This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer File: iM3ZwZPakYWkrBWyreh1_pe29JE.cer (raw, json) Hash identifier: N5qp1ssC7jTsC+AYjYxa51F4KrQT+AyPZcQh7eJ29qs= Subject key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3BD8DAECF5DFE795CC8EAED3E130 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41720 IP: 185.242.180.0/22 IP: 195.182.211.0/24 IP: 2a0d:b280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:d8:da:ec:f5:df:e7:95:cc:8e:ae:d3:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:0e:d9:1f:e6:0a:7d:8e:9c:92:cf:79:01: 3b:0c:b3:47:43:a0:ca:ec:a1:c3:4a:a9:fe:e6:7e: 38:7e:1b:b8:f3:9f:77:28:c6:be:d4:65:b4:03:a5: ac:fe:bd:34:f1:38:8b:78:ad:2d:a7:c9:e1:26:cc: 22:2b:97:b1:fd:a7:aa:2b:12:e9:cf:e0:63:b6:7d: fa:c6:e5:85:cc:ed:5c:1e:42:91:e2:1c:94:22:17: 05:78:fd:79:f5:24:2d:75:88:35:34:fc:20:84:fd: ac:af:b7:37:29:4b:6e:ab:06:10:96:3a:2e:d4:74: 53:df:22:85:2c:6f:df:b9:f2:d8:5f:6f:22:a2:25: 88:35:46:3b:82:bb:63:05:bd:ca:94:3c:86:36:46: 32:e3:48:5e:94:0e:79:f6:aa:7f:d4:f9:ef:4a:45: 7b:55:f9:54:1d:9b:46:e3:a4:51:5a:2e:ac:22:17: 6d:7a:d2:b7:9c:b0:21:b5:55:bc:e4:28:53:b4:dc: a9:f0:36:63:5d:b5:5e:bd:ff:42:cf:14:1c:39:3c: 6e:37:52:5f:dd:a1:93:90:2a:e7:59:44:12:ab:5a: 53:33:96:e9:33:79:aa:5a:7e:fb:2d:eb:dc:e4:b2: 7f:b8:99:be:cc:b1:09:be:f0:cc:b0:ce:74:27:d1: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.180.0/22 195.182.211.0/24 IPv6: 2a0d:b280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41720 Signature Algorithm: sha256WithRSAEncryption aa:a1:61:7f:dd:30:c2:04:7c:c9:d8:15:2c:f8:75:23:0e:bc: c3:4d:97:e3:ee:8f:49:b4:ab:aa:97:98:cb:60:a3:b2:8a:aa: 0a:70:38:ef:e5:1b:48:90:fd:04:73:f0:49:16:28:b9:85:7b: f5:c3:ad:ed:c3:8f:a1:e2:64:65:be:8a:46:df:90:fd:3e:1d: 9a:95:59:a6:72:d6:67:76:fd:00:43:00:0e:0f:41:c6:e2:f4: e2:f9:c0:cc:cb:fe:1e:3a:d2:de:7f:3c:b4:b7:32:b5:66:5a: c5:a5:c9:f7:16:b3:77:d1:62:42:62:f3:8f:b7:aa:50:9d:03: e1:e6:a3:45:83:b7:75:ae:ac:1a:ae:9d:c5:ee:d7:48:30:65: bc:50:eb:ca:f5:bf:7c:f8:e9:17:9d:9f:c8:9a:24:67:01:68: eb:f5:58:72:91:cb:32:15:a2:f7:8f:8f:9c:f4:d1:a8:dc:5b: e3:da:51:3a:4f:9d:0e:80:7f:ce:fc:c9:ad:90:61:b2:e4:42: d5:ce:8b:45:19:28:80:41:22:a0:e0:d0:92:3e:f7:40:a2:dd: 91:9d:db:23:1c:93:ef:18:b4:d9:4a:7c:a7:89:49:c2:9f:78: 8c:e8:d4:f8:c3:d6:0b:c8:e9:1f:a9:18:a2:6b:0f:4c:03:4b: f6:65:d1:54 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt26zvY2uz13+eVzI6u0+EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGNkZDljMTkzZGE5MTg1YTRhYzE1YjJhZGU4NzVmZTk3YjZmNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkAO2R/mCn2OnJLPeQE7DLNHQ6DK 7KHDSqn+5n44fhu48593KMa+1GW0A6Ws/r008TiLeK0tp8nhJswiK5ex/aeqKxLp z+Bjtn36xuWFzO1cHkKR4hyUIhcFeP159SQtdYg1NPwghP2sr7c3KUtuqwYQljou 1HRT3yKFLG/fufLYX28ioiWINUY7grtjBb3KlDyGNkYy40helA559qp/1PnvSkV7 VflUHZtG46RRWi6sIhdtetK3nLAhtVW85ChTtNyp8DZjXbVevf9CzxQcOTxuN1Jf 3aGTkCrnWUQSq1pTM5bpM3mqWn77Levc5LJ/uJm+zLEJvvDMsM50J9Gl6QIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFIjN2cGT2pGFpKwVsq3odf6XtvSRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U2YWZm MjM0LTYxYzUtNDI5MC04YTZkLTVmMmI5MDI3MzIyZi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZh ZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvODhDREQ5QzE5M0RB OTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME ArnytAMEAMO20zANBAIAAjAHAwUDKg2ygDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAovgwDQYJKoZIhvcNAQELBQADggEBAKqhYX/dMMIEfMnYFSz4dSMOvMNNl+Pu j0m0q6qXmMtgo7KKqgpwOO/lG0iQ/QRz8EkWKLmFe/XDre3Dj6HiZGW+ikbfkP0+ HZqVWaZy1md2/QBDAA4PQcbi9OL5wMzL/h460t5/PLS3MrVmWsWlyfcWs3fRYkJi 84+3qlCdA+Hmo0WDt3WurBquncXu10gwZbxQ68r1v3z46Redn8iaJGcBaOv1WHKR yzIVovePj5z00ajcW+PaUTpPnQ6Af878ya2QYbLkQtXOi0UZKIBBIqDg0JI+90Ci 3ZGd2yMck+8YtNlKfKeJScKfeIzo1PjD1gvI6R+pGKJrD0wDS/Zl0VQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:23 2026 by rpki-client