This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer (raw, json) Hash identifier: kxB+XPMfZcqd8SA7zotMQy83t4rlwTgKnMaRRB/NFHs= Subject key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758FB04685D158FA2CBA9EF86949046 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.39.124.0/24 IP: 185.88.68.0/22 IP: 2a05:c7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:04:68:5d:15:8f:a2:cb:a9:ef:86:94:90:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:52:81:47:e2:12:e3:5e:f9:be:8d:17:ef: 46:21:ac:7f:9a:71:42:41:1a:da:c4:25:a0:cb:62: 92:51:64:13:40:61:0d:ce:1c:3e:5a:f1:c3:08:a5: 10:fa:d8:53:95:3f:5a:74:bc:ec:43:cb:73:5c:9c: b8:4e:a3:96:0c:bc:7c:c4:58:68:22:5f:b2:88:1a: 60:a4:e3:d3:a2:08:21:64:97:92:c6:4c:81:3a:1f: 42:4f:09:3d:e6:78:fa:a8:28:41:6d:79:3d:7c:58: 47:f9:09:0b:06:39:3d:2d:90:22:f5:fe:ee:5c:67: 8c:7f:1e:70:1e:ae:3e:4f:ba:68:f2:97:94:a1:e5: 66:04:22:83:79:ec:5a:8d:5a:cf:6d:99:bc:21:ba: c1:bb:cc:09:fc:3f:06:be:d7:c8:c8:30:d9:bf:1b: df:96:4c:a8:ae:fd:7b:40:bd:98:0b:1b:fa:52:38: 6c:6e:8c:6b:eb:a2:2e:30:3f:80:81:f3:ed:a4:6b: 4d:35:ce:ca:c3:3e:88:6f:58:2f:c7:7f:5e:b7:e5: 94:e7:3a:47:54:d0:f6:d6:01:11:bb:fd:5c:d7:f6: bd:bb:e5:c1:e6:28:c5:79:10:3c:dc:fb:a5:b8:9b: aa:a4:73:78:5f:a9:8e:19:bc:54:cc:54:1d:2e:5a: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.124.0/24 185.88.68.0/22 IPv6: 2a05:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption af:1b:76:ad:0d:e1:df:f9:5a:f0:8c:e2:7b:4b:33:18:03:27: 23:a0:e9:ff:e9:95:d9:73:38:4a:f5:6d:a1:be:ab:ce:e4:2d: 90:f7:28:64:04:f3:03:b2:08:6e:e5:50:3c:a3:34:95:b7:57: f1:71:f6:c4:8d:d5:89:47:08:13:51:46:2a:45:b4:5e:f3:fc: 17:da:6c:c0:cc:7f:ee:85:0b:05:53:cc:1d:84:c8:3f:4c:37: 01:66:d1:3f:be:67:71:d5:54:2e:a3:d4:1b:ec:02:4d:45:28: f6:ce:32:5c:9a:28:2f:0c:32:4c:5d:93:52:ca:af:2b:6c:43: 04:76:a9:35:a3:5d:de:a8:2c:22:40:3f:8f:54:aa:e8:73:60: c9:83:cf:d2:40:58:d8:b5:86:26:00:f3:71:66:3b:fc:09:62: 22:07:3c:1a:f2:e2:b4:d1:ac:97:b2:b5:e6:30:33:c5:fe:87: d1:3d:8c:c9:1c:bd:e6:04:6b:44:18:2d:30:c4:c8:a1:4d:49: 0f:99:26:54:19:6a:e0:b1:97:4f:23:83:04:a4:54:c1:18:61: f5:60:b0:96:3f:5d:08:97:bc:94:b4:96:0f:75:7d:84:f3:54: b7:53:b4:c6:62:43:e5:5a:67:f1:62:84:4f:05:53:07:d4:75: 89:ec:d2:01 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt3WPsEaF0Vj6LLqe+GlJBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODdhNWYwNDg2YjE4YTI0NDhmMjM1OGEyNzQ2YzFhYmQ5ZmIyZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ1SgUfiEuNe+b6NF+9GIax/mnFC QRraxCWgy2KSUWQTQGENzhw+WvHDCKUQ+thTlT9adLzsQ8tzXJy4TqOWDLx8xFho Il+yiBpgpOPTogghZJeSxkyBOh9CTwk95nj6qChBbXk9fFhH+QkLBjk9LZAi9f7u XGeMfx5wHq4+T7po8peUoeVmBCKDeexajVrPbZm8IbrBu8wJ/D8GvtfIyDDZvxvf lkyorv17QL2YCxv6Ujhsboxr66IuMD+AgfPtpGtNNc7Kwz6Ib1gvx39et+WU5zpH VND21gERu/1c1/a9u+XB5ijFeRA83PuluJuqpHN4X6mOGbxUzFQdLlpRhwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIh6XwSGsYokSPI1iidGwavZ+y5eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI4YzNk MS04YTkwLTQwNjgtYmIyNy0zM2FiYzUzYzBlNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjhjM2Qx LThhOTAtNDA2OC1iYjI3LTMzYWJjNTNjMGU3OS8xL2lIcGZCSWF4aWlSSThqV0tK MGJCcTluN0xsNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAWSd8AwQCuVhEMA0EAgACMAcDBQMqBcfAMA0G CSqGSIb3DQEBCwUAA4IBAQCvG3atDeHf+VrwjOJ7SzMYAycjoOn/6ZXZczhK9W2h vqvO5C2Q9yhkBPMDsghu5VA8ozSVt1fxcfbEjdWJRwgTUUYqRbRe8/wX2mzAzH/u hQsFU8wdhMg/TDcBZtE/vmdx1VQuo9Qb7AJNRSj2zjJcmigvDDJMXZNSyq8rbEME dqk1o13eqCwiQD+PVKroc2DJg8/SQFjYtYYmAPNxZjv8CWIiBzwa8uK00ayXsrXm MDPF/ofRPYzJHL3mBGtEGC0wxMihTUkPmSZUGWrgsZdPI4MEpFTBGGH1YLCWP10I l7yUtJYPdX2E81S3U7TGYkPlWmfxYoRPBVMH1HWJ7NIB -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:32 2026 by rpki-client