This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer File: iPNC3REnxnrxEWqx-ZfifLTIhOg.cer (raw, json) Hash identifier: SsVCxpNrzktheI0BsMfI2fiB7O4JVoFPeMq2So1dBYw= Subject key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C722AB6398AF7501F132C6708C79FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39841 IP: 185.88.4.0/22 IP: 2a03:7d20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:ab:63:98:af:75:01:f1:32:c6:70:8c:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:82:44:c1:57:62:54:34:a0:f1:7f:ad:5b: 04:85:0c:17:c0:d4:7b:9a:af:68:45:1e:ce:e1:9d: cf:95:62:25:3c:91:5f:97:02:ae:91:07:88:59:50: 62:f4:36:c0:b6:da:f7:1e:9a:9c:c9:58:70:e1:9b: c7:53:08:e9:8a:1a:37:47:28:45:52:c2:68:f3:b7: 96:f7:ab:f8:bb:8c:39:b8:e3:a7:36:3a:3b:98:02: 5c:34:dd:00:cc:64:71:b4:23:74:de:99:bf:a9:ee: f2:34:d4:86:62:ed:0f:64:ad:7b:69:da:74:82:f0: 60:1a:15:1e:f6:89:e3:4f:3a:16:98:c3:b9:95:45: 81:b4:74:7c:05:d1:e7:f9:e8:5f:3c:67:da:09:1b: 79:d3:c5:1a:21:4d:aa:1e:ff:01:2c:ec:28:6f:c6: 55:39:da:0a:b5:06:9d:83:5a:7d:48:10:d5:d9:ed: 83:61:73:66:bb:5b:70:41:13:01:49:a1:c7:c4:98: 37:9d:aa:f1:98:69:82:f7:44:21:db:04:4d:8e:d7: d9:0f:9d:cd:64:ee:18:21:47:27:85:c1:96:8c:bd: 5d:c3:7a:6e:27:f3:45:f0:9b:4d:74:d1:fa:55:af: cb:f1:6e:24:c9:37:ad:34:b8:b9:f8:c5:62:00:5b: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.4.0/22 IPv6: 2a03:7d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39841 Signature Algorithm: sha256WithRSAEncryption ac:0c:7c:68:7e:0c:d1:69:d3:6e:e8:88:9d:d6:0b:89:95:ef: 35:97:97:5b:5f:75:22:9c:ee:f3:b3:ee:34:73:9a:bb:67:01: ef:de:55:6b:f3:08:46:ba:6e:99:97:8e:f1:25:68:cd:d7:a1: cd:54:d6:ee:67:dd:82:10:ab:dd:27:6a:8c:e6:bd:ee:d2:eb: a8:95:33:62:bb:0c:8a:31:ed:b9:b9:48:7f:ad:85:91:9f:49: db:24:09:f0:39:45:ed:2b:8d:3e:b1:3c:c7:9e:09:be:7e:e3: c6:54:5f:a4:6f:9e:56:7c:f4:fe:fb:d6:65:c0:74:2f:14:ac: 73:95:83:37:a6:7a:b5:ff:fd:99:48:67:4e:50:a6:c0:fb:be: 4d:01:b5:a6:6f:fd:2e:0d:b7:dd:06:9f:30:a1:e5:b1:dd:25: 95:c3:fa:65:8d:06:5d:88:8f:31:6c:54:29:80:3f:2c:43:b9: ba:72:6c:60:05:47:9f:f7:ef:82:55:d7:46:dc:77:12:e8:f3: e7:d6:34:e6:28:03:6e:c3:53:f4:db:71:32:56:26:99:e9:14: c5:1e:6a:f0:3d:a8:40:36:53:5c:38:80:d8:af:07:7c:71:a7: f9:55:4d:6f:e6:3f:59:6d:92:ea:fd:cb:19:0e:3f:12:5a:4e: 78:f0:ec:3e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xyKrY5ivdQHxMsZwjHn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGYzNDJkZDExMjdjNjdhZjExMTZhYjFmOTk3ZTI3Y2I0Yzg4NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXGCRMFXYlQ0oPF/rVsEhQwXwNR7 mq9oRR7O4Z3PlWIlPJFflwKukQeIWVBi9DbAttr3HpqcyVhw4ZvHUwjpiho3RyhF UsJo87eW96v4u4w5uOOnNjo7mAJcNN0AzGRxtCN03pm/qe7yNNSGYu0PZK17adp0 gvBgGhUe9onjTzoWmMO5lUWBtHR8BdHn+ehfPGfaCRt508UaIU2qHv8BLOwob8ZV OdoKtQadg1p9SBDV2e2DYXNmu1twQRMBSaHHxJg3narxmGmC90Qh2wRNjtfZD53N ZO4YIUcnhcGWjL1dw3puJ/NF8JtNdNH6Va/L8W4kyTetNLi5+MViAFs4pQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIjzQt0RJ8Z68RFqsfmX4ny0yIToMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI0ZmQx NS0yMmE5LTRiZDYtYTIzMi04YjM2ZTlkMDYzYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjRmZDE1 LTIyYTktNGJkNi1hMjMyLThiMzZlOWQwNjNhMS8xL2lQTkMzUkVueG5yeEVXcXgt WmZpZkxUSWhPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVgEMA0EAgACMAcDBQAqA30gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCboTANBgkqhkiG9w0BAQsFAAOCAQEArAx8aH4M0WnT buiIndYLiZXvNZeXW191Ipzu87PuNHOau2cB795Va/MIRrpumZeO8SVozdehzVTW 7mfdghCr3SdqjOa97tLrqJUzYrsMijHtublIf62FkZ9J2yQJ8DlF7SuNPrE8x54J vn7jxlRfpG+eVnz0/vvWZcB0LxSsc5WDN6Z6tf/9mUhnTlCmwPu+TQG1pm/9Lg23 3QafMKHlsd0llcP6ZY0GXYiPMWxUKYA/LEO5unJsYAVHn/fvglXXRtx3Eujz59Y0 5igDbsNT9NtxMlYmmekUxR5q8D2oQDZTXDiA2K8HfHGn+VVNb+Y/WW2S6v3LGQ4/ ElpOePDsPg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:29:00 2026 by rpki-client