This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer (raw, json) Hash identifier: gjKPrjKaW4vghkR3B6B8/A5EvZhPE2oefThFchziQu0= Subject key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB908AB4FCFCB308DE907EAD74F615 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202484 IP: 85.255.92.0/22 IP: 194.34.62.0/23 IP: 194.34.136.0/23 IP: 2a0d:2f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:90:8a:b4:fc:fc:b3:08:de:90:7e:ad:74:f6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=892d21566ccfc3bb079ec5854b044ab809804157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:1b:e8:21:c8:33:39:cd:ff:a7:9a:50:ec: 6e:65:7b:cd:90:88:61:e1:f9:55:50:cd:d9:56:cf: a0:53:0f:d1:58:e4:9c:af:1e:34:96:53:cd:11:08: 70:bc:b4:e4:27:2d:8c:14:33:fe:c7:e1:7e:38:ec: 7b:c6:6b:bb:4d:5b:b8:12:e6:a1:c6:58:d9:41:74: 28:70:f8:cf:c0:cc:2d:48:2e:13:6c:83:e8:73:23: 22:ca:50:6f:54:f6:fb:a6:d8:7c:d0:69:64:db:08: ca:9f:a7:bc:c9:64:ef:f7:18:ff:5f:08:3f:05:a5: f3:4d:2a:90:c6:22:8e:c7:c5:bf:db:62:91:43:ec: 71:04:52:8b:53:31:6c:62:3c:72:34:bd:e6:21:ed: 84:ea:a3:66:b0:59:66:20:90:d0:f8:6b:20:b5:f3: de:37:e8:bd:15:96:a4:1c:92:d8:f6:37:22:4d:04: 9e:1f:c3:d3:e3:17:08:cc:ca:d5:60:c4:7a:7e:41: 54:38:52:67:2a:8a:f4:06:3f:99:31:6a:67:49:2a: 7d:5f:69:b8:29:4c:9b:49:83:66:7a:dd:b2:48:99: df:49:08:6a:e6:cf:32:12:76:30:75:82:1e:f2:fa: 41:52:8c:6a:16:32:ef:28:1b:03:e8:03:ec:fa:8e: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.92.0/22 194.34.62.0/23 194.34.136.0/23 IPv6: 2a0d:2f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202484 Signature Algorithm: sha256WithRSAEncryption a2:dc:d3:38:4b:2d:e8:c5:bf:b4:c4:fb:26:33:2d:6e:ab:e9: f4:10:dd:76:2b:18:3d:78:e8:38:30:ec:2c:dd:7d:be:0b:82: 54:ae:d7:b3:1d:e5:64:9a:1b:59:6d:5f:5e:69:76:3a:a3:96: 04:5f:0f:f3:4a:7c:c4:7b:23:b6:c4:c8:01:57:62:13:d0:cc: ab:ae:b0:a8:18:43:f9:b4:15:72:b2:52:66:0e:cf:a9:3c:ec: 22:c3:84:50:ce:34:42:9a:65:02:41:c1:0f:bf:1f:c1:31:86: 00:22:eb:8f:b2:bd:af:93:24:e8:db:fa:eb:32:63:80:ff:4f: 2e:c3:23:66:98:55:31:ef:67:43:bb:40:6a:70:eb:d9:dc:96: 43:be:1c:d5:86:e3:80:6e:7b:41:ac:7e:5d:9f:fe:93:4d:4f: a8:8e:fd:f5:a0:31:1b:14:e7:f8:8b:31:d0:ec:dc:53:63:66: fb:8d:2e:e8:68:17:2b:16:7a:10:00:ee:b6:45:b6:6a:14:65: 42:e1:bd:7d:f4:f6:a0:ef:a9:c0:bb:9d:76:ec:6a:f8:cd:16: 73:b5:be:e2:fd:d3:a2:4c:0b:e0:e9:ef:f5:0e:22:07:1e:09: c7:e8:97:c1:04:e2:74:86:55:14:5e:33:26:2d:1d:d7:98:f1: fa:9d:36:20 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt265CKtPz8swjekH6tdPYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTJkMjE1NjZjY2ZjM2JiMDc5ZWM1ODU0YjA0NGFiODA5ODA0MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCYb6CHIMznN/6eaUOxuZXvNkIhh 4flVUM3ZVs+gUw/RWOScrx40llPNEQhwvLTkJy2MFDP+x+F+OOx7xmu7TVu4Euah xljZQXQocPjPwMwtSC4TbIPocyMiylBvVPb7pth80Glk2wjKn6e8yWTv9xj/Xwg/ BaXzTSqQxiKOx8W/22KRQ+xxBFKLUzFsYjxyNL3mIe2E6qNmsFlmIJDQ+GsgtfPe N+i9FZakHJLY9jciTQSeH8PT4xcIzMrVYMR6fkFUOFJnKor0Bj+ZMWpnSSp9X2m4 KUybSYNmet2ySJnfSQhq5s8yEnYwdYIe8vpBUoxqFjLvKBsD6APs+o5xewIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFIktIVZsz8O7B57FhUsESrgJgEFXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2Q1OTdi MC02NDI1LTQyNWYtYjcyMy00ZWI4YjBiNDljNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZDU5N2Iw LTY0MjUtNDI1Zi1iNzIzLTRlYjhiMGI0OWM0YS8xL2lTMGhWbXpQdzdzSG5zV0ZT d1JLdUFtQVFWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCVf9cAwQBwiI+AwQBwiKIMA0EAgACMAcDBQMq DS9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMW9DANBgkqhkiG9w0BAQsFAAOC AQEAotzTOEst6MW/tMT7JjMtbqvp9BDddisYPXjoODDsLN19vguCVK7Xsx3lZJob WW1fXml2OqOWBF8P80p8xHsjtsTIAVdiE9DMq66wqBhD+bQVcrJSZg7PqTzsIsOE UM40QpplAkHBD78fwTGGACLrj7K9r5Mk6Nv66zJjgP9PLsMjZphVMe9nQ7tAanDr 2dyWQ74c1YbjgG57Qax+XZ/+k01PqI799aAxGxTn+Isx0OzcU2Nm+40u6GgXKxZ6 EADutkW2ahRlQuG9ffT2oO+pwLudduxq+M0Wc7W+4v3TokwL4Onv9Q4iBx4Jx+iX wQTidIZVFF4zJi0d15jx+p02IA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:24:35 2026 by rpki-client