This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer (raw, json) Hash identifier: tAhV5XZkbhpHVfXF36fJ0WNzTt9vdWXMqDqkID9Ggvk= Subject key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE44DAC75FA9913DAA2FC36F1010FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208410 IP: 212.102.123.0/24 IP: 2a12:8bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:44:da:c7:5f:a9:91:3d:aa:2f:c3:6f:10:10:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:4f:26:08:d1:dd:4a:92:a2:1c:d1:2f:9f: 18:f1:d6:a3:89:da:c4:fc:69:30:02:f1:c8:8d:d9: 01:d7:b7:8d:cd:ed:2e:a7:57:c5:16:b6:a4:85:3b: 58:d0:5f:c2:e3:5f:4d:9e:39:f9:d5:30:b1:c3:89: b4:7f:c5:20:6f:ed:4f:06:26:2b:7c:77:f4:f0:91: 81:b4:27:46:5b:ab:c6:47:fe:b3:ef:ae:fd:6b:9e: 70:61:9b:df:35:4e:bc:ca:04:af:8a:bc:32:1c:68: 55:71:df:73:7f:86:6c:2a:d8:f5:f7:aa:09:ab:ec: e5:74:72:29:43:9e:19:8d:f2:30:7e:ed:d1:73:74: f2:7a:e2:5f:18:b7:c0:42:d8:24:69:93:bb:d5:f2: c4:9d:c5:0e:40:08:07:f5:aa:73:49:d3:5c:ab:9a: 82:d9:4c:0a:a6:fb:32:db:dc:22:c0:d3:79:b6:fd: 3f:9e:58:e6:d0:99:2a:0a:d1:62:08:8e:df:0b:d9: 0e:95:64:40:a6:52:fd:f1:6b:c3:ff:ef:6c:f9:cf: db:49:8b:9f:d3:a7:5d:8f:d9:52:a0:04:70:72:79: b7:d3:5d:55:89:24:bc:ea:1b:de:9d:cf:fb:e9:67: b6:a6:81:b4:76:e3:43:b4:0d:ad:5d:50:d4:13:0f: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.123.0/24 IPv6: 2a12:8bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208410 Signature Algorithm: sha256WithRSAEncryption 1c:26:de:3b:04:3d:dd:5a:8f:ff:18:3d:c2:41:85:0e:29:db: fd:6e:05:a5:6c:ec:9b:56:00:b7:0c:1b:21:9d:56:10:52:11: 2e:3b:ff:71:1f:9f:99:f0:93:7c:81:1e:49:c7:57:f8:32:9f: f0:a0:53:86:4e:ea:c5:b9:1a:20:28:11:75:ad:59:ae:c1:2a: 4f:c5:a0:c6:81:28:b2:cc:79:64:e5:a7:17:d3:51:83:d4:e9: e3:ef:f9:b2:83:8f:34:16:64:a1:34:e4:95:28:fa:e4:61:e4: 01:36:ae:85:69:3f:7a:a0:ed:4c:e3:78:0d:12:48:5c:66:cc: 1d:76:7a:b5:e3:d7:5e:56:53:c0:3b:91:9d:69:80:54:ea:32: 87:e7:14:6e:95:5a:b6:75:f6:9a:1d:ba:cf:88:f8:b5:24:27: da:a0:16:3d:ec:e1:dd:b6:bc:e7:4d:a2:30:d1:68:ec:b2:53: ae:09:42:dc:2a:5e:6d:57:07:e5:df:2d:a1:4c:03:0e:75:80: 8c:44:da:d4:4f:92:40:f7:99:4f:51:27:75:57:ac:77:8f:15: 28:2c:93:7a:92:d5:67:b8:7d:83:17:12:82:ba:6f:cb:d3:95: 5a:fd:8e:21:a0:3c:0f:bf:bd:d6:ca:76:b5:e6:ed:17:b3:68: 16:ca:10:89 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87kTax1+pkT2qL8NvEBD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFlZGY1MjZiMWNhNWZmMGU2ODJmZjQ4YWVjZTEyMWQyN2JjMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARPJgjR3UqSohzRL58Y8dajidrE /GkwAvHIjdkB17eNze0up1fFFrakhTtY0F/C419Nnjn51TCxw4m0f8Ugb+1PBiYr fHf08JGBtCdGW6vGR/6z7679a55wYZvfNU68ygSvirwyHGhVcd9zf4ZsKtj196oJ q+zldHIpQ54ZjfIwfu3Rc3TyeuJfGLfAQtgkaZO71fLEncUOQAgH9apzSdNcq5qC 2UwKpvsy29wiwNN5tv0/nljm0JkqCtFiCI7fC9kOlWRAplL98WvD/+9s+c/bSYuf 06ddj9lSoARwcnm3011ViSS86hvenc/76We2poG0duNDtA2tXVDUEw/Q2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIse31JrHKX/Dmgv9Irs4SHSe8DDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2NiNWFi Yi1iM2Y3LTRkNDAtYWQzNi0yNTExNjhlZGQzZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvY2I1YWJi LWIzZjctNGQ0MC1hZDM2LTI1MTE2OGVkZDNlNC8xL2l4N2ZVbXNjcGY4T2FDXzBp dXpoSWRKN3dNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1GZ7MA0EAgACMAcDBQMqEovAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuGjANBgkqhkiG9w0BAQsFAAOCAQEAHCbeOwQ93VqP /xg9wkGFDinb/W4FpWzsm1YAtwwbIZ1WEFIRLjv/cR+fmfCTfIEeScdX+DKf8KBT hk7qxbkaICgRda1ZrsEqT8WgxoEossx5ZOWnF9NRg9Tp4+/5soOPNBZkoTTklSj6 5GHkATauhWk/eqDtTON4DRJIXGbMHXZ6tePXXlZTwDuRnWmAVOoyh+cUbpVatnX2 mh26z4j4tSQn2qAWPezh3ba8502iMNFo7LJTrglC3CpebVcH5d8toUwDDnWAjETa 1E+SQPeZT1EndVesd48VKCyTepLVZ7h9gxcSgrpvy9OVWv2OIaA8D7+91sp2tebt F7NoFsoQiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:54:30 2026 by rpki-client