This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer File: iDkxqrixNjAVvI_d8LWCMhdnRAo.cer (raw, json) Hash identifier: /18yKvcCYRoPD4Tl85P5m1R9kXDj4oqb35qx/utBEQw= Subject key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B933DB3881F19575B25C35C1AE68D4F66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 12:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213605 IP: 2001:678:53c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:3d:b3:88:1f:19:57:5b:25:c3:5c:1a:e6:8d:4f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=883931aab8b1363015bc8fddf0b582321767440a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:33:7e:f4:2c:13:14:21:76:b4:bb:9f:14: a8:97:a7:69:ba:75:c1:86:8f:bb:ec:aa:91:a0:04: d8:49:10:38:74:dd:4d:e8:0b:e0:42:81:63:16:4c: b2:e0:8b:0c:90:e5:bb:78:34:8a:a1:9c:f2:dd:d6: 06:5d:27:e1:29:ea:21:80:f7:10:77:87:c2:90:0e: ab:db:9c:2a:ea:ff:06:7d:75:5f:e3:ac:a9:67:27: 95:4b:79:dd:92:41:ba:f5:0a:9a:d8:1e:cb:7e:d8: e2:fa:02:4a:2b:ba:6e:14:3e:3c:bb:dc:4a:1e:f0: 6f:f2:09:13:ee:8c:77:bd:7c:ab:4a:94:fe:3e:5a: 44:dc:57:cb:5f:b3:b4:2d:f2:d7:4f:af:bd:ea:5c: e4:40:9d:fe:8a:38:da:ba:8b:e7:2d:d7:e7:05:3e: 22:80:bd:98:53:99:b9:f7:77:b5:82:2a:3d:91:f4: 85:60:f9:d0:c5:35:e4:ac:2c:d7:73:b2:6c:6f:b7: 31:e4:76:7e:88:54:24:ea:fe:f3:f1:d6:f0:ab:52: ac:af:26:15:21:fb:71:ba:88:64:57:36:15:58:f2: bf:e1:9e:6f:0b:d0:b2:ad:bf:1e:e2:0c:1b:2d:3c: 3b:3e:15:71:62:5c:22:fd:5f:87:aa:43:b1:db:96: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:53c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213605 Signature Algorithm: sha256WithRSAEncryption 8e:e1:1d:a9:3b:5c:15:69:6e:47:cc:8b:7d:12:8a:91:2a:ca: 7a:5e:3b:9c:06:be:0d:5d:86:5b:a2:8b:d5:9e:56:de:d3:88: ac:e8:e6:52:a0:be:f5:8e:f9:25:ca:ae:55:4e:68:7f:3c:0f: 03:58:3b:24:d1:fc:ff:1b:5d:af:c7:f2:43:a1:e1:42:66:58: a7:8f:44:1a:21:e5:96:4f:d9:f3:4a:20:96:95:6e:33:2b:d4: a2:0b:3d:9a:57:48:18:01:ee:48:84:bb:f6:20:ff:0c:86:62: 54:ab:1e:0a:8e:0c:d1:f4:c3:18:8a:23:80:da:7e:73:72:9d: 15:4a:07:0d:ce:7c:f3:6d:13:5d:55:70:00:c1:9f:9a:fd:d0: 03:20:4f:95:fd:41:ed:e9:51:53:89:f7:c3:ba:b4:77:f3:bf: 69:25:39:15:ea:cd:e0:7f:e0:7d:10:e6:d5:22:a5:ab:31:8a: 08:85:8e:8f:db:92:dd:66:9c:a0:6e:24:0a:37:7b:48:cf:3e: 79:af:14:5f:84:20:85:83:d6:9b:36:63:83:fd:84:b7:92:d3: 77:c5:8d:db:ea:c1:a5:41:13:49:d1:bd:7f:7f:a4:5b:d4:87: 0a:1a:fe:23:e2:43:67:0c:07:e6:61:19:9d:d2:29:14:7f:0a: 72:af:b7:f7 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZuTPbOIHxlXWyXDXBrmjU9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODM5MzFhYWI4YjEzNjMwMTViYzhmZGRmMGI1ODIzMjE3Njc0NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IMzfvQsExQhdrS7nxSol6dpunXB ho+77KqRoATYSRA4dN1N6AvgQoFjFkyy4IsMkOW7eDSKoZzy3dYGXSfhKeohgPcQ d4fCkA6r25wq6v8GfXVf46ypZyeVS3ndkkG69Qqa2B7Lftji+gJKK7puFD48u9xK HvBv8gkT7ox3vXyrSpT+PlpE3FfLX7O0LfLXT6+96lzkQJ3+ijjauovnLdfnBT4i gL2YU5m593e1gio9kfSFYPnQxTXkrCzXc7Jsb7cx5HZ+iFQk6v7z8dbwq1KsryYV IftxuohkVzYVWPK/4Z5vC9Cyrb8e4gwbLTw7PhVxYlwi/V+HqkOx25bxLQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFIg5Maq4sTYwFbyP3fC1gjIXZ0QKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5MmQx NmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDky ZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUxMTA2LzAvODgzOTMxQUFCOEIx MzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBngFPDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQmUwDQYJKoZIhvcNAQEL BQADggEBAI7hHak7XBVpbkfMi30SipEqynpeO5wGvg1dhluii9WeVt7TiKzo5lKg vvWO+SXKrlVOaH88DwNYOyTR/P8bXa/H8kOh4UJmWKePRBoh5ZZP2fNKIJaVbjMr 1KILPZpXSBgB7kiEu/Yg/wyGYlSrHgqODNH0wxiKI4DafnNynRVKBw3OfPNtE11V cADBn5r90AMgT5X9Qe3pUVOJ98O6tHfzv2klORXqzeB/4H0Q5tUipasxigiFjo/b kt1mnKBuJAo3e0jPPnmvFF+EIIWD1ps2Y4P9hLeS03fFjdvqwaVBE0nRvX9/pFvU hwoa/iPiQ2cMB+ZhGZ3SKRR/CnKvt/c= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:20 2026 by rpki-client