This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer File: io0ZrTHISnSFawprPMEA5HorKqw.cer (raw, json) Hash identifier: jQrnMvpehruw9eEvyOQ8K6pT/o0hZcxseAP5zaj028A= Subject key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36A96A25CF15FD89C9FC0CF2A4AC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.163.64.0/22 IP: 2a0a:7400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6a:96:a2:5c:f1:5f:d8:9c:9f:c0:cf:2a:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:7b:28:37:14:3f:e7:5b:50:a3:f8:e3:c3: cd:d3:3c:a5:96:a1:8d:35:f7:f8:5b:6e:bc:99:ad: df:19:e0:e0:7b:13:a6:ea:e2:c7:20:fe:8d:fe:9f: 02:f6:e9:f7:79:05:cb:1a:1c:c8:3b:af:8a:d3:de: 2e:56:bf:8d:b5:d0:13:64:44:2a:2c:8d:39:e6:23: 53:e0:02:b0:86:c2:b7:e6:6d:63:a4:d8:da:14:06: 77:71:1e:97:2e:dd:f2:4e:1c:9f:ec:a2:a2:8f:ed: 25:a6:c3:07:ca:c0:be:ea:cc:ce:e4:1d:8f:96:27: 9e:c1:14:17:7b:95:7a:03:31:98:84:d5:cd:30:e0: 5f:bd:d9:fe:cd:49:e1:fd:d2:72:fa:70:d3:68:e7: 95:cd:79:6c:e4:d6:db:ba:59:17:57:21:fa:48:3c: dd:c5:29:56:1a:6c:6b:58:1f:af:d5:5c:80:74:dd: 62:c5:64:ac:95:1d:1c:4b:6a:6a:62:8a:70:69:dd: aa:ac:9d:4f:c8:aa:5e:39:82:41:ff:71:d8:3d:a2: b6:77:19:af:29:b8:57:e8:ce:be:5d:65:9e:7f:86: aa:2e:3d:e8:43:5f:ef:bf:0b:46:b8:ba:d8:ec:41: 54:6b:83:00:d3:ca:47:21:63:8c:fa:3d:7a:f9:e6: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.64.0/22 IPv6: 2a0a:7400::/29 Signature Algorithm: sha256WithRSAEncryption 84:45:4a:7c:cd:53:ec:46:d3:3b:16:6e:e2:99:36:38:ec:55: 6f:84:19:74:d5:7e:2d:10:69:27:e5:dc:03:6e:1b:04:2a:da: f5:dc:03:cc:46:73:69:16:f5:c9:a4:d4:1c:0f:8e:e1:5d:73: a4:f6:98:75:95:b6:33:d8:26:38:25:ec:ff:a6:af:52:0f:ac: 18:d1:9e:6f:3c:38:49:ba:62:a7:70:08:da:ad:24:32:9a:9a: 56:0f:d5:b9:05:aa:26:65:8e:d7:fc:f0:9e:a8:d9:ef:f9:bd: eb:e6:0a:a7:e8:4f:fc:0f:9f:9d:61:f3:e2:91:53:b5:48:9a: 9a:2d:35:81:0c:62:85:08:97:89:14:45:17:3c:51:40:03:b4: 74:3a:1a:c3:93:ef:1d:66:26:4a:24:a0:eb:1d:87:b3:82:a0: b0:f9:2f:eb:3b:a8:c0:2c:c2:af:94:ff:45:5e:50:4c:15:eb: 10:d9:f2:a2:e2:e4:b5:fe:af:08:7a:c2:f5:e3:4d:42:8c:b9: d4:2e:12:5e:0e:27:c9:97:2e:fc:84:d0:13:d3:5a:63:6d:0f: 0a:81:8b:46:21:75:72:f9:61:06:f4:04:0f:35:d0:16:0a:64: f9:58:e2:aa:9a:a0:0f:2a:6a:39:9f:35:d1:70:03:61:07:48: 30:cc:a9:04 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4o2qWolzxX9icn8DPKkrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThkMTlhZDMxYzg0YTc0ODU2YjBhNmIzY2MxMDBlNDdhMmIyYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqV7KDcUP+dbUKP448PN0zyllqGN Nff4W268ma3fGeDgexOm6uLHIP6N/p8C9un3eQXLGhzIO6+K094uVr+NtdATZEQq LI055iNT4AKwhsK35m1jpNjaFAZ3cR6XLt3yThyf7KKij+0lpsMHysC+6szO5B2P lieewRQXe5V6AzGYhNXNMOBfvdn+zUnh/dJy+nDTaOeVzXls5NbbulkXVyH6SDzd xSlWGmxrWB+v1VyAdN1ixWSslR0cS2pqYopwad2qrJ1PyKpeOYJB/3HYPaK2dxmv KbhX6M6+XWWef4aqLj3oQ1/vvwtGuLrY7EFUa4MA08pHIWOM+j16+eZyawIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIqNGa0xyEp0hWsKazzBAOR6KyqsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2ZmNjNh OC05NzRjLTRjY2MtOGNkOC0yNDAyMzQwM2JiMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZmY2M2E4 LTk3NGMtNGNjYy04Y2Q4LTI0MDIzNDAzYmIwYy8xL2lvMFpyVEhJU25TRmF3cHJQ TUVBNUhvcktxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaNAMA0EAgACMAcDBQMqCnQAMA0GCSqGSIb3 DQEBCwUAA4IBAQCERUp8zVPsRtM7Fm7imTY47FVvhBl01X4tEGkn5dwDbhsEKtr1 3APMRnNpFvXJpNQcD47hXXOk9ph1lbYz2CY4Jez/pq9SD6wY0Z5vPDhJumKncAja rSQymppWD9W5BaomZY7X/PCeqNnv+b3r5gqn6E/8D5+dYfPikVO1SJqaLTWBDGKF CJeJFEUXPFFAA7R0OhrDk+8dZiZKJKDrHYezgqCw+S/rO6jALMKvlP9FXlBMFesQ 2fKi4uS1/q8IesL1401CjLnULhJeDifJly78hNAT01pjbQ8KgYtGIXVy+WEG9AQP NdAWCmT5WOKqmqAPKmo5nzXRcANhB0gwzKkE -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:40 2026 by rpki-client