This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer (raw, json) Hash identifier: zECgjxbeMwMpZEy4FFCBDpE1DvhUfphWBrRq4kJWglc= Subject key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A31998C87E5DB84B456C5A56CBF19C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205059 AS: 210816 IP: 141.98.116.0/22 IP: 185.129.16.0/22 IP: 185.165.76.0/24 IP: 185.229.12.0/22 IP: 185.231.108.0/22 IP: 194.26.108.0/23 IP: 194.26.114.0/23 IP: 194.99.74.0/24 IP: 2a14:e180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:98:c8:7e:5d:b8:4b:45:6c:5a:56:cb:f1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:70:91:af:b2:2c:42:a4:8d:72:6b:e7:7e: 48:09:a0:db:cc:ef:19:a4:1c:9f:2c:a8:b2:ad:ac: 31:77:bd:dc:36:59:bd:48:f4:97:a2:f8:d5:d7:2b: 42:6f:2e:69:63:c1:e8:98:cc:35:09:9b:34:e6:6a: cc:07:61:8d:d3:4a:df:2e:c3:4c:72:67:90:48:73: ff:89:47:b7:82:9f:da:f8:00:0e:7f:66:c2:12:49: d8:4f:ab:a2:19:40:e7:b7:a3:12:5e:af:99:2a:40: b1:1d:4f:c2:18:c3:5b:2b:8f:c2:e7:8d:39:ef:f3: 9c:d3:ef:38:ab:a6:22:f5:c9:64:cd:11:00:4c:74: 0f:7e:8a:a3:18:aa:d0:ce:b8:88:cc:24:16:d2:6a: 7b:03:f7:32:16:42:65:9e:82:fd:df:c6:68:d6:2f: 52:b3:7f:3f:ca:83:bf:c8:0a:67:be:a4:4a:fa:ef: 24:27:46:a5:99:db:9a:7f:4f:9c:23:0a:f9:f5:54: 73:72:07:7e:fc:a3:1d:4c:90:a0:26:a0:fe:e1:80: 3c:0b:e3:45:8a:cf:c5:dd:10:04:ac:77:b1:ca:cc: 90:59:b4:67:85:60:60:70:97:6d:93:a2:ff:e5:d6: 51:5c:97:7e:45:76:35:78:d8:a1:1c:0c:ed:8d:be: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.116.0/22 185.129.16.0/22 185.165.76.0/24 185.229.12.0/22 185.231.108.0/22 194.26.108.0/23 194.26.114.0/23 194.99.74.0/24 IPv6: 2a14:e180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205059 210816 Signature Algorithm: sha256WithRSAEncryption 97:ea:6b:ce:84:91:4b:ba:44:36:1b:37:6f:7b:fe:8b:3f:22: 1b:07:7e:b2:5a:57:62:96:fa:80:18:80:42:ba:27:f9:75:21: 90:7d:eb:ad:6b:eb:1b:d1:66:ce:23:34:9b:af:0c:33:79:35: f2:82:a1:87:95:80:b4:64:52:a1:e3:8f:e9:60:b9:41:5a:eb: 6f:0b:29:44:92:1b:ca:43:9b:ca:9d:2d:33:4f:75:91:3b:42: 52:cd:dd:df:e9:d7:db:be:15:9b:16:c2:bf:5b:4a:65:35:f9: de:59:c5:17:25:f8:6c:43:e6:c8:68:1b:98:bd:74:9e:02:aa: b1:31:1d:17:bd:b1:a3:a4:df:c2:ec:e6:91:2a:7f:ca:5d:37: 00:75:3e:78:19:2b:7f:46:30:c8:7d:29:f5:e0:a5:0c:8d:5c: 78:e1:12:64:78:2c:d4:1e:fc:06:87:ec:fb:be:8f:69:71:b8: b7:62:92:71:90:30:e9:23:af:e0:0c:e0:d6:ae:f4:d1:f3:ab: 00:08:5c:0b:2b:bf:53:b3:34:ad:b4:08:e7:a6:12:47:35:67: c3:60:4f:fd:1c:94:01:88:b6:06:7d:d4:2f:b9:26:2c:7a:90: 9e:dd:63:8f:38:b9:10:8d:13:14:e3:b4:d3:10:f2:50:2c:93: e1:16:83:5b -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt4oxmYyH5duEtFbFpWy/GcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZiNDEwYTNiZmM3MzQwYjY2N2I0ZjIyMWM3Y2I4MDYyNjc4OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOdwka+yLEKkjXJr535ICaDbzO8Z pByfLKiyrawxd73cNlm9SPSXovjV1ytCby5pY8HomMw1CZs05mrMB2GN00rfLsNM cmeQSHP/iUe3gp/a+AAOf2bCEknYT6uiGUDnt6MSXq+ZKkCxHU/CGMNbK4/C5405 7/Oc0+84q6Yi9clkzREATHQPfoqjGKrQzriIzCQW0mp7A/cyFkJlnoL938Zo1i9S s38/yoO/yApnvqRK+u8kJ0almduaf0+cIwr59VRzcgd+/KMdTJCgJqD+4YA8C+NF is/F3RAErHexysyQWbRnhWBgcJdtk6L/5dZRXJd+RXY1eNihHAztjb5MowIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFIj7QQo7/HNAtme08iHHy4BiZ4luMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzQ0NjI0 Zi0yMzFkLTQ2NmMtYmIwMi1iMzhjODA5NTE5ODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNDQ2MjRm LTIzMWQtNDY2Yy1iYjAyLWIzOGM4MDk1MTk4MS8xL2lQdEJDanY4YzBDMlo3VHlJ Y2ZMZ0dKbmlXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCjWJ0AwQCuYEQAwQAuaVMAwQCueUMAwQCueds AwQBwhpsAwQBwhpyAwQAwmNKMA0EAgACMAcDBQMqFOGAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwMhAwIDAzeAMA0GCSqGSIb3DQEBCwUAA4IBAQCX6mvOhJFLukQ2 Gzdve/6LPyIbB36yWldilvqAGIBCuif5dSGQfeuta+sb0WbOIzSbrwwzeTXygqGH lYC0ZFKh44/pYLlBWutvCylEkhvKQ5vKnS0zT3WRO0JSzd3f6dfbvhWbFsK/W0pl NfneWcUXJfhsQ+bIaBuYvXSeAqqxMR0XvbGjpN/C7OaRKn/KXTcAdT54GSt/RjDI fSn14KUMjVx44RJkeCzUHvwGh+z7vo9pcbi3YpJxkDDpI6/gDODWrvTR86sACFwL K79TszSttAjnphJHNWfDYE/9HJQBiLYGfdQvuSYsepCe3WOPOLkQjRMU47TTEPJQ LJPhFoNb -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:51 2026 by rpki-client