This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer File: iLda7v6O6hrFwhnYdQXS58XzL0g.cer (raw, json) Hash identifier: 7asfyjnKat+1fN5NDdYUvZrWzMDo3QzgZdS2sdBw2rA= Subject key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE450FB2E2E623F62E3807D32339E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60162 IP: 185.51.156.0/22 IP: 185.143.108.0/22 IP: 2a01:b420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:45:0f:b2:e2:e6:23:f6:2e:38:07:d3:23:39:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:c8:5b:7a:15:89:44:3d:76:41:ac:8a:dc: 7e:81:1b:70:ea:31:7f:5c:2a:cf:b1:4f:69:c6:a2: d9:a3:92:41:a3:f5:04:d4:c4:f6:1d:10:60:30:66: 65:36:ef:f6:e9:12:7b:f3:ff:76:ec:b6:89:13:b6: f2:91:f6:c4:ce:48:e3:e4:a7:d3:46:d1:f5:95:56: a7:d2:48:02:70:99:92:db:4c:39:a4:5c:71:82:e0: 35:a2:5f:5f:a1:58:9f:ff:bb:82:10:3f:71:16:3b: 41:1c:68:5c:dc:32:52:1e:78:7a:72:3b:50:26:3b: 25:1d:f8:2c:8a:ba:78:b7:ad:ff:93:f0:af:64:18: 35:85:38:56:a8:96:76:dc:a7:ed:0a:6a:10:85:4c: 2d:10:49:68:b0:10:16:68:dd:c2:16:e7:8c:16:30: 7e:1b:22:fe:81:bb:57:74:be:71:2e:ee:40:1e:3e: 37:77:c1:dc:de:b8:cd:bc:14:74:83:88:1a:f1:58: 19:a5:77:c5:61:c7:70:ca:16:79:8c:32:7b:28:99: 57:42:2f:c8:ba:7a:01:5d:15:12:b6:c0:e4:2f:0c: 31:7e:2d:d3:f7:cf:75:2d:e0:41:01:50:01:09:d0: 04:fe:10:b6:58:ad:c0:4c:b6:de:99:bd:8c:92:8d: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.156.0/22 185.143.108.0/22 IPv6: 2a01:b420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60162 Signature Algorithm: sha256WithRSAEncryption 6d:69:9b:76:60:d7:19:cd:d7:5c:e4:0c:24:93:65:a8:d7:ba: 1c:95:3e:8b:5c:ce:e5:ee:61:53:8f:39:51:e8:72:95:3f:24: f0:e3:ee:3e:69:af:95:64:89:a1:da:14:a7:90:ab:98:ae:0a: 78:46:b7:9c:0a:93:0f:89:17:14:3e:06:e4:7a:fd:2e:e1:e6: e2:20:da:16:42:f4:72:80:56:66:57:54:79:5a:35:e5:ad:4a: 61:ea:5d:96:ee:6c:0b:e4:d3:e4:85:37:ad:15:65:7c:a8:ee: 98:9e:1b:12:b8:c0:3e:d4:44:72:f8:12:2e:2d:6b:5c:65:4b: 23:2f:11:3b:9f:96:e4:50:f3:14:59:dd:5a:86:21:93:8c:a4: 1f:2c:8d:ce:8d:82:60:b7:b2:8f:dd:79:a8:44:c1:86:8a:1e: 3c:8d:15:b8:95:e3:5d:4c:47:0d:b5:20:f0:95:f0:74:23:a9: 4b:c1:65:ec:b6:46:33:3b:03:a9:76:96:13:31:ac:3a:fe:48: 82:be:31:34:ce:6c:6a:2c:11:48:76:26:fd:92:aa:4d:5b:e3: bd:28:ec:84:41:8e:a2:ff:82:17:52:b7:88:2f:a8:2f:a3:07: 82:90:a1:22:db:bc:f0:dc:18:64:fe:82:e2:a1:62:83:69:ff: c8:39:ca:d1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87kUPsuLmI/YuOAfTIznjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI3NWFlZWZlOGVlYTFhYzVjMjE5ZDg3NTA1ZDJlN2M1ZjMyZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFjIW3oViUQ9dkGsitx+gRtw6jF/ XCrPsU9pxqLZo5JBo/UE1MT2HRBgMGZlNu/26RJ78/927LaJE7bykfbEzkjj5KfT RtH1lVan0kgCcJmS20w5pFxxguA1ol9foVif/7uCED9xFjtBHGhc3DJSHnh6cjtQ JjslHfgsirp4t63/k/CvZBg1hThWqJZ23KftCmoQhUwtEElosBAWaN3CFueMFjB+ GyL+gbtXdL5xLu5AHj43d8Hc3rjNvBR0g4ga8VgZpXfFYcdwyhZ5jDJ7KJlXQi/I unoBXRUStsDkLwwxfi3T9891LeBBAVABCdAE/hC2WK3ATLbemb2Mko2JeQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzRkMjgz MS0xMmVjLTQ3NzAtOWNlYS05YWMwOGMzZWFhYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNGQyODMx LTEyZWMtNDc3MC05Y2VhLTlhYzA4YzNlYWFhMS8xL2lMZGE3djZPNmhyRndobllk UVhTNThYekwwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTOcAwQCuY9sMA0EAgACMAcDBQAqAbQgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrAjANBgkqhkiG9w0BAQsFAAOCAQEAbWmb dmDXGc3XXOQMJJNlqNe6HJU+i1zO5e5hU485UehylT8k8OPuPmmvlWSJodoUp5Cr mK4KeEa3nAqTD4kXFD4G5Hr9LuHm4iDaFkL0coBWZldUeVo15a1KYepdlu5sC+TT 5IU3rRVlfKjumJ4bErjAPtREcvgSLi1rXGVLIy8RO5+W5FDzFFndWoYhk4ykHyyN zo2CYLeyj915qETBhooePI0VuJXjXUxHDbUg8JXwdCOpS8Fl7LZGMzsDqXaWEzGs Ov5Igr4xNM5saiwRSHYm/ZKqTVvjvSjshEGOov+CF1K3iC+oL6MHgpChItu88NwY ZP6C4qFig2n/yDnK0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:10 2026 by rpki-client