This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer File: ihZhi3H_yA4cP0HtDfyJq16WP9I.cer (raw, json) Hash identifier: sPJcZPtRItBPtfGpFaK7vAfeEIjn+r3hjdBub2+mtiU= Subject key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE66F42C4D85CFA195C62C146AF07F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208033 IP: 45.158.204.0/22 IP: 185.132.236.0/22 IP: 194.120.124.0/23 IP: 194.120.190.0/23 IP: 194.122.240.0/22 IP: 2a0c:dc80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:66:f4:2c:4d:85:cf:a1:95:c6:2c:14:6a:f0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:9e:52:5d:02:67:86:ee:46:85:c1:77:24: 63:bd:08:ea:8a:1a:6e:4e:62:3d:24:c7:69:e0:24: 16:c8:59:cf:9d:3f:3f:55:b0:fd:a0:6e:e9:4f:f0: 98:6a:3d:eb:cd:82:97:d0:e0:32:b1:7e:e8:5b:16: 94:28:73:dd:e9:12:37:4d:d0:f1:1d:18:76:b8:df: 9c:92:4e:f4:c5:a8:53:bd:53:06:df:03:c8:d0:6b: 68:ec:00:49:dc:53:29:d2:8f:4d:08:d7:2b:df:4c: ed:de:28:a5:dc:f8:21:6a:05:ba:45:f7:da:be:cf: 8c:eb:b5:40:f9:3a:c8:4f:4a:8b:bb:2f:da:e6:5e: d9:71:be:c9:b5:6d:ab:ee:db:e5:62:66:a2:4f:13: 16:6f:82:a3:bc:06:2d:2e:6b:11:98:e8:37:f8:fe: f8:c0:53:45:45:5d:79:df:bf:d2:cb:75:a9:7d:3c: 07:85:45:e8:53:e2:a6:cc:16:cf:96:25:bf:bd:9e: f1:6b:77:96:2d:2b:e6:d1:31:2d:9d:4d:63:a2:1f: 0a:33:d1:ba:bb:5b:f3:36:61:b2:ef:e2:87:21:0a: ce:14:52:cb:d6:24:43:f1:76:a3:3f:86:42:f2:81: 02:94:76:8c:c8:3c:c5:e0:8d:7c:bb:c3:be:e1:9c: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.204.0/22 185.132.236.0/22 194.120.124.0/23 194.120.190.0/23 194.122.240.0/22 IPv6: 2a0c:dc80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208033 Signature Algorithm: sha256WithRSAEncryption 7f:82:93:81:ef:d5:48:cb:c7:43:5c:c3:45:88:5d:c3:81:58: 9a:5e:ce:ab:d8:16:69:80:41:9d:d0:23:18:ba:d4:33:1d:7c: 51:d2:8d:84:ef:21:4c:6d:26:f7:2c:73:71:d6:27:3d:ca:1c: 81:40:9a:d3:31:45:94:05:c6:6a:b9:f7:98:9b:c5:37:d1:cf: 66:1f:7c:9c:18:f8:e4:fa:2f:9f:b4:d8:f4:bc:57:7a:1c:51: 36:18:be:fa:fc:3d:58:9b:89:8f:d0:8e:71:2a:2c:aa:5e:b4: 8e:3f:99:9d:42:ea:ac:47:92:f8:c3:9d:ba:33:63:63:cf:0b: 43:b0:b2:ba:c5:f1:52:00:eb:9e:86:bc:bd:cf:b9:0a:bb:bb: 90:05:c1:c7:34:04:df:70:23:29:3f:a7:ec:13:37:59:a5:47: ef:44:06:6d:12:2a:9d:81:73:dd:5b:73:5a:96:e4:c3:f4:ca: c0:e9:00:56:20:c3:d6:43:c7:ec:79:e9:21:ee:3e:57:d0:29: f6:44:34:1f:d2:f1:e1:32:0f:29:6b:23:96:59:27:66:e5:b8: fb:9f:cd:b4:d5:f1:7f:48:fb:bd:bc:c8:ad:d6:e6:27:9f:b0: 29:54:d7:b7:b9:e7:0a:de:73:d0:49:a9:63:c4:4c:d8:60:e9: e3:be:e2:ab -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt87mb0LE2Fz6GVxiwUavB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTE2NjE4YjcxZmZjODBlMWMzZjQxZWQwZGZjODlhYjVlOTYzZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ueUl0CZ4buRoXBdyRjvQjqihpu TmI9JMdp4CQWyFnPnT8/VbD9oG7pT/CYaj3rzYKX0OAysX7oWxaUKHPd6RI3TdDx HRh2uN+ckk70xahTvVMG3wPI0Gto7ABJ3FMp0o9NCNcr30zt3iil3PghagW6Rffa vs+M67VA+TrIT0qLuy/a5l7Zcb7JtW2r7tvlYmaiTxMWb4KjvAYtLmsRmOg3+P74 wFNFRV1537/Sy3WpfTwHhUXoU+KmzBbPliW/vZ7xa3eWLSvm0TEtnU1joh8KM9G6 u1vzNmGy7+KHIQrOFFLL1iRD8XajP4ZC8oEClHaMyDzF4I18u8O+4ZxE4wIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFIoWYYtx/8gOHD9B7Q38iatelj/SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzU1Y2Y3 Ny02Mzk0LTQ4MTItOWZiNS0yOTFhYWVkZDU4Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNTVjZjc3 LTYzOTQtNDgxMi05ZmI1LTI5MWFhZWRkNThjYy8xL2loWmhpM0hfeUE0Y1AwSHRE ZnlKcTE2V1A5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLZ7MAwQCuYTsAwQBwnh8AwQBwni+AwQCwnrw MA0EAgACMAcDBQAqDNyAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsoTANBgkq hkiG9w0BAQsFAAOCAQEAf4KTge/VSMvHQ1zDRYhdw4FYml7Oq9gWaYBBndAjGLrU Mx18UdKNhO8hTG0m9yxzcdYnPcocgUCa0zFFlAXGarn3mJvFN9HPZh98nBj45Pov n7TY9LxXehxRNhi++vw9WJuJj9COcSosql60jj+ZnULqrEeS+MOdujNjY88LQ7Cy usXxUgDrnoa8vc+5Cru7kAXBxzQE33AjKT+n7BM3WaVH70QGbRIqnYFz3VtzWpbk w/TKwOkAViDD1kPH7HnpIe4+V9Ap9kQ0H9Lx4TIPKWsjllknZuW4+5/NtNXxf0j7 vbzIrdbmJ5+wKVTXt7nnCt5z0EmpY8RM2GDp477iqw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:54 2026 by rpki-client