This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer (raw, json) Hash identifier: B/i5WnnTZ954r7OCWK7SubI7oCa2iSab8ekgdME4X98= Subject key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B355C92118D8663EA9DA6696051BD6E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41509 IP: 194.145.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5c:92:11:8d:86:63:ea:9d:a6:69:60:51:bd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:9b:4f:94:83:da:20:82:4d:8f:41:a4:b5: 77:97:56:e8:1b:10:f6:6d:91:f9:c3:75:e5:19:2b: 3e:d6:f8:85:21:77:b4:5c:12:b3:97:69:0b:07:8e: db:e5:23:fd:3f:e1:bf:cc:1b:17:9f:a4:ab:c4:9e: 80:99:8d:6b:ad:dd:48:8a:88:d9:bc:9c:7b:b5:5f: 11:c1:ce:04:d2:4a:1c:79:f6:04:5d:6b:33:0a:a5: bf:ee:9b:16:3b:34:18:36:d1:87:e0:86:ce:e9:38: 38:0c:78:bb:5e:9a:7e:2d:12:c4:e0:25:33:0f:e2: 8f:3f:30:7f:d5:80:8a:0d:12:9b:c0:24:7e:d8:39: 95:32:c9:ee:cf:e2:a5:a6:bb:df:33:52:56:51:8b: be:e0:c1:40:ea:e3:77:66:1c:f5:a8:17:84:0b:6c: eb:e7:a8:04:7f:21:7a:2f:07:8f:8a:fc:95:03:01: 64:1c:ca:a8:50:59:23:20:17:cf:aa:b1:34:79:65: bb:74:00:3d:64:ff:70:ee:06:d1:b7:6d:cd:58:7a: 47:fc:ab:a1:d4:bb:31:08:42:80:ba:0c:6e:f0:91: fd:4c:e7:cc:05:e1:66:46:99:6c:2f:a9:71:ba:0e: 43:31:1c:00:ba:43:be:04:b0:f5:61:10:35:e5:b3: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41509 Signature Algorithm: sha256WithRSAEncryption 44:5f:e0:5d:56:5c:ee:e6:8d:01:6f:fb:6e:c0:f1:ad:96:8e: b4:9d:69:6c:31:b0:5c:dd:2f:05:bf:8c:a4:d4:6b:a1:83:cf: 10:be:eb:f6:74:bb:e5:53:91:d1:37:23:4a:2d:88:01:97:61: 4a:35:60:48:95:c2:0e:42:62:e5:fe:2f:28:6b:d2:fb:22:ca: 09:4a:4c:ce:19:df:c0:86:90:85:5f:df:cf:e8:88:48:c5:36: 31:a7:4a:d9:fe:a4:fc:eb:72:e8:fc:97:f7:71:96:da:bb:5d: 14:b0:d7:78:a5:fc:0f:d1:27:84:9a:0d:4b:31:e2:88:e0:07: f1:75:db:4f:c6:f9:88:e9:f3:3f:f7:88:16:32:60:b3:ff:a2: 17:19:2f:20:31:0b:c5:99:67:56:67:ba:58:47:3a:1a:16:2a: a6:08:3f:94:9c:05:26:7a:84:8e:88:2b:ba:d5:a7:a7:ac:59: 18:0a:f6:ed:b2:84:8d:62:b3:2f:01:92:91:85:34:b2:54:05: 14:8a:c4:ad:fc:ef:1d:ab:0d:de:ea:b7:49:24:68:42:bd:1b: ef:75:47:de:ba:0e:4d:1f:7a:c6:72:46:8f:f3:4c:5b:8d:e8: 4a:b4:24:1c:38:64:c2:7f:1a:97:2b:1b:a3:d0:88:77:b6:13: 4e:64:52:25 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NVySEY2GY+qdpmlgUb1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZmNGVlNjIzZDhmYWI3M2M5MDFkMGNiZGM5M2EzMjFlOWNjZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzymbT5SD2iCCTY9BpLV3l1boGxD2 bZH5w3XlGSs+1viFIXe0XBKzl2kLB47b5SP9P+G/zBsXn6SrxJ6AmY1rrd1IiojZ vJx7tV8Rwc4E0kocefYEXWszCqW/7psWOzQYNtGH4IbO6Tg4DHi7Xpp+LRLE4CUz D+KPPzB/1YCKDRKbwCR+2DmVMsnuz+KlprvfM1JWUYu+4MFA6uN3Zhz1qBeEC2zr 56gEfyF6LwePivyVAwFkHMqoUFkjIBfPqrE0eWW7dAA9ZP9w7gbRt23NWHpH/Kuh 1LsxCEKAugxu8JH9TOfMBeFmRplsL6lxug5DMRwAukO+BLD1YRA15bPOewIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIj/TuYj2Pq3PJAdDL3JOjIenM+3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2VhZjJl Mi0xODE3LTQwYTgtOWJlOC0yNTA3ZGIzMmMxYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZWFmMmUy LTE4MTctNDBhOC05YmU4LTI1MDdkYjMyYzFjNC8xL2lQOU81aVBZLXJjOGtCME12 Y2s2TWg2Y3o3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwpGcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiJTANBgkqhkiG9w0BAQsFAAOCAQEARF/gXVZc7uaNAW/7bsDxrZaOtJ1pbDGw XN0vBb+MpNRroYPPEL7r9nS75VOR0TcjSi2IAZdhSjVgSJXCDkJi5f4vKGvS+yLK CUpMzhnfwIaQhV/fz+iISMU2MadK2f6k/Oty6PyX93GW2rtdFLDXeKX8D9EnhJoN SzHiiOAH8XXbT8b5iOnzP/eIFjJgs/+iFxkvIDELxZlnVme6WEc6GhYqpgg/lJwF JnqEjogrutWnp6xZGAr27bKEjWKzLwGSkYU0slQFFIrErfzvHasN3uq3SSRoQr0b 73VH3roOTR96xnJGj/NMW43oSrQkHDhkwn8alysbo9CId7YTTmRSJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:04 2026 by rpki-client