This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer File: inQVrmNNYTFZy9LOdKwmGn1axNQ.cer (raw, json) Hash identifier: d0CXvRTrDs4Tv88qblwo6bgCU/6M4iMPCJxjj24ALIw= Subject key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11101847E37C1F7DFDFD0AA13EF9D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.131.179.0 -- 37.131.183.255 IP: 185.212.52.0/22 IP: 2a0b:72c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:10:18:47:e3:7c:1f:7d:fd:fd:0a:a1:3e:f9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:b0:7b:0b:5d:7f:ef:88:60:42:d5:a8:41: 3c:c7:13:15:65:95:b7:cb:95:c0:be:c0:0c:86:79: d6:ea:a3:35:f3:94:a8:4d:6a:f5:12:24:3e:1d:0f: 7b:8a:04:4b:d3:c0:4a:28:ac:c8:dc:82:a3:1e:ee: 66:09:24:b9:7b:f4:be:68:e8:57:32:d0:63:46:84: 9b:67:9a:67:d0:6d:a0:e7:8b:43:bc:c9:01:1b:09: 4f:b8:f5:27:37:d5:23:75:7f:52:56:70:11:07:e6: 97:50:10:77:5b:e1:b4:be:60:c1:5d:46:fd:29:bf: 32:f0:be:00:10:f7:f7:fe:ae:81:18:a3:ae:4b:dd: 8d:ec:0a:57:97:ca:89:e8:e4:9c:21:11:a9:3d:25: 2b:bd:74:a1:c6:d6:ca:8d:cc:c9:cc:22:d0:b9:51: 66:2a:fe:05:ce:08:54:56:19:97:f1:89:ae:62:d2: fc:6a:1e:b1:a7:fa:cb:30:13:c4:79:d3:bf:11:ac: 08:7a:16:0e:7b:72:7f:2e:f7:55:34:71:2d:79:6f: ac:d1:a7:16:fd:22:bc:6b:43:53:58:75:72:ec:fc: 3c:ee:d5:0d:cf:fd:bf:57:42:0c:7a:96:87:13:25: f8:0a:fe:3d:66:da:73:70:f8:27:e2:2b:50:73:91: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.131.179.0-37.131.183.255 185.212.52.0/22 IPv6: 2a0b:72c0::/32 Signature Algorithm: sha256WithRSAEncryption b1:0e:f3:fe:55:02:df:0d:7e:5e:69:79:70:d9:6c:b4:39:cb: cc:be:b8:9b:e6:df:61:44:05:39:c4:39:15:69:10:c6:f6:ec: fe:d1:a5:4d:93:6c:8d:43:03:ce:55:45:32:81:ae:cd:e9:50: 83:aa:76:c1:ed:fc:35:9d:97:dc:e1:23:c7:75:5a:80:ec:3b: 92:18:17:43:21:48:55:f5:a2:be:4a:5f:9d:fb:3c:42:ce:eb: 7f:a3:b6:73:ac:98:83:37:0f:89:2a:93:4d:9b:04:01:75:62: 36:06:df:27:7c:b6:3f:36:11:49:95:ee:1e:73:6a:4a:fd:76: 19:6d:a7:26:ca:ee:55:e1:f9:cd:08:bf:ee:0c:b8:a2:49:ab: a5:6f:e5:d3:51:1b:93:cc:ba:34:e8:63:8e:b1:b7:25:45:0b: 8a:cf:37:90:26:76:4d:8c:e5:2b:da:85:1b:9b:aa:6d:17:c4: 9a:1b:cf:99:46:72:e4:55:b7:2a:35:e0:9d:61:82:92:36:9e: 40:6f:3d:25:92:1f:c2:06:e1:6e:78:2e:5f:6b:de:dd:a6:6a: 9c:5f:41:87:4e:93:d7:df:26:96:6d:50:56:1c:85:50:61:27: 59:d8:ae:c7:f2:4f:ad:ff:ee:60:2c:27:6f:45:1a:59:24:a4: b4:aa:d0:2a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8ERAYR+N8H339/QqhPvnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc0MTVhZTYzNGQ2MTMxNTljYmQyY2U3NGFjMjYxYTdkNWFjNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik2wewtdf++IYELVqEE8xxMVZZW3 y5XAvsAMhnnW6qM185SoTWr1EiQ+HQ97igRL08BKKKzI3IKjHu5mCSS5e/S+aOhX MtBjRoSbZ5pn0G2g54tDvMkBGwlPuPUnN9UjdX9SVnARB+aXUBB3W+G0vmDBXUb9 Kb8y8L4AEPf3/q6BGKOuS92N7ApXl8qJ6OScIRGpPSUrvXShxtbKjczJzCLQuVFm Kv4FzghUVhmX8YmuYtL8ah6xp/rLMBPEedO/EawIehYOe3J/LvdVNHEteW+s0acW /SK8a0NTWHVy7Pw87tUNz/2/V0IMepaHEyX4Cv49ZtpzcPgn4itQc5FrgwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFIp0Fa5jTWExWcvSznSsJhp9WsTUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzdkYmZl Ny0zNjE0LTQ1NmUtYmY0Yy1lZjdmNTY4NDI1NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvN2RiZmU3 LTM2MTQtNDU2ZS1iZjRjLWVmN2Y1Njg0MjU0Ni8xL2luUVZybU5OWVRGWnk5TE9k S3dtR24xYXhOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAAlg7MDBAMlg7ADBAK51DQwDQQCAAIwBwMF ACoLcsAwDQYJKoZIhvcNAQELBQADggEBALEO8/5VAt8Nfl5peXDZbLQ5y8y+uJvm 32FEBTnEORVpEMb27P7RpU2TbI1DA85VRTKBrs3pUIOqdsHt/DWdl9zhI8d1WoDs O5IYF0MhSFX1or5KX537PELO63+jtnOsmIM3D4kqk02bBAF1YjYG3yd8tj82EUmV 7h5zakr9dhltpybK7lXh+c0Iv+4MuKJJq6Vv5dNRG5PMujToY46xtyVFC4rPN5Am dk2M5SvahRubqm0XxJobz5lGcuRVtyo14J1hgpI2nkBvPSWSH8IG4W54Ll9r3t2m apxfQYdOk9ffJpZtUFYchVBhJ1nYrsfyT63/7mAsJ29FGlkkpLSq0Co= -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:09 2026 by rpki-client