This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer File: iXO4_LiuetyaeZnhNn25WphaweY.cer (raw, json) Hash identifier: KpH3Wffq7/aNoBUnYJIMetGoWcJebU744kB+wpTqkco= Subject key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F594F48AD446C090A633EDF50C010 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.222.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:59:4f:48:ad:44:6c:09:0a:63:3e:df:50:c0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:e7:81:4d:e8:07:80:33:32:8d:49:4d:15: f9:b6:44:6f:88:ff:cd:28:9e:bd:98:36:fd:04:23: 8a:97:e7:36:9a:6a:4c:3e:17:e1:74:0d:c8:88:e4: 37:97:da:ff:36:c1:01:ce:11:4b:70:f3:52:dc:11: 02:4e:3f:35:92:d5:1e:d9:0a:26:7a:c0:12:f8:29: 54:5d:9e:c6:5e:8f:09:2b:01:08:ea:7d:73:30:00: 65:00:6d:8c:91:d6:76:18:b7:f9:d5:7f:56:b0:c5: 82:f7:fa:6c:35:5f:08:62:1d:05:7d:6b:9d:38:d6: 5c:31:cb:57:4e:7a:0a:ac:27:22:03:03:7e:52:f3: 7c:c9:be:17:18:fd:81:72:ff:f4:8a:a2:db:76:2f: c8:41:6c:76:15:75:13:d2:b6:91:b9:65:67:72:4d: 7f:a6:17:b5:cf:e0:7c:a5:3c:d9:cb:05:04:58:2a: cb:25:aa:a2:30:33:47:c2:ae:1b:f7:3b:99:5b:f3: cb:63:c0:b4:90:c9:3f:a4:ae:fc:4c:30:ed:96:2d: ce:88:db:b2:21:0c:2b:53:18:25:04:84:9c:e3:b8: 3c:a7:d5:39:18:03:1f:0f:fd:06:11:c4:5c:f6:7a: 24:38:27:af:b0:a8:e2:42:52:1e:ee:86:94:85:2c: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.134.0/24 Signature Algorithm: sha256WithRSAEncryption 71:f0:1c:dd:9d:38:0d:5d:ba:70:c7:3a:a4:18:fe:aa:e7:15: 71:da:de:ee:60:ae:2b:4d:e5:ad:db:98:44:d5:1f:ab:2a:8c: db:5b:d6:1a:17:ae:2c:6b:5a:fd:f3:7c:fb:69:3e:1f:a1:f3: 00:1b:b7:04:a1:8c:56:69:6e:66:ce:cf:fa:d0:84:ef:a7:05: a4:da:f5:64:48:8d:41:63:38:9b:1e:f1:93:73:e3:de:4f:69: 43:d6:18:d5:10:04:2c:60:63:b0:ee:0e:47:5a:b6:80:2a:9d: 3d:e9:8b:48:18:0a:cf:44:6c:48:f9:73:f8:f3:b7:7a:78:12: a3:80:cc:7e:41:8e:f4:20:1f:b6:a1:94:39:05:22:de:ea:1a: 93:30:de:00:cc:82:9b:97:c1:a4:30:41:7f:f6:31:8d:50:3d: 63:7c:21:c2:63:fb:f1:98:8e:e8:c6:e2:23:45:1b:bf:aa:ee: c8:d9:2d:08:bf:65:81:71:13:a3:eb:bc:24:85:a0:be:95:ea: 5b:6c:51:ce:5d:0d:a4:27:1a:19:1e:5a:7d:d3:ed:ce:8f:37: 2b:57:51:79:a3:34:a0:f0:8c:9f:76:68:b7:a0:77:bf:96:68: 83:b1:6e:69:cc:12:bf:88:46:a7:70:d9:c3:c0:4d:97:f6:ae: 5e:95:59:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8f1lPSK1EbAkKYz7fUMAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTczYjhmY2I4YWU3YWRjOWE3OTk5ZTEzNjdkYjk1YTk4NWFjMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfngU3oB4AzMo1JTRX5tkRviP/N KJ69mDb9BCOKl+c2mmpMPhfhdA3IiOQ3l9r/NsEBzhFLcPNS3BECTj81ktUe2Qom esAS+ClUXZ7GXo8JKwEI6n1zMABlAG2MkdZ2GLf51X9WsMWC9/psNV8IYh0FfWud ONZcMctXTnoKrCciAwN+UvN8yb4XGP2Bcv/0iqLbdi/IQWx2FXUT0raRuWVnck1/ phe1z+B8pTzZywUEWCrLJaqiMDNHwq4b9zuZW/PLY8C0kMk/pK78TDDtli3OiNuy IQwrUxglBISc47g8p9U5GAMfD/0GEcRc9nokOCevsKjiQlIe7oaUhSwpKwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzk4MTgx Ni04ODYwLTRjMmUtYWRmNi0wZDBiZjJiNTZkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvOTgxODE2 LTg4NjAtNGMyZS1hZGY2LTBkMGJmMmI1NmQ1OS8xL2lYTzRfTGl1ZXR5YWVabmhO bjI1V3BoYXdlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwd6GMA0GCSqGSIb3DQEBCwUAA4IBAQBx8Bzd nTgNXbpwxzqkGP6q5xVx2t7uYK4rTeWt25hE1R+rKozbW9YaF64sa1r983z7aT4f ofMAG7cEoYxWaW5mzs/60ITvpwWk2vVkSI1BYzibHvGTc+PeT2lD1hjVEAQsYGOw 7g5HWraAKp096YtIGArPRGxI+XP487d6eBKjgMx+QY70IB+2oZQ5BSLe6hqTMN4A zIKbl8GkMEF/9jGNUD1jfCHCY/vxmI7oxuIjRRu/qu7I2S0Iv2WBcROj67wkhaC+ lepbbFHOXQ2kJxoZHlp90+3OjzcrV1F5ozSg8Iyfdmi3oHe/lmiDsW5pzBK/iEan cNnDwE2X9q5elVk1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:01 2026 by rpki-client