This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer File: ibX60Y3ZEQQToxtNjhh2WifUw_E.cer (raw, json) Hash identifier: H5ozyPxBj+G/XMM0rlckYqAl6q6+V4klo2MjqRYkLuI= Subject key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F97B7812AFC544EAB457C887627D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39210 AS: 62451 IP: 62.178.0.0/16 IP: 80.108.0.0 -- 80.110.255.255 IP: 80.241.16.0/20 IP: 84.112.0.0/14 IP: 185.35.152.0/22 IP: 185.235.152.0/22 IP: 195.34.128.0/23 IP: 195.34.131.0/24 IP: 195.34.136.0 -- 195.34.159.255 IP: 212.17.64.0/18 IP: 212.186.0.0/16 IP: 213.47.0.0 -- 213.47.219.255 IP: 213.47.224.0/19 IP: 217.25.112.0/20 IP: 2a00:e360::/32 IP: 2a02:8380::/28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f9:7b:78:12:af:c5:44:ea:b4:57:c8:87:62:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:b4:d3:37:32:eb:eb:dc:ae:42:bb:ac:cf: 72:ce:af:b2:52:e6:f7:8c:04:66:f0:71:02:e5:ef: 15:32:fa:71:05:c9:28:39:0f:fb:16:c3:c0:6a:b8: b1:eb:01:f2:eb:a7:73:df:15:3e:12:c0:77:24:42: c8:87:b2:12:00:97:f9:ad:ec:a6:44:69:90:ea:cd: e2:a5:2a:3a:a8:5d:ae:b2:d1:00:3f:a1:a0:14:97: 0d:ce:f2:6f:8a:17:0c:bc:94:37:f9:b3:02:18:b7: 3b:c0:b9:d8:a0:cf:52:89:85:33:16:80:ca:18:d3: 27:a2:c4:66:2d:13:38:dc:be:4e:d2:c7:1f:76:96: a1:25:67:c6:5d:d2:59:a1:43:25:cd:dd:b2:0a:8f: 32:cf:32:64:72:db:f0:09:46:68:aa:b8:1b:95:bb: a7:22:a8:15:af:f6:c1:02:d6:e7:94:20:3a:e8:2a: 3e:ac:d9:ca:26:ca:c2:23:38:fc:cf:54:18:26:b7: ab:1e:68:68:69:02:32:fd:4b:5c:de:03:07:ca:bc: 25:3e:38:fd:85:fc:47:f6:28:ae:d5:49:5c:2e:bc: c6:7d:01:b5:90:2c:1f:b8:8a:22:ed:24:fe:4e:3d: 5a:a5:c9:f0:53:67:34:41:85:aa:de:8d:2f:a2:3f: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.178.0.0/16 80.108.0.0-80.110.255.255 80.241.16.0/20 84.112.0.0/14 185.35.152.0/22 185.235.152.0/22 195.34.128.0/23 195.34.131.0/24 195.34.136.0-195.34.159.255 212.17.64.0/18 212.186.0.0/16 213.47.0.0-213.47.219.255 213.47.224.0/19 217.25.112.0/20 IPv6: 2a00:e360::/32 2a02:8380::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39210 62451 Signature Algorithm: sha256WithRSAEncryption 27:e5:ed:31:02:05:35:bd:1c:c3:a3:7f:d5:30:eb:15:08:33: 66:f9:60:09:d5:86:2d:71:a1:15:f6:8e:c7:10:b2:0d:06:de: 50:3c:c9:57:89:3f:a3:89:97:d7:06:7d:69:46:dc:07:57:e2: 58:61:23:55:58:b2:bb:71:fc:66:40:15:56:82:8f:95:54:93: 0c:be:de:8b:d9:07:47:85:3b:32:8a:68:fa:94:f4:73:54:81: 5a:51:e2:b0:23:f4:7e:e1:20:b7:c4:be:31:49:eb:4f:a1:2f: 3b:0a:9f:e7:d5:ea:14:57:48:0a:f0:00:a4:10:8d:9e:b7:db: ef:8e:65:90:c3:18:0f:c6:5c:53:72:98:3d:f2:3b:70:44:4b: 55:f0:e1:7b:29:f4:a4:b3:44:a4:dc:aa:a6:bf:30:77:f0:3a: 8f:17:c1:7f:fc:c1:3d:75:77:c6:dc:85:ea:83:99:61:80:8f: c4:e3:6a:e1:0b:42:08:09:c8:11:2f:fb:22:26:ef:f5:91:c0: a8:00:20:8c:05:ed:f1:bf:d9:2a:26:67:26:ee:04:f7:62:50: 21:89:af:0c:09:ca:a8:bf:eb:69:a6:7d:1b:7a:0c:58:f9:7b: 21:00:95:75:3c:08:a8:be:2d:9a:61:24:ed:a3:dc:1d:32:0b: fa:94:68:a8 -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAZt4ovl7eBKvxUTqtFfIh2J9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWI1ZmFkMThkZDkxMTA0MTNhMzFiNGQ4ZTE4NzY1YTI3ZDRjM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3u00zcy6+vcrkK7rM9yzq+yUub3 jARm8HEC5e8VMvpxBckoOQ/7FsPAarix6wHy66dz3xU+EsB3JELIh7ISAJf5reym RGmQ6s3ipSo6qF2ustEAP6GgFJcNzvJvihcMvJQ3+bMCGLc7wLnYoM9SiYUzFoDK GNMnosRmLRM43L5O0scfdpahJWfGXdJZoUMlzd2yCo8yzzJkctvwCUZoqrgblbun IqgVr/bBAtbnlCA66Co+rNnKJsrCIzj8z1QYJrerHmhoaQIy/Utc3gMHyrwlPjj9 hfxH9iiu1UlcLrzGfQG1kCwfuIoi7ST+Tj1apcnwU2c0QYWq3o0voj9h4QIDAQAB o4IDHjCCAxowHQYDVR0OBBYEFIm1+tGN2REEE6MbTY4Ydlon1MPxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzkwMWFk Mi02YzZjLTQzYzYtYTI4MC00MjUwY2U1NTE3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTAxYWQy LTZjNmMtNDNjNi1hMjgwLTQyNTBjZTU1MTdkOS8xL2liWDYwWTNaRVFRVG94dE5q aGgyV2lmVXdfRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGXBggrBgEF BQcBBwEB/wSBhzCBhDBsBAIAATBmAwMAPrIwCgMDAlBsAwMAUG4DBARQ8RADAwJU cAMEArkjmAMEArnrmAMEAcMigAMEAMMigzAMAwQDwyKIAwQFwyKAAwQG1BFAAwMA 1LowCwMDANUvAwQC1S/YAwQF1S/gAwQE2RlwMBQEAgACMA4DBQAqAONgAwUEKgKD gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAmSoCAwDz8zANBgkqhkiG9w0BAQsF AAOCAQEAJ+XtMQIFNb0cw6N/1TDrFQgzZvlgCdWGLXGhFfaOxxCyDQbeUDzJV4k/ o4mX1wZ9aUbcB1fiWGEjVViyu3H8ZkAVVoKPlVSTDL7ei9kHR4U7Mopo+pT0c1SB WlHisCP0fuEgt8S+MUnrT6EvOwqf59XqFFdICvAApBCNnrfb745lkMMYD8ZcU3KY PfI7cERLVfDheyn0pLNEpNyqpr8wd/A6jxfBf/zBPXV3xtyF6oOZYYCPxONq4QtC CAnIES/7Iibv9ZHAqAAgjAXt8b/ZKiZnJu4E92JQIYmvDAnKqL/raaZ9G3oMWPl7 IQCVdTwIqL4tmmEk7aPcHTIL+pRoqA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:42:01 2026 by rpki-client