This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer File: iX2mABsSODBo_nGjD4zyhcZoMP4.cer (raw, json) Hash identifier: x2zksq9i/RwJXxvnSxGnA07RDQ1qhrgn6hmksyJXKkY= Subject key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7486CAF4065AB440414DC80C5DB9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39430 IP: 185.236.220.0/22 IP: 2a0d:d300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:48:6c:af:40:65:ab:44:04:14:dc:80:c5:db:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=897da6001b12383068fe71a30f8cf285c66830fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:d2:cd:31:9e:52:4f:1c:5e:af:ad:f1:6e: 7c:4a:ad:28:4b:ee:bb:53:55:34:45:bd:3c:9a:6b: 0c:fa:ba:dd:83:02:41:45:a7:ce:f2:11:7b:12:22: 31:f3:5c:41:8e:df:5c:54:d7:04:5a:c0:66:18:29: 74:d8:a9:7c:ee:4e:d5:12:35:13:21:e4:f6:fc:1e: 28:d0:72:a6:00:54:46:f4:6d:2a:c3:81:eb:37:4e: d6:94:c1:cd:d8:c7:2e:41:51:fd:5a:a1:0a:dd:00: 69:a5:41:34:db:27:7d:5e:50:5a:fa:d5:4a:78:55: a6:49:5b:20:24:05:3d:fc:3c:4a:7b:61:0a:0a:5c: 34:a6:0c:06:a1:6e:fc:0a:0e:62:27:87:c4:82:94: 16:94:06:3a:ae:f8:70:fc:da:49:da:87:38:b6:5b: 95:ee:b6:cf:05:6a:92:e2:1d:13:85:2d:e2:e0:d0: b9:a6:84:fe:0b:77:76:d4:76:65:05:e2:a2:20:4b: a5:f9:89:fd:67:9d:0c:29:8f:6b:68:07:24:d8:e1: 96:20:80:7a:49:18:45:2f:71:ac:9b:3e:62:88:91: 54:81:f7:f5:de:7c:f0:fd:32:f9:2e:22:db:6f:04: bd:02:42:cf:e6:64:50:40:b9:48:0b:18:44:bc:c7: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.220.0/22 IPv6: 2a0d:d300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39430 Signature Algorithm: sha256WithRSAEncryption ac:eb:14:a4:63:dc:fa:db:e4:ff:e3:53:6d:4f:e7:bf:c1:b0: 61:a1:df:c9:f6:da:8f:c6:a2:78:62:9d:0f:b8:a5:46:5a:aa: d2:4f:de:ad:d6:ed:2b:c1:79:26:f7:c9:ff:85:51:6e:21:19: e1:35:fd:d9:47:37:c6:81:a5:52:fd:6e:4b:d5:a9:71:b2:79: 40:2a:e8:dc:05:7d:26:1f:fd:55:99:cc:02:85:b1:45:55:a1: 04:cf:95:84:30:de:a9:49:7e:e0:7a:ce:f5:38:41:73:96:5b: 14:c3:28:6d:64:24:06:19:f8:c1:00:3d:71:6a:e8:12:f1:90: 03:02:2b:18:b9:d3:b5:38:d1:33:65:49:94:df:54:48:48:18: f5:0b:9e:3d:cd:59:65:57:8c:56:a5:f5:c7:42:c1:e9:d6:34: ac:15:1d:5e:3a:d0:93:9a:a3:b1:3d:5e:df:19:9e:a7:3d:79: 94:82:77:06:41:1f:35:19:7b:09:cd:78:66:22:8a:20:83:a9: c3:d1:4e:a6:d7:31:c1:2d:de:9d:2e:ec:33:c4:99:e9:38:fd: ef:58:f7:5b:a6:96:a4:1f:b3:69:ed:75:d2:30:53:bc:b1:46: fe:36:ae:08:7a:9f:83:56:81:40:de:19:25:c0:37:5b:99:c4: e3:eb:19:03 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+p0hsr0Blq0QEFNyAxdudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTdkYTYwMDFiMTIzODMwNjhmZTcxYTMwZjhjZjI4NWM2NjgzMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LPSzTGeUk8cXq+t8W58Sq0oS+67 U1U0Rb08mmsM+rrdgwJBRafO8hF7EiIx81xBjt9cVNcEWsBmGCl02Kl87k7VEjUT IeT2/B4o0HKmAFRG9G0qw4HrN07WlMHN2McuQVH9WqEK3QBppUE02yd9XlBa+tVK eFWmSVsgJAU9/DxKe2EKClw0pgwGoW78Cg5iJ4fEgpQWlAY6rvhw/NpJ2oc4tluV 7rbPBWqS4h0ThS3i4NC5poT+C3d21HZlBeKiIEul+Yn9Z50MKY9raAck2OGWIIB6 SRhFL3Gsmz5iiJFUgff13nzw/TL5LiLbbwS9AkLP5mRQQLlICxhEvMdaZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIl9pgAbEjgwaP5xow+M8oXGaDD+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2Lzk2ZGVj OC03NzIwLTRlZmMtYmQzOS04NGZhYWYxMDVhOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOTZkZWM4 LTc3MjAtNGVmYy1iZDM5LTg0ZmFhZjEwNWE5Ny8xL2lYMm1BQnNTT0RCb19uR2pE NHp5aGNab01QNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuezcMA0EAgACMAcDBQAqDdMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCaBjANBgkqhkiG9w0BAQsFAAOCAQEArOsUpGPc+tvk /+NTbU/nv8GwYaHfyfbaj8aieGKdD7ilRlqq0k/erdbtK8F5JvfJ/4VRbiEZ4TX9 2Uc3xoGlUv1uS9WpcbJ5QCro3AV9Jh/9VZnMAoWxRVWhBM+VhDDeqUl+4HrO9ThB c5ZbFMMobWQkBhn4wQA9cWroEvGQAwIrGLnTtTjRM2VJlN9USEgY9QuePc1ZZVeM VqX1x0LB6dY0rBUdXjrQk5qjsT1e3xmepz15lIJ3BkEfNRl7Cc14ZiKKIIOpw9FO ptcxwS3enS7sM8SZ6Tj971j3W6aWpB+zae110jBTvLFG/jauCHqfg1aBQN4ZJcA3 W5nE4+sZAw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:16 2026 by rpki-client