This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer (raw, json) Hash identifier: NxG8Y4fPIUhQhgEmoab9H4xF7BSakXBYne+CNV4nO70= Subject key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783512BE340ED612969694447D7A4194 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.231.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:12:be:34:0e:d6:12:96:96:94:44:7d:7a:41:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=887fa37371d7d4593ba290ef45669ea0de293782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:a2:1c:47:c2:5d:f2:5b:a0:fb:79:eb:05: 63:13:98:cc:65:f2:38:37:b6:84:bf:82:5d:52:53: 66:b7:7e:b5:24:13:fa:65:ae:a3:a7:77:30:15:94: 9f:6d:01:7c:61:07:b3:52:e0:b3:b1:17:a8:15:7e: b4:af:9d:5e:8f:54:c9:2d:ba:7d:0d:0b:ef:a7:26: 08:62:0a:9d:9a:08:69:eb:5e:66:95:39:d3:70:53: fa:f0:dc:53:ed:6b:8b:e9:eb:3e:75:65:99:c0:8e: 53:18:16:4a:e4:ab:66:6f:e0:ec:ac:4a:35:c7:e8: 67:3c:e6:c4:87:c0:27:d9:d5:a4:fd:fe:c2:79:c6: 10:ac:da:15:6e:99:e7:b5:50:5a:2e:55:fa:d1:a7: 5d:a9:49:c4:54:80:8d:c2:e4:cd:bc:d6:00:bf:ed: d1:db:85:c4:eb:80:d8:f5:f9:a4:48:62:c9:d4:b7: 5a:e2:05:83:4f:e9:bc:39:96:f1:8f:ac:73:6b:7a: 60:0e:04:79:71:23:ea:8f:57:4e:8f:22:4a:10:28: f1:9f:e1:96:f4:72:d9:07:0d:f5:95:9c:3b:fb:a0: be:8f:d8:27:dd:c9:34:03:3a:47:12:51:e7:e0:78: 1f:67:f9:6d:bb:35:6e:7d:09:56:ee:ae:fb:2b:b4: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.147.0/24 Signature Algorithm: sha256WithRSAEncryption 38:bd:c8:d4:d3:8e:0d:9b:11:8e:d4:b8:e9:1b:ef:ba:6f:ee: 0e:30:d2:c1:7e:59:b8:55:61:33:3e:43:d2:45:60:c7:75:cb: 12:55:7c:26:ad:7c:20:1f:1e:89:ed:82:9e:ac:af:a0:e3:6c: 41:86:a5:d8:80:d7:e6:e0:76:17:4b:04:58:68:2b:51:8e:b7: 03:0b:33:35:6e:d2:47:c8:d7:c7:31:18:c1:6e:ea:91:f3:6c: 31:ac:b1:48:18:f4:b5:11:b7:a9:c5:01:c2:a8:7b:8e:cd:93: 04:af:db:4b:c0:d8:76:98:eb:43:6b:bc:38:42:c0:21:a5:70: bf:e4:1e:45:90:86:25:51:c0:fb:5c:3f:89:71:21:36:4c:b5: 88:1e:23:c8:cb:ce:c1:02:34:33:75:e7:46:b1:90:30:d7:e9: 8d:ab:62:ce:d1:34:8e:91:bd:ab:68:9c:64:c1:dd:34:06:a8: 08:a8:cc:2e:13:02:71:e9:1c:45:a7:a0:ad:ed:98:f9:c2:a9: b8:a5:e1:10:3b:f5:9f:93:87:88:37:83:f0:fd:05:65:e3:57: 30:da:25:a5:78:78:fa:b2:b4:5c:57:b0:d3:b0:c6:29:64:c1: 39:fc:ff:75:07:71:59:9e:c1:15:4a:ee:f6:25:45:bd:ff:64: 9d:1d:fc:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NRK+NA7WEpaWlER9ekGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODdmYTM3MzcxZDdkNDU5M2JhMjkwZWY0NTY2OWVhMGRlMjkzNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxCiHEfCXfJboPt56wVjE5jMZfI4 N7aEv4JdUlNmt361JBP6Za6jp3cwFZSfbQF8YQezUuCzsReoFX60r51ej1TJLbp9 DQvvpyYIYgqdmghp615mlTnTcFP68NxT7WuL6es+dWWZwI5TGBZK5Ktmb+DsrEo1 x+hnPObEh8An2dWk/f7CecYQrNoVbpnntVBaLlX60addqUnEVICNwuTNvNYAv+3R 24XE64DY9fmkSGLJ1Lda4gWDT+m8OZbxj6xza3pgDgR5cSPqj1dOjyJKECjxn+GW 9HLZBw31lZw7+6C+j9gn3ck0AzpHElHn4HgfZ/ltuzVufQlW7q77K7RUpwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIh/o3Nx19RZO6KQ70VmnqDeKTeCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzA5ZGI4 Yy02ZGYwLTRjZWUtYWUwNy1hMWUyNGFhZjYxMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMDlkYjhj LTZkZjAtNGNlZS1hZTA3LWExZTI0YWFmNjEwZi8xL2lILWpjM0hYMUZrN29wRHZS V2Flb040cE40SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+eTMA0GCSqGSIb3DQEBCwUAA4IBAQA4vcjU 044NmxGO1LjpG++6b+4OMNLBflm4VWEzPkPSRWDHdcsSVXwmrXwgHx6J7YKerK+g 42xBhqXYgNfm4HYXSwRYaCtRjrcDCzM1btJHyNfHMRjBbuqR82wxrLFIGPS1Ebep xQHCqHuOzZMEr9tLwNh2mOtDa7w4QsAhpXC/5B5FkIYlUcD7XD+JcSE2TLWIHiPI y87BAjQzdedGsZAw1+mNq2LO0TSOkb2raJxkwd00BqgIqMwuEwJx6RxFp6Ct7Zj5 wqm4peEQO/Wfk4eIN4Pw/QVl41cw2iWleHj6srRcV7DTsMYpZME5/P91B3FZnsEV Su72JUW9/2SdHfxd -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:06 2026 by rpki-client