This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer File: iP4ZBc16825jraY2bBR7Ydhcnys.cer (raw, json) Hash identifier: Yn0/YzANkC+/mvor6xodEjiWHM+dlTT3ITWRsFUJ3N8= Subject key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDE55699C27A611A2932E9701ADBE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.99.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e5:56:99:c2:7a:61:1a:29:32:e9:70:1a:db:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:ec:b3:2a:02:63:60:e4:3f:ec:f0:2c:b7: d9:69:31:fa:f0:95:26:c7:4c:7c:81:81:aa:a3:28: ff:0f:c7:a5:2a:e8:f9:d6:55:79:ac:6a:6c:5e:c0: 16:b7:2a:bc:35:a2:53:43:89:34:a4:38:76:67:ed: 80:49:11:28:1c:f2:52:76:7b:fb:76:4c:fc:b1:69: 0a:74:2f:db:0b:bf:eb:3e:d6:fe:7f:d0:8a:6a:36: c8:62:bb:f7:7e:a0:a3:5b:df:0d:cb:22:1b:86:73: be:77:1f:d7:15:f6:8d:12:30:63:3b:d2:c5:ab:ac: 59:b9:fb:a0:d4:2b:c4:9e:62:3b:9c:78:ce:bd:7a: 97:f8:94:27:be:9f:46:0a:6e:49:e0:c2:94:e9:1e: 41:0e:f6:cc:52:57:12:05:73:42:72:6b:e2:5e:6d: 43:9c:c1:1f:14:ff:46:a1:28:dc:b6:7b:c8:5a:f6: 40:21:12:10:ca:e1:a3:34:75:ed:39:f7:75:19:ca: d3:c4:d0:37:38:cf:95:e3:f8:69:60:8b:b6:58:50: a6:1d:16:65:41:17:f0:35:d5:b6:92:4a:cb:d2:11: 27:44:e0:bf:9f:4b:b0:8e:6f:57:4e:cc:f3:b1:07: b3:e2:cb:81:c7:da:15:90:dd:b8:74:59:e6:fe:8a: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.236.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:e9:c9:e8:2d:fb:7e:8f:17:e1:3d:f1:11:b5:50:5d:32:5a: fd:88:61:25:27:6d:a4:15:bc:40:47:0f:7e:cb:5e:bd:97:04: 81:df:24:e0:df:02:7e:2a:bb:d5:c2:2d:ca:05:16:0f:23:b4: 90:e1:f6:f6:04:fa:4f:c4:1c:c5:60:54:29:b6:ba:3b:e0:61: 8c:53:96:a7:02:b4:05:35:f5:56:e1:7a:f2:00:7e:c4:2d:e4: b1:4a:3a:1c:1f:e7:74:cb:b8:46:51:96:7b:c8:89:18:eb:7e: 94:9e:94:cd:b9:31:bf:ca:da:6d:dc:c2:d5:4c:0b:d6:a7:89: 14:2a:2e:6b:e9:7a:99:49:97:00:18:66:03:67:fe:09:f0:d3: a9:d0:b4:ed:72:3e:8a:e8:d2:c1:88:0a:ee:d3:5f:cd:f3:50: 47:2b:2c:46:8c:5a:a9:13:c8:b7:80:c2:55:e8:18:26:dd:37: a0:6f:a8:08:c9:c0:b2:dd:0d:11:f0:a9:5a:be:ee:32:e5:af: 81:80:fd:f2:ae:df:1e:98:b1:72:22:56:c1:f2:58:0a:bf:03: f3:fd:7f:0d:c6:f1:7c:65:0e:ac:b1:a4:5f:09:da:14:88:e2: 50:1c:a6:54:a4:de:79:a7:7e:6d:8e:51:e1:65:0d:8c:4c:8c: e5:54:54:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87eVWmcJ6YRopMulwGtviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZlMTkwNWNkN2FmMzZlNjNhZGE2MzY2YzE0N2I2MWQ4NWM5ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsnssyoCY2DkP+zwLLfZaTH68JUm x0x8gYGqoyj/D8elKuj51lV5rGpsXsAWtyq8NaJTQ4k0pDh2Z+2ASREoHPJSdnv7 dkz8sWkKdC/bC7/rPtb+f9CKajbIYrv3fqCjW98NyyIbhnO+dx/XFfaNEjBjO9LF q6xZufug1CvEnmI7nHjOvXqX+JQnvp9GCm5J4MKU6R5BDvbMUlcSBXNCcmviXm1D nMEfFP9GoSjctnvIWvZAIRIQyuGjNHXtOfd1GcrTxNA3OM+V4/hpYIu2WFCmHRZl QRfwNdW2kkrL0hEnROC/n0uwjm9XTszzsQez4suBx9oVkN24dFnm/ortowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIj+GQXNevNuY62mNmwUe2HYXJ8rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzMxOTUy YS02MDhjLTQ2OGUtYTAwZS1kNjMzYWE3MGRkNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMzE5NTJh LTYwOGMtNDY4ZS1hMDBlLWQ2MzNhYTcwZGQ2Ni8xL2lQNFpCYzE2ODI1anJhWTJi QlI3WWRoY255cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuWPsMA0GCSqGSIb3DQEBCwUAA4IBAQB86cno Lft+jxfhPfERtVBdMlr9iGElJ22kFbxARw9+y169lwSB3yTg3wJ+KrvVwi3KBRYP I7SQ4fb2BPpPxBzFYFQptro74GGMU5anArQFNfVW4XryAH7ELeSxSjocH+d0y7hG UZZ7yIkY636UnpTNuTG/ytpt3MLVTAvWp4kUKi5r6XqZSZcAGGYDZ/4J8NOp0LTt cj6K6NLBiAru01/N81BHKyxGjFqpE8i3gMJV6Bgm3Tegb6gIycCy3Q0R8Klavu4y 5a+BgP3yrt8emLFyIlbB8lgKvwPz/X8NxvF8ZQ6ssaRfCdoUiOJQHKZUpN55p35t jlHhZQ2MTIzlVFTv -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:17 2026 by rpki-client