This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer (raw, json) Hash identifier: TQApx5U39efmq/BBoGuzF9YjWiqvgk+RUAOVu822dtE= Subject key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1575670EE67C3FF956C7C1354F5AF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.135.40.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:75:67:0e:e6:7c:3f:f9:56:c7:c1:35:4f:5a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:85:70:82:c1:20:e0:50:52:31:c8:61:89: da:a1:89:dc:5e:9a:5a:4b:a0:71:f9:f9:db:8f:67: 16:11:bb:60:13:59:0c:96:70:59:f1:04:04:fa:67: 00:bc:6a:19:be:a6:ca:58:67:bb:a3:5b:4c:01:b9: 37:ca:4f:ca:fe:5a:f9:89:01:3d:05:72:ba:58:3f: af:19:c2:59:be:1c:df:a5:7f:a2:6a:60:ec:85:06: 25:43:cb:6c:91:a4:c3:04:69:c5:f8:ed:7a:aa:b3: 5f:1d:43:93:3f:ef:ec:63:83:f8:6b:67:de:eb:e7: af:c1:1a:34:9a:a7:2b:e0:e3:6d:d4:4a:a3:9d:f0: ee:e2:70:9e:e8:a1:1d:97:d1:f8:27:ce:a2:9a:2e: 07:35:13:e2:61:95:c2:ec:1a:d2:07:b2:00:2e:26: d2:32:37:99:ed:35:8f:a4:25:96:62:5a:6c:9f:30: ba:51:72:e5:47:6e:4e:00:85:69:1b:31:fd:48:84: fd:ef:75:38:8b:cf:c1:2c:58:3a:1d:d0:d1:cd:6f: ed:08:fc:41:bc:58:bd:cd:9d:6f:b7:37:3d:0a:68: 93:b8:a1:9f:1e:61:c0:20:48:0f:f0:3c:df:b8:5b: 74:c6:da:66:72:57:db:82:56:5e:38:ed:13:36:36: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.40.0/21 Signature Algorithm: sha256WithRSAEncryption 52:d2:69:c9:e8:bb:24:bc:c6:8b:8f:55:da:ca:86:a4:0a:51: ab:7e:7d:97:f2:6a:18:f7:5a:21:61:a5:87:f3:60:31:cd:fd: 69:6b:21:d3:d0:36:88:d5:1e:8c:99:e0:93:67:4e:47:22:69: 4a:b0:82:ae:93:6c:2d:55:6a:07:bc:48:e1:85:72:8b:67:b5: 7c:eb:c6:dc:cf:6e:86:fc:bd:1a:0f:71:e8:1b:f9:96:3a:a7: f8:71:83:10:2a:48:97:3d:55:b3:32:97:a9:fc:30:95:c1:9f: f9:78:e1:09:91:a3:a5:a3:91:f2:86:c0:37:59:e9:ce:13:9d: d4:a8:64:06:2c:23:6f:b0:c7:55:18:1b:f2:6d:3b:d2:a5:09: 6d:c8:ca:cc:e8:bb:68:79:a7:6d:95:57:e4:29:ae:de:3e:9f: 96:76:a6:63:bc:b1:d1:08:db:f4:a9:7b:65:0e:ce:58:8b:05: 93:08:be:4f:e6:7a:a8:3f:72:57:d5:51:47:60:45:61:c5:aa: e8:00:bd:33:ab:c2:a6:f2:73:63:7f:c3:39:fa:fc:b0:bc:a5: b3:5c:b4:8f:36:af:4f:69:02:db:49:29:10:19:40:11:56:8c: a1:7c:e0:1f:40:ce:d8:07:c4:a6:27:2d:79:4a:81:ed:cc:05: 7f:88:8a:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FXVnDuZ8P/lWx8E1T1r0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWFkOWMwY2U1YmEzOTA1YjQxOTcwYTA0ZTUxOTc2MDc2YzY3ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplaFcILBIOBQUjHIYYnaoYncXppa S6Bx+fnbj2cWEbtgE1kMlnBZ8QQE+mcAvGoZvqbKWGe7o1tMAbk3yk/K/lr5iQE9 BXK6WD+vGcJZvhzfpX+iamDshQYlQ8tskaTDBGnF+O16qrNfHUOTP+/sY4P4a2fe 6+evwRo0mqcr4ONt1EqjnfDu4nCe6KEdl9H4J86imi4HNRPiYZXC7BrSB7IALibS MjeZ7TWPpCWWYlpsnzC6UXLlR25OAIVpGzH9SIT973U4i8/BLFg6HdDRzW/tCPxB vFi9zZ1vtzc9CmiTuKGfHmHAIEgP8DzfuFt0xtpmclfbglZeOO0TNjaTPwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIqtnAzlujkFtBlwoE5Rl2B2xn4AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2U0NDVl NC0yNmJkLTQ4YzktODNkYi03YTBlY2U5YzBhZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZTQ0NWU0 LTI2YmQtNDhjOS04M2RiLTdhMGVjZTljMGFmOC8xL2lxMmNET1c2T1FXMEdYQ2dU bEdYWUhiR2ZnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0GCSqGSIb3DQEBCwUAA4IBAQBS0mnJ 6LskvMaLj1XayoakClGrfn2X8moY91ohYaWH82Axzf1payHT0DaI1R6MmeCTZ05H ImlKsIKuk2wtVWoHvEjhhXKLZ7V868bcz26G/L0aD3HoG/mWOqf4cYMQKkiXPVWz Mpep/DCVwZ/5eOEJkaOlo5HyhsA3WenOE53UqGQGLCNvsMdVGBvybTvSpQltyMrM 6LtoeadtlVfkKa7ePp+WdqZjvLHRCNv0qXtlDs5YiwWTCL5P5nqoP3JX1VFHYEVh xaroAL0zq8Km8nNjf8M5+vywvKWzXLSPNq9PaQLbSSkQGUARVoyhfOAfQM7YB8Sm Jy15SoHtzAV/iIrz -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:23 2026 by rpki-client