This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer File: ifTHhzt_6kn_brkNUCwdvDpfjDM.cer (raw, json) Hash identifier: 3BZf/pCoAotFHNgmtOMFb7i9b8uWHWfP8tu9ga08tmc= Subject key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12BF2689AB93D6B98D378D23DC2277 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60788 IP: 46.227.48.0/21 IP: 185.47.104.0/22 IP: 2a03:15c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bf:26:89:ab:93:d6:b9:8d:37:8d:23:dc:22:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:3b:fa:ed:fd:bd:60:03:62:36:83:5c:2f: 6a:54:21:1c:0c:de:a9:5d:cc:81:80:c8:01:1a:b7: cc:f6:7e:24:ab:d2:c6:e0:ca:1e:22:d5:e5:55:0c: c6:59:84:5d:81:91:c9:23:3d:3e:a3:4a:e0:01:52: e2:24:e3:94:66:11:3c:dc:c5:10:51:37:6e:02:17: 2a:2d:4c:fa:8d:5e:98:75:67:47:0c:bb:9c:f1:ae: 88:53:05:45:e8:e7:70:89:d7:7d:e4:7d:4e:e3:c8: be:11:da:0c:4c:c9:69:e0:d3:34:6d:10:d0:57:f5: 93:c6:fe:f7:6b:5b:fc:6e:53:8d:52:6a:cf:d0:cd: 2d:fb:a6:a5:d4:a4:16:0b:cf:83:f9:38:dd:03:ca: c8:27:00:2a:93:c7:e4:b2:ce:93:9e:83:27:f9:bf: dd:40:a0:ee:ed:26:55:a5:01:2f:19:3e:4c:93:5d: 22:de:13:61:9a:13:1a:9f:66:49:7c:82:e8:8a:6c: 2c:16:f8:e0:fb:ee:88:24:7a:a0:84:fd:d4:16:f9: 53:ed:ed:c8:ed:c5:72:ff:81:c6:6e:6f:26:d1:01: 99:89:57:7d:ea:f7:d6:39:64:5f:6d:da:f0:4f:41: fd:9b:42:01:09:44:01:ea:5e:54:0b:f5:33:97:08: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.48.0/21 185.47.104.0/22 IPv6: 2a03:15c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60788 Signature Algorithm: sha256WithRSAEncryption 54:4e:f9:e5:1e:1e:f3:67:b6:63:b4:24:4f:e8:4e:b7:19:b9: 48:34:53:72:35:e6:40:49:f5:76:c1:df:72:9e:09:6e:27:e8: 23:b2:29:b6:64:86:7f:82:88:29:af:bd:47:4b:b3:4a:e9:0d: a0:65:94:75:60:cb:9d:b3:b9:ff:ce:90:81:b3:99:50:c0:a7: b7:5a:98:07:27:f6:04:2e:7b:4f:01:a8:88:35:16:06:f4:bd: 4e:4a:d2:71:55:53:8c:47:de:54:47:0b:ab:fc:9a:8e:ac:e5: e7:bf:72:46:8b:13:b5:8c:cb:5f:a0:96:00:47:7c:ab:86:2f: 28:3d:bb:e1:e5:db:40:f6:af:26:50:6e:05:67:af:33:60:67: 8f:d9:82:64:32:5b:b1:1c:14:6d:16:3c:71:7c:8d:24:fa:68: 85:35:3c:3e:66:25:ea:da:3b:15:f0:64:7b:e2:7a:25:49:06: 65:bd:2a:9f:73:18:13:f4:34:76:17:16:d9:2f:48:c9:c9:1a: c8:1f:be:8b:99:0d:7b:e2:ef:b0:b3:73:4e:1e:fa:ed:d4:92: c9:2f:cb:45:8b:13:c3:1c:13:b9:98:a8:8e:d7:19:0c:d5:e5: f0:92:80:da:c9:6e:26:d9:5f:71:79:7a:af:3b:39:9a:b0:dc: 72:d0:d6:74 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8Er8miauT1rmNN40j3CJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY0Yzc4NzNiN2ZlYTQ5ZmY2ZWI5MGQ1MDJjMWRiYzNhNWY4YzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN47+u39vWADYjaDXC9qVCEcDN6p XcyBgMgBGrfM9n4kq9LG4MoeItXlVQzGWYRdgZHJIz0+o0rgAVLiJOOUZhE83MUQ UTduAhcqLUz6jV6YdWdHDLuc8a6IUwVF6Odwidd95H1O48i+EdoMTMlp4NM0bRDQ V/WTxv73a1v8blONUmrP0M0t+6al1KQWC8+D+TjdA8rIJwAqk8fkss6TnoMn+b/d QKDu7SZVpQEvGT5Mk10i3hNhmhMan2ZJfILoimwsFvjg++6IJHqghP3UFvlT7e3I 7cVy/4HGbm8m0QGZiVd96vfWOWRfbdrwT0H9m0IBCUQB6l5UC/UzlwgcTwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIn0x4c7f+pJ/265DVAsHbw6X4wzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzQzYWZi Ni0wZDIxLTRmZjYtOTg2My1iYzUxN2UxMjFkNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNDNhZmI2 LTBkMjEtNGZmNi05ODYzLWJjNTE3ZTEyMWQ1NC8xL2lmVEhoenRfNmtuX2Jya05V Q3dkdkRwZmpETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLuMwAwQCuS9oMA0EAgACMAcDBQAqAxXAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtdDANBgkqhkiG9w0BAQsFAAOCAQEAVE75 5R4e82e2Y7QkT+hOtxm5SDRTcjXmQEn1dsHfcp4JbifoI7IptmSGf4KIKa+9R0uz SukNoGWUdWDLnbO5/86QgbOZUMCnt1qYByf2BC57TwGoiDUWBvS9TkrScVVTjEfe VEcLq/yajqzl579yRosTtYzLX6CWAEd8q4YvKD274eXbQPavJlBuBWevM2Bnj9mC ZDJbsRwUbRY8cXyNJPpohTU8PmYl6to7FfBke+J6JUkGZb0qn3MYE/Q0dhcW2S9I yckayB++i5kNe+LvsLNzTh767dSSyS/LRYsTwxwTuZiojtcZDNXl8JKA2sluJtlf cXl6rzs5mrDcctDWdA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:32 2026 by rpki-client