18:4e:da:0a:65:3e:30:32:44:e2: ad:0e:15:b3:85:d3:17:e1:c9:98:a2:82:e0:c3:0e: 49:37:20:c6:32:1c:b1:fb:88:61:03:ad:4f:62:e9: 9c:ae:90:5f:9e:69:bc:14:38:e2:42:32:24:77:6d: c9:f7:e8:c3:09:0a:64:09:3b:a1:3b:95:18:4f:10: 2d:ef:5d:37:29:19:e6:d4:4c:55:0c:e2:fc:36:c7: 90:56:2b:20:bd:9c:0e:36:82:e1:a6:5d:8b:04:57: 85:9c:04:81:85:90:39:84:fc:24:6a:05:77:6f:85: 08:ab:50:32:3b:5f:29:46:f9:39:02:f6:07:6a:07: 13:ad:7b:bd:cb:f2:dc:d5:46:72:8e:d2:1c:ec:3c: c4:69:7a:b9:14:e5:06:28:d1:92:54:2a:c2:be:af: df:ff:48:bd:87:3a:39:11:88:5a:c6:87:d8:da:5b: 8e:42:24:80:6b:2b:a1:db:7d:53:e1:36:bd:9f:b7: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.152.0/21 IPv6: 2a01:bbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199673 Signature Algorithm: sha256WithRSAEncryption 95:89:65:aa:75:6b:b2:35:a9:fa:0a:06:6f:4e:38:b3:1a:ce: c3:db:39:52:a4:80:b9:2c:da:8e:c5:dd:c8:94:fc:5d:60:04: d5:9f:b9:2a:2e:49:44:23:17:d2:c5:ce:b0:df:67:e6:59:6f: bf:a2:e1:2f:d9:32:a3:c7:97:6c:07:e7:2d:bd:68:a3:8b:6d: 6f:ca:bf:08:c0:35:8c:b6:2b:3e:aa:1c:d9:0f:1c:4a:75:b6: bb:90:55:ca:21:9f:13:b3:e9:da:2a:73:dd:93:53:bc:26:6d: e1:c8:bc:75:87:e5:d8:b7:c3:cf:62:01:1c:4b:31:6f:5d:c2: 07:5a:1b:9e:be:9c:62:35:bd:1e:3e:92:96:c8:b2:32:79:f7: 93:d0:21:9e:e9:5c:68:8a:8e:a1:40:fa:15:88:2b:1b:8e:a0: b5:c2:fb:75:6d:44:9f:d6:58:49:a9:5c:31:c0:d1:90:3a:c9: 44:93:dd:8f:bd:4e:4b:7b:7c:b3:5a:84:a0:46:49:49:92:dd: 58:f4:75:c1:e4:8c:84:df:b6:bb:62:1c:01:9a:70:c2:f6:c6: 96:09:57:9d:3c:1e:98:df:c7:5d:a1:9a:72:58:39:94:39:46: a5:48:d8:e8:01:55:d6:21:9e:98:18:5c:78:69:84:ee:83:89: 98:38:43:f8 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt26v7DeaZPxQxbCh1fgdVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjliYTlhZGRlOTYzNTc3N2JmNTg2ZmQ0OTNlMTRjZDMwZjdjNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhHP1M66KL/WKrj5CDulqLPVBAt W1ZXT49otcEQnAXGtbUP0OXLOeVb1VtPCWifd58Iif1kMBMslkdwZWJMrxhO2gpl PjAyROKtDhWzhdMX4cmYooLgww5JNyDGMhyx+4hhA61PYumcrpBfnmm8FDjiQjIk d23J9+jDCQpkCTuhO5UYTxAt7103KRnm1ExVDOL8NseQVisgvZwONoLhpl2LBFeF nASBhZA5hPwkagV3b4UIq1AyO18pRvk5AvYHagcTrXu9y/Lc1UZyjtIc7DzEaXq5 FOUGKNGSVCrCvq/f/0i9hzo5EYhaxofY2luOQiSAayuh231T4Ta9n7f43QIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFIubqa3eljV3e/WG/Uk+FM0w98TKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjMDMw ODkwLWY2ZTAtNDEwYy1iYzk5LWFmMDkyMWQxYzNhNC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMw MzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvOEI5QkE5QURERTk2 MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME A7ykmDANBAIAAjAHAwUAKgG7wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDC/kw DQYJKoZIhvcNAQELBQADggEBAJWJZap1a7I1qfoKBm9OOLMazsPbOVKkgLks2o7F 3ciU/F1gBNWfuSouSUQjF9LFzrDfZ+ZZb7+i4S/ZMqPHl2wH5y29aKOLbW/KvwjA NYy2Kz6qHNkPHEp1truQVcohnxOz6doqc92TU7wmbeHIvHWH5di3w89iARxLMW9d wgdaG56+nGI1vR4+kpbIsjJ595PQIZ7pXGiKjqFA+hWIKxuOoLXC+3VtRJ/WWEmp XDHA0ZA6yUST3Y+9Tkt7fLNahKBGSUmS3Vj0dcHkjITftrtiHAGacML2xpYJV508 Hpjfx12hmnJYOZQ5RqVI2OgBVdYhnpgYXHhphO6DiZg4Q/g= -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:43 2026 by rpki-client