This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer (raw, json) Hash identifier: Uj09EAxyoE67+7sd6YkCgO1GVFuNruguTPzdhOj8/MU= Subject key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83BF71772713D6B073475023042624 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20921 IP: 62.32.128.0/17 IP: 83.231.0.0/17 IP: 185.124.28.0/22 IP: 212.169.128.0/17 IP: 213.143.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bf:71:77:27:13:d6:b0:73:47:50:23:04:26:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:eb:1a:6f:cd:90:bb:4a:81:0f:bf:4d:c7: 17:72:4a:15:2f:fe:8b:fc:fa:58:8c:96:af:14:c5: 8e:9f:d4:79:e0:b0:d3:2d:2b:f3:27:81:57:0b:c9: a3:e0:b9:84:a5:3f:af:9a:e5:5d:39:af:f4:a7:2b: 63:65:db:55:5f:14:bb:ab:c2:73:56:2c:95:6d:2c: f2:06:9f:76:79:54:8a:10:6d:2f:b2:3d:86:36:df: 88:84:b1:86:c6:a8:b2:e1:d2:1c:c1:66:82:3b:15: a9:4b:a3:f3:72:91:c6:f1:58:2a:4d:f6:54:95:27: c4:d3:79:d0:3e:c9:aa:a7:fe:81:45:d7:10:f4:e7: 91:4a:28:29:6f:15:c3:4f:6e:8a:95:57:a9:3c:d8: 67:fe:b4:af:47:bd:99:a0:14:12:25:41:b8:91:6a: 48:34:66:32:bc:ca:f5:3b:3a:63:d7:78:44:3a:1b: eb:4d:61:6a:ea:99:a1:63:dc:d3:66:9e:1b:11:85: 67:7c:fb:34:5e:83:51:30:4c:3c:78:15:d6:be:a2: 7f:c5:03:7a:84:eb:91:62:88:82:02:fe:cd:d2:7b: ef:53:6d:a0:87:03:28:bb:65:f8:57:42:4a:a2:61: f8:a0:f6:ce:68:93:27:28:40:9d:13:75:30:08:14: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.128.0/17 83.231.0.0/17 185.124.28.0/22 212.169.128.0/17 213.143.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20921 Signature Algorithm: sha256WithRSAEncryption 37:41:30:e6:3a:86:89:5c:b4:57:e1:ad:f4:f5:a8:d2:81:75: d3:77:a2:fe:be:5f:26:ba:09:8e:01:dd:dc:ab:b2:2e:71:ee: fa:59:86:21:a1:2e:b5:e9:84:47:8e:09:b3:44:ab:27:4d:cf: af:01:4e:15:c9:c7:18:4c:59:1b:5a:ae:77:aa:64:af:95:06: 97:c1:29:f8:5d:91:08:5a:02:aa:c9:47:2a:3d:be:b0:8a:70: 3d:e9:b5:17:79:76:98:21:e8:fd:3c:92:4c:a6:8f:bb:99:10: 5a:0e:d3:69:c9:4c:49:fa:b5:bf:db:c3:74:a0:12:de:c1:45: 78:e8:26:86:ff:56:81:a7:81:a5:95:c5:a1:c7:71:23:6e:a8: f9:ad:02:91:5f:2e:f5:cf:29:5a:6b:0e:3f:52:53:be:7b:12: 32:4c:ba:62:5f:98:56:fe:f2:ea:2b:3d:c2:93:7b:29:ae:e2: 40:b3:2c:03:58:c7:ce:31:95:6b:ac:91:0d:2a:14:76:50:6d: ac:84:5e:00:65:12:9e:e8:94:fc:14:28:24:81:d8:53:89:43: d1:ff:9b:e1:74:e0:c0:1f:f3:44:99:18:a7:bc:26:7e:89:df: a4:a8:dc:51:d3:8d:43:ee:9e:2f:ba:e8:0a:53:4f:d9:96:4b: d7:ab:3d:a5 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/g79xdycT1rBzR1AjBCYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY3OGNhMzRjM2M2MzY1ZmI2MTZhNjYwNzcxNjBhNDk0YTZlOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ/rGm/NkLtKgQ+/TccXckoVL/6L /PpYjJavFMWOn9R54LDTLSvzJ4FXC8mj4LmEpT+vmuVdOa/0pytjZdtVXxS7q8Jz ViyVbSzyBp92eVSKEG0vsj2GNt+IhLGGxqiy4dIcwWaCOxWpS6PzcpHG8VgqTfZU lSfE03nQPsmqp/6BRdcQ9OeRSigpbxXDT26KlVepPNhn/rSvR72ZoBQSJUG4kWpI NGYyvMr1Ozpj13hEOhvrTWFq6pmhY9zTZp4bEYVnfPs0XoNRMEw8eBXWvqJ/xQN6 hOuRYoiCAv7N0nvvU22ghwMou2X4V0JKomH4oPbOaJMnKECdE3UwCBRbyQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFIhnjKNMPGNl+2FqZgdxYKSUpunWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzNiYWFj Yy00MjAxLTQ5NTEtODM1NC1mODVmNzIxZmIxYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvM2JhYWNj LTQyMDEtNDk1MS04MzU0LWY4NWY3MjFmYjFiOC8xL2lHZU1vMHc4WTJYN1lXcG1C M0ZncEpTbTZkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQHPiCAAwQHU+cAAwQCuXwcAwQH1KmAAwQF1Y8g MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlG5MA0GCSqGSIb3DQEBCwUAA4IBAQA3 QTDmOoaJXLRX4a309ajSgXXTd6L+vl8mugmOAd3cq7Iuce76WYYhoS616YRHjgmz RKsnTc+vAU4VyccYTFkbWq53qmSvlQaXwSn4XZEIWgKqyUcqPb6winA96bUXeXaY Iej9PJJMpo+7mRBaDtNpyUxJ+rW/28N0oBLewUV46CaG/1aBp4GllcWhx3Ejbqj5 rQKRXy71zylaaw4/UlO+exIyTLpiX5hW/vLqKz3Ck3spruJAsywDWMfOMZVrrJEN KhR2UG2shF4AZRKe6JT8FCgkgdhTiUPR/5vhdODAH/NEmRinvCZ+id+kqNxR041D 7p4vuugKU0/ZlkvXqz2l -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:41 2026 by rpki-client