This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer File: iVVHgNslskPAotNhl5sTCn8Txg0.cer (raw, json) Hash identifier: 7vg9MSpExdpB/32uBR5WF1qYNVLNYpxdutvNnOaoOdw= Subject key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35FCC58ED7718490454EE90B9B2167 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.75.156.0/22 IP: 2a05:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fc:c5:8e:d7:71:84:90:45:4e:e9:0b:9b:21:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89554780db25b243c0a2d361979b130a7f13c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:9d:88:54:74:d9:d5:31:c7:33:cc:91:80: b4:18:35:a8:79:4e:2c:3e:83:44:8d:2f:d3:b2:df: 98:5a:74:a6:91:84:6c:44:88:4e:4a:d3:f6:32:e0: 43:4f:0e:b4:78:ac:3e:a0:a6:df:65:71:8d:2f:59: 56:f9:0a:08:a5:e3:b3:4c:7b:2d:79:79:2e:b6:fd: dd:42:00:dc:f3:ad:94:75:c2:d3:a3:4f:0f:27:e8: 4a:8d:14:e4:45:ef:3e:40:70:22:09:71:ab:4e:1c: c1:17:8d:77:e2:48:9f:39:0a:0d:3e:17:20:a5:eb: 49:81:a7:4b:a3:7d:39:77:5d:dc:a5:e9:77:61:43: 13:36:8b:66:fc:99:e8:7f:63:df:79:67:b1:eb:2c: 9a:b7:e9:97:2a:82:57:9e:bc:f2:8b:92:00:c6:3c: 6b:64:3b:02:bd:ef:62:90:19:29:f0:09:38:ac:04: c0:08:b9:91:99:13:85:35:ea:83:9e:89:72:4d:eb: 9b:f1:2a:38:1e:1d:57:fa:4a:a5:5f:2a:75:34:8c: 2f:ff:a4:09:4f:49:5e:4b:87:fb:81:20:d8:2a:79: 4d:7b:49:2f:c0:b3:3a:cc:04:56:2a:86:f4:83:4f: 4c:05:c7:65:f2:21:79:ae:75:c5:93:53:7a:7d:be: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.156.0/22 IPv6: 2a05:5340::/29 Signature Algorithm: sha256WithRSAEncryption a6:f3:3b:ca:7f:0e:e6:b7:ec:cc:26:01:f6:17:cc:db:24:25: 8e:46:03:41:ee:00:48:54:09:c8:a5:82:6e:a0:15:08:f8:f2: 15:eb:1d:32:32:34:41:97:0a:3f:aa:58:2c:20:08:f8:7f:c3: 91:67:ef:b5:fc:b2:ef:54:ab:ce:fc:60:77:97:ed:1c:42:6f: 71:84:d8:c9:0e:4d:16:79:86:d3:a0:9b:da:b1:60:d7:1a:83: ef:5f:5e:b6:38:7e:ae:43:f1:cd:fb:f2:82:95:29:9a:78:e7: 79:98:9b:27:2d:f7:89:e7:98:f6:5c:b3:86:11:9b:4b:5d:41: aa:a8:47:c1:91:44:00:ca:ba:d6:df:00:2e:19:62:b2:d3:1d: 9a:97:23:de:bf:49:1c:69:84:33:ad:36:01:30:31:26:99:82: 73:02:5e:67:d6:1f:12:fe:58:11:d8:20:53:a3:84:86:50:b6: 56:8c:67:cd:1a:85:71:a1:70:c3:a8:dc:47:4c:73:c0:80:f2: 46:d4:ca:f6:3a:21:33:21:f7:49:36:ed:29:c6:87:d9:76:6d: 1f:8b:a8:cd:5c:91:aa:fe:be:fc:6a:78:1b:5d:8c:c2:1a:e2: d9:3b:03:c9:43:76:3c:31:25:e9:23:b4:f8:ff:b1:ff:85:c7: 18:37:2a:aa -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NfzFjtdxhJBFTukLmyFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTU1NDc4MGRiMjViMjQzYzBhMmQzNjE5NzliMTMwYTdmMTNjNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+GdiFR02dUxxzPMkYC0GDWoeU4s PoNEjS/Tst+YWnSmkYRsRIhOStP2MuBDTw60eKw+oKbfZXGNL1lW+QoIpeOzTHst eXkutv3dQgDc862UdcLTo08PJ+hKjRTkRe8+QHAiCXGrThzBF4134kifOQoNPhcg petJgadLo305d13cpel3YUMTNotm/Jnof2PfeWex6yyat+mXKoJXnrzyi5IAxjxr ZDsCve9ikBkp8Ak4rATACLmRmROFNeqDnolyTeub8So4Hh1X+kqlXyp1NIwv/6QJ T0leS4f7gSDYKnlNe0kvwLM6zARWKob0g09MBcdl8iF5rnXFk1N6fb6FOwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIlVR4DbJbJDwKLTYZebEwp/E8YNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzNlMjA3 Ny1iYzEwLTQ2MjEtYWIwYi1kYmE0YzliODcwNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvM2UyMDc3 LWJjMTAtNDYyMS1hYjBiLWRiYTRjOWI4NzA2Yi8xL2lWVkhnTnNsc2tQQW90Tmhs NXNUQ244VHhnMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUucMA0EAgACMAcDBQMqBVNAMA0GCSqGSIb3 DQEBCwUAA4IBAQCm8zvKfw7mt+zMJgH2F8zbJCWORgNB7gBIVAnIpYJuoBUI+PIV 6x0yMjRBlwo/qlgsIAj4f8ORZ++1/LLvVKvO/GB3l+0cQm9xhNjJDk0WeYbToJva sWDXGoPvX162OH6uQ/HN+/KClSmaeOd5mJsnLfeJ55j2XLOGEZtLXUGqqEfBkUQA yrrW3wAuGWKy0x2alyPev0kcaYQzrTYBMDEmmYJzAl5n1h8S/lgR2CBTo4SGULZW jGfNGoVxoXDDqNxHTHPAgPJG1Mr2OiEzIfdJNu0pxofZdm0fi6jNXJGq/r78angb XYzCGuLZOwPJQ3Y8MSXpI7T4/7H/hccYNyqq -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:19 2026 by rpki-client