This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iGbk-cPITtuUl18HHNhwfDgzqIY.cer File: iGbk-cPITtuUl18HHNhwfDgzqIY.cer (raw, json) Hash identifier: JIYPAk2CPv+NcAe5yiMhSz1d39RpVpfRP78T2V71PJ4= Subject key identifier: 88:66:E4:F9:C3:C8:4E:DB:94:97:5F:07:1C:D8:70:7C:38:33:A8:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA10ACA1B147844D2977077320D9E9F09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0b71c-6f38-4588-b4ea-3dff55deebb9/1/iGbk-cPITtuUl18HHNhwfDgzqIY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0b71c-6f38-4588-b4ea-3dff55deebb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 11:33:50 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 34969 IP: 84.234.112.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:0a:ca:1b:14:78:44:d2:97:70:77:32:0d:9e:9f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 11:33:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8866e4f9c3c84edb94975f071cd8707c3833a886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:7f:5d:33:a5:57:d3:5f:4e:ab:50:89:73: d6:57:6b:57:8e:11:a7:99:1a:5e:75:61:77:7c:e5: 88:7d:ea:8d:aa:46:d6:2d:17:39:84:6e:a5:47:ee: 8d:37:4e:dc:3c:76:b7:74:3a:bd:f9:d9:55:3c:dc: 08:4a:52:11:72:74:9c:97:25:91:bc:54:73:3e:d8: 3a:ca:cb:69:51:ab:56:2c:13:d6:3a:b4:a4:1f:03: 5c:ce:a7:cb:dd:07:24:34:4f:b4:d9:59:d4:e4:a5: c2:f4:ef:62:4b:4d:2b:b5:34:12:f7:07:d9:ab:64: c9:6e:d1:92:b6:2c:eb:3f:82:22:66:a7:23:9c:bb: 14:91:3e:55:4e:81:a3:9b:85:0e:1e:81:3f:a2:20: 69:90:95:f1:76:79:61:db:c2:b6:13:c1:b3:2f:79: 39:75:db:ed:ab:2d:90:be:99:df:45:e2:70:76:ff: 7f:95:38:a8:18:1c:6f:2a:ef:86:c8:fd:a4:89:c4: ea:5e:18:a5:80:63:7b:47:e4:e3:8d:bf:d0:de:d3: c8:7e:68:9d:25:ca:ef:f3:43:a7:12:83:69:63:39: 5c:8e:81:32:35:57:d2:9f:4a:97:67:59:90:fa:ae: 41:f6:a8:45:f1:18:19:25:33:e5:88:3d:87:99:75: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:E4:F9:C3:C8:4E:DB:94:97:5F:07:1C:D8:70:7C:38:33:A8:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0b71c-6f38-4588-b4ea-3dff55deebb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0b71c-6f38-4588-b4ea-3dff55deebb9/1/iGbk-cPITtuUl18HHNhwfDgzqIY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.112.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34969 Signature Algorithm: sha256WithRSAEncryption 0e:2f:e0:95:b8:c1:d4:a2:fa:5c:73:b0:f0:63:4a:5c:fe:cf: 70:8f:fd:80:b6:0e:b5:7f:b2:dd:0c:08:a0:a2:27:fe:17:72: ca:28:43:47:62:27:85:7b:6a:17:12:3e:8c:5f:67:ae:7b:41: 2a:e2:d2:de:1e:de:1b:b5:dc:56:24:88:8b:77:27:a6:f0:d9: 60:b5:e4:7c:d8:19:48:c5:d5:10:95:e1:d8:2c:00:c3:23:31: 4f:24:f3:46:7f:fe:be:5e:2f:7f:bb:f9:37:cc:ce:88:c1:82: f6:90:20:4f:c6:7e:45:da:6d:c2:98:c6:45:b6:5d:4b:1b:3b: ab:05:42:0d:4a:b6:03:68:b5:34:6e:00:a6:e1:48:46:bb:f9: e7:6f:e6:bf:54:1f:3f:12:38:8d:c1:6e:86:29:82:c8:13:48: 1c:dd:b8:2e:3e:6b:6b:3a:d8:67:14:5d:9d:1b:a3:69:f9:17: 44:3d:f1:c7:99:e8:8e:90:18:b6:e1:85:e9:ac:3c:ac:66:66: fc:26:8d:f0:9d:66:b1:b4:13:d9:8d:90:73:e8:1a:5a:74:04: c6:42:63:27:43:9f:8a:f6:8d:03:a3:d1:ed:f1:ad:9e:f3:4b: 83:8e:39:50:bb:23:83:74:02:49:82:d7:2e:07:d9:a6:c8:b9: e3:d5:f9:6c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZqhCsobFHhE0pdwdzINnp8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTEzMzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY2ZTRmOWMzYzg0ZWRiOTQ5NzVmMDcxY2Q4NzA3YzM4MzNhODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEJ/XTOlV9NfTqtQiXPWV2tXjhGn mRpedWF3fOWIfeqNqkbWLRc5hG6lR+6NN07cPHa3dDq9+dlVPNwISlIRcnSclyWR vFRzPtg6ystpUatWLBPWOrSkHwNczqfL3QckNE+02VnU5KXC9O9iS00rtTQS9wfZ q2TJbtGStizrP4IiZqcjnLsUkT5VToGjm4UOHoE/oiBpkJXxdnlh28K2E8GzL3k5 ddvtqy2QvpnfReJwdv9/lTioGBxvKu+GyP2kicTqXhilgGN7R+Tjjb/Q3tPIfmid Jcrv80OnEoNpYzlcjoEyNVfSn0qXZ1mQ+q5B9qhF8RgZJTPliD2HmXUJwQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIhm5PnDyE7blJdfBxzYcHw4M6iGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2IwYjcx Yy02ZjM4LTQ1ODgtYjRlYS0zZGZmNTVkZWViYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYjBiNzFj LTZmMzgtNDU4OC1iNGVhLTNkZmY1NWRlZWJiOS8xL2lHYmstY1BJVHR1VWwxOEhI Tmh3ZkRnenFJWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBVOpwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCImTANBgkqhkiG9w0BAQsFAAOCAQEADi/glbjB1KL6XHOw8GNKXP7PcI/9gLYO tX+y3QwIoKIn/hdyyihDR2InhXtqFxI+jF9nrntBKuLS3h7eG7XcViSIi3cnpvDZ YLXkfNgZSMXVEJXh2CwAwyMxTyTzRn/+vl4vf7v5N8zOiMGC9pAgT8Z+RdptwpjG RbZdSxs7qwVCDUq2A2i1NG4ApuFIRrv552/mv1QfPxI4jcFuhimCyBNIHN24Lj5r azrYZxRdnRujafkXRD3xx5nojpAYtuGF6aw8rGZm/CaN8J1msbQT2Y2Qc+gaWnQE xkJjJ0OfivaNA6PR7fGtnvNLg445ULsjg3QCSYLXLgfZpsi549X5bA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:22 2025 by rpki-client