This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer File: iabNn0vrewwE0x_-XGdKh6dznSE.cer (raw, json) Hash identifier: /+J91gKedjIXFpNLBE87f+htotErLqZD+wmUb/JlerM= Subject key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF69CDCAB9E4988384C14D4763E05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12642 AS: 13000 AS: 39412 AS: 47129 AS: 49001 AS: 49190 IP: 62.182.224.0/21 IP: 87.101.64.0/20 IP: 87.239.192.0/21 IP: 89.200.224.0/21 IP: 91.195.134.0/23 IP: 91.195.158.0/23 IP: 91.195.190.0/23 IP: 91.200.24.0/22 IP: 91.214.24.0/22 IP: 95.131.32.0/21 IP: 185.194.220.0/22 IP: 188.137.0.0/17 IP: 193.3.166.0/24 IP: 193.34.112.0/22 IP: 193.93.92.0/22 IP: 193.150.36.0/23 IP: 195.3.200.0/22 IP: 195.66.73.0/24 IP: 195.88.128.0/23 IP: 2a02:c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:9c:dc:ab:9e:49:88:38:4c:14:d4:76:3e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:57:71:7e:af:de:70:f5:e8:68:f3:ac:04: a1:ea:38:79:e6:12:88:b5:ec:9c:b1:5b:4b:dd:8e: 5c:cd:ed:74:39:69:c9:30:b2:35:15:ad:a3:e9:23: 53:e8:7d:b9:f2:48:72:84:bc:0d:92:73:52:0d:82: 62:e6:25:24:ac:18:0b:fd:09:f4:06:0f:1e:69:dc: a3:c4:e3:40:55:03:ce:5b:6b:95:93:1d:4f:01:75: 14:14:3e:57:58:c3:2d:db:b2:51:d4:48:92:32:7d: 0b:a9:b5:2b:ae:5c:b2:46:f0:a7:27:10:6a:ee:ae: 4e:39:23:eb:b6:56:01:9c:f9:08:da:04:7c:48:6e: 8f:75:92:95:f7:21:27:30:eb:e0:38:3d:7d:b0:5b: d0:2c:93:a5:d1:73:1c:73:f1:96:0b:f7:d5:62:2a: 68:85:84:5f:11:20:50:36:8e:e8:4a:4c:39:82:6d: 01:6b:0e:d5:4c:a7:05:b4:fb:f7:c0:0a:2a:a5:80: 9b:0f:cb:78:8e:e3:25:10:14:60:88:e5:4f:ac:cd: 84:9d:c6:28:5b:68:ac:66:09:9c:dd:e8:9a:d3:45: 67:c8:35:19:9a:a4:b9:d0:3d:13:d4:ff:5b:e0:99: 4f:ff:ca:20:9c:ac:6b:bb:21:38:d8:6e:a9:ef:a8: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.224.0/21 87.101.64.0/20 87.239.192.0/21 89.200.224.0/21 91.195.134.0/23 91.195.158.0/23 91.195.190.0/23 91.200.24.0/22 91.214.24.0/22 95.131.32.0/21 185.194.220.0/22 188.137.0.0/17 193.3.166.0/24 193.34.112.0/22 193.93.92.0/22 193.150.36.0/23 195.3.200.0/22 195.66.73.0/24 195.88.128.0/23 IPv6: 2a02:c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12642 13000 39412 47129 49001 49190 Signature Algorithm: sha256WithRSAEncryption 69:0f:92:f6:d7:54:b6:da:19:f6:ab:4a:b7:6a:11:1c:09:de: ec:a2:30:33:69:b5:44:1a:25:a0:5f:1d:72:f0:1d:6c:62:1e: a0:92:25:76:53:79:ab:eb:e6:56:29:29:43:e1:4a:35:eb:90: ed:46:35:61:f1:ef:22:3a:ad:4e:8f:dd:84:a2:42:ac:00:a8: 8c:6e:69:a5:ba:a9:08:3f:cc:38:1b:67:10:e4:7a:88:9c:ab: 68:a1:d1:da:23:94:f3:f0:40:17:b9:e1:26:7a:d9:f8:2f:bb: 97:14:12:32:02:f2:80:1c:f0:9c:8e:f9:df:8a:cb:fc:fb:cb: c0:d1:49:6e:14:10:8a:f0:23:2b:bb:01:38:e1:4c:50:f6:44: 82:76:95:a8:db:c7:5e:4a:b3:e6:6e:1f:89:37:9f:fa:1b:ff: c8:4f:95:eb:30:dd:58:3c:92:80:88:58:24:c4:f8:c6:dc:8c: d9:a6:f0:40:4e:a6:0f:d6:f3:b1:86:5d:e0:e9:56:f1:c3:a9: 5d:06:f7:3f:1c:9b:a5:4f:8d:a0:a3:0a:2c:6b:62:fb:5c:95: d6:c1:35:0b:ae:45:3e:aa:e5:70:2e:80:e3:29:98:67:ea:89: f7:dc:d9:54:00:83:75:4c:77:ae:7c:76:99:97:f2:6f:e5:5e: 4d:42:5b:72 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAZt26vac3KueSYg4TBTUdj4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWE2Y2Q5ZjRiZWI3YjBjMDRkMzFmZmU1YzY3NGE4N2E3NzM5ZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlelXcX6v3nD16GjzrASh6jh55hKI teycsVtL3Y5cze10OWnJMLI1Fa2j6SNT6H258khyhLwNknNSDYJi5iUkrBgL/Qn0 Bg8eadyjxONAVQPOW2uVkx1PAXUUFD5XWMMt27JR1EiSMn0LqbUrrlyyRvCnJxBq 7q5OOSPrtlYBnPkI2gR8SG6PdZKV9yEnMOvgOD19sFvQLJOl0XMcc/GWC/fVYipo hYRfESBQNo7oSkw5gm0Baw7VTKcFtPv3wAoqpYCbD8t4juMlEBRgiOVPrM2EncYo W2isZgmc3eia00VnyDUZmqS50D0T1P9b4JlP/8ognKxruyE42G6p76iFjQIDAQAB o4IDNTCCAzEwHQYDVR0OBBYEFImmzZ9L63sMBNMf/lxnSoenc50hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2Lzk5YTRj Yy00NzIwLTRhNjQtYWEwNi0xZjkyNDQ5NWZjZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOTlhNGNj LTQ3MjAtNGE2NC1hYTA2LTFmOTI0NDk1ZmNkZC8xL2lhYk5uMHZyZXd3RTB4Xy1Y R2RLaDZkem5TRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGcBggrBgEF BQcBBwEB/wSBjDCBiTB4BAIAATByAwQDPrbgAwQEV2VAAwQDV+/AAwQDWcjgAwQB W8OGAwQBW8OeAwQBW8O+AwQCW8gYAwQCW9YYAwQDX4MgAwQCucLcAwQHvIkAAwQA wQOmAwQCwSJwAwQCwV1cAwQBwZYkAwQCwwPIAwQAw0JJAwQBw1iAMA0EAgACMAcD BQMqAgxAMDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwCAjFiAgIyyAIDAJn0AgMAuBkC AwC/aQIDAMAmMA0GCSqGSIb3DQEBCwUAA4IBAQBpD5L211S22hn2q0q3ahEcCd7s ojAzabVEGiWgXx1y8B1sYh6gkiV2U3mr6+ZWKSlD4Uo165DtRjVh8e8iOq1Oj92E okKsAKiMbmmluqkIP8w4G2cQ5HqInKtoodHaI5Tz8EAXueEmetn4L7uXFBIyAvKA HPCcjvnfisv8+8vA0UluFBCK8CMruwE44UxQ9kSCdpWo28deSrPmbh+JN5/6G//I T5XrMN1YPJKAiFgkxPjG3IzZpvBATqYP1vOxhl3g6Vbxw6ldBvc/HJulT42gowos a2L7XJXWwTULrkU+quVwLoDjKZhn6on33NlUAIN1THeufHaZl/Jv5V5NQlty -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:37 2026 by rpki-client