This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer (raw, json) Hash identifier: FW8I8GuMYEIv3OFZ3AjuXD+Kv1cS0Gw1u6YIxPzfz/8= Subject key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CAB56C867FBF7388E0A1732558D05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.134.180.0/22 IP: 2a06:ee00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ab:56:c8:67:fb:f7:38:8e:0a:17:32:55:8d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e719f426793b1e9063771460abd311a3dff116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:dc:74:24:87:1e:7e:6f:fa:86:d5:78:53: 28:a1:ae:43:b5:3e:f3:e8:87:66:1d:0b:9a:b7:f8: 7b:85:c5:b1:6a:e9:f7:2a:d7:3a:43:e4:c5:f2:c2: 80:f2:37:67:e0:57:2e:7e:7d:9a:b7:e3:56:84:f9: 49:17:9f:c1:05:4c:08:4a:55:86:4c:16:4f:3f:b6: 66:35:51:c9:db:3f:2b:62:ce:19:70:c9:97:31:3f: 04:56:8a:9f:95:2d:9f:ae:5f:39:49:33:6c:95:d0: e1:f3:0c:49:8f:1e:1c:99:de:96:d9:cd:86:7a:01: a7:b3:89:94:bb:15:12:f3:59:6d:ac:4d:92:b3:e2: 2e:b3:4c:84:fb:77:d8:e7:18:25:14:8e:39:93:d9: c4:81:6c:bf:8c:c5:b5:e5:e2:1a:7a:05:76:46:79: 10:46:0b:5b:43:9e:8c:72:a8:2e:72:14:73:71:f5: e9:2c:1f:45:6b:7a:5b:bc:d5:e3:1f:9b:3e:a6:fd: 04:37:76:54:22:ff:40:e7:0d:bf:89:27:9f:d7:ba: ce:f1:7c:81:1d:3a:36:a3:bb:3c:53:ec:d8:7f:eb: aa:3f:23:50:fa:e1:32:7a:e0:e5:13:54:9b:3f:b2: fa:e9:4d:e2:9c:c8:67:2c:ec:a2:61:55:db:f2:7e: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.180.0/22 IPv6: 2a06:ee00::/29 Signature Algorithm: sha256WithRSAEncryption 54:48:a4:d5:b9:e9:63:17:a4:fc:38:42:91:ba:f0:16:79:98: 47:95:07:3f:80:f1:18:12:bd:02:15:f6:6e:8f:ac:bf:cc:64: fd:f3:83:c1:51:fc:40:9c:95:ff:22:6d:55:12:1e:e4:b6:0a: 8c:2c:9f:7c:26:4e:f7:3d:e0:b8:bb:f8:5a:ae:cc:b0:ac:13: f6:3f:92:21:8e:0e:4b:72:88:d7:d9:f6:58:41:da:76:fe:2d: 1e:2c:c3:d3:d8:15:d4:27:05:6c:59:ac:7d:5a:93:ec:81:d6: 7f:38:46:ff:66:b2:65:f4:d1:0e:b9:23:36:1e:91:bb:ee:48: 5f:2f:2d:c2:30:ef:0e:a8:b5:d2:27:ea:38:95:2f:a2:4e:96: ad:18:41:26:b2:de:79:e3:ba:7e:2e:66:75:0c:64:26:95:5c: 59:4b:ae:bc:7b:59:ab:27:5b:33:c1:5f:b9:db:87:f7:a8:4f: 02:59:1c:fc:a3:5d:8a:05:7b:fe:73:81:d2:27:bf:77:4e:44: 0c:d6:f4:a4:f4:10:76:18:7a:c6:e7:88:4d:d1:91:38:70:25: cc:83:ee:b6:1f:29:91:b2:bb:23:e3:59:04:c6:7b:99:64:e6: 74:32:df:89:b3:88:a4:80:dd:c1:dd:20:b4:83:38:4c:00:a1: a3:e0:ca:1a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XKtWyGf79ziOChcyVY0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGU3MTlmNDI2NzkzYjFlOTA2Mzc3MTQ2MGFiZDMxMWEzZGZmMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGTcdCSHHn5v+obVeFMooa5DtT7z 6IdmHQuat/h7hcWxaun3Ktc6Q+TF8sKA8jdn4Fcufn2at+NWhPlJF5/BBUwISlWG TBZPP7ZmNVHJ2z8rYs4ZcMmXMT8EVoqflS2frl85STNsldDh8wxJjx4cmd6W2c2G egGns4mUuxUS81ltrE2Ss+Ius0yE+3fY5xglFI45k9nEgWy/jMW15eIaegV2RnkQ RgtbQ56McqguchRzcfXpLB9Fa3pbvNXjH5s+pv0EN3ZUIv9A5w2/iSef17rO8XyB HTo2o7s8U+zYf+uqPyNQ+uEyeuDlE1SbP7L66U3inMhnLOyiYVXb8n6aFQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIjnGfQmeTsekGN3FGCr0xGj3/EWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzAwZDQ1 ZC01ZTQ4LTQ1OGQtOTJmNy1hZTUyZTE1NmI3N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMDBkNDVk LTVlNDgtNDU4ZC05MmY3LWFlNTJlMTU2Yjc3ZS8xL2lPY1o5Q1o1T3g2UVkzY1VZ S3ZURWFQZjhSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYa0MA0EAgACMAcDBQMqBu4AMA0GCSqGSIb3 DQEBCwUAA4IBAQBUSKTVueljF6T8OEKRuvAWeZhHlQc/gPEYEr0CFfZuj6y/zGT9 84PBUfxAnJX/Im1VEh7ktgqMLJ98Jk73PeC4u/harsywrBP2P5Ihjg5LcojX2fZY Qdp2/i0eLMPT2BXUJwVsWax9WpPsgdZ/OEb/ZrJl9NEOuSM2HpG77khfLy3CMO8O qLXSJ+o4lS+iTpatGEEmst5547p+LmZ1DGQmlVxZS668e1mrJ1szwV+524f3qE8C WRz8o12KBXv+c4HSJ793TkQM1vSk9BB2GHrG54hN0ZE4cCXMg+62HymRsrsj41kE xnuZZOZ0Mt+Js4ikgN3B3SC0gzhMAKGj4Moa -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:08 2026 by rpki-client