This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer (raw, json) Hash identifier: hGuFvgPKyf7D60eeq9D+IqGKJFw/3Q64tTK6WPHSpi0= Subject key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32077C92091AFB1F49E224794403C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25428 IP: 45.138.168.0/22 IP: 91.231.108.0/23 IP: 185.16.240.0/22 IP: 195.26.2.0/23 IP: 2a01:89c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:20:77:c9:20:91:af:b1:f4:9e:22:47:94:40:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7be7a47606ab38391fb21542b5f4061f02a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:88:24:b9:0f:86:61:74:f9:fa:74:27:25: 13:79:5d:8c:30:56:eb:4c:ed:b7:d9:b1:a7:be:95: 04:82:27:d3:1d:de:3b:cc:d7:ac:6d:4d:1c:d2:30: f7:a4:2e:a1:76:2d:21:c3:cc:c6:6e:ed:db:8a:a0: e4:0f:fc:74:00:1f:c0:d1:c0:ea:ba:d5:10:0c:c8: f6:b7:44:96:2a:5c:fa:d7:5f:88:c9:33:f1:00:b9: 52:90:2d:45:a6:e2:25:bf:df:11:3b:06:d2:96:5d: 20:4f:76:70:96:fd:28:e8:1c:1f:d6:e6:63:0f:e8: 49:d2:b1:09:fb:dd:32:c5:6f:65:66:75:0a:d1:de: d1:74:23:8b:c3:c8:79:48:13:ae:f2:cc:b5:12:a0: 38:88:80:4f:34:d5:24:c3:d9:54:54:65:37:da:ae: ef:ab:16:14:6a:0d:6a:68:8b:63:bf:8f:27:2d:0b: cc:f0:d7:08:9c:a3:30:07:b8:3c:3b:b5:86:22:2d: e7:51:5c:8e:f1:4e:2f:66:3b:66:e0:90:85:4f:a9: 52:b5:c4:f9:ed:60:99:92:d4:86:ba:de:66:23:15: 49:77:de:4c:c4:5c:1b:a8:5f:df:15:3e:74:5b:8d: 25:2e:2b:f0:b9:aa:ea:6c:72:3c:17:41:3f:05:45: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.168.0/22 91.231.108.0/23 185.16.240.0/22 195.26.2.0/23 IPv6: 2a01:89c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25428 Signature Algorithm: sha256WithRSAEncryption 1e:b7:4e:51:bd:49:61:05:3b:5f:fb:34:22:62:14:6a:c3:82: 21:4e:43:be:e8:d2:a1:bc:6e:c2:f7:bd:35:4f:b8:89:af:5b: 58:24:d7:53:99:2e:ac:0d:6e:4c:71:2b:e4:7c:2b:a1:c9:82: b5:50:ca:db:4d:87:1c:3c:74:5f:fd:32:db:53:25:12:be:86: 8f:c8:30:e7:37:e8:2b:a5:c4:40:fc:9a:1e:4f:24:18:69:34: 02:d9:16:38:b5:e0:77:a7:d5:49:1b:b8:c2:c9:d1:b5:83:5b: af:26:44:9f:df:15:0e:d2:9b:2f:5f:96:2c:b6:48:62:dd:5a: 3e:c9:4d:1c:b8:ed:fe:28:ac:38:ce:22:67:e4:4f:60:2c:79: d8:fe:1f:c2:e2:5a:af:66:62:76:4e:de:22:bc:fa:60:2a:24: f8:8a:c5:98:8d:28:a2:34:2d:f0:15:e7:4a:ce:32:ce:52:8e: fa:53:05:ae:24:93:c7:22:81:5b:20:e5:da:f5:39:e7:ab:42: 79:12:ad:07:2e:db:1a:8f:2a:79:5a:13:e0:3f:dc:21:5e:42: ca:7b:b8:8d:2e:b1:45:13:c0:4c:21:66:6a:2a:78:37:33:19: f0:f9:70:94:3e:22:97:25:24:62:42:8e:3d:71:01:6b:ef:2b: 8b:22:b8:09 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4oyB3ySCRr7H0niJHlEA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdiZTdhNDc2MDZhYjM4MzkxZmIyMTU0MmI1ZjQwNjFmMDJhODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqWIJLkPhmF0+fp0JyUTeV2MMFbr TO232bGnvpUEgifTHd47zNesbU0c0jD3pC6hdi0hw8zGbu3biqDkD/x0AB/A0cDq utUQDMj2t0SWKlz611+IyTPxALlSkC1FpuIlv98ROwbSll0gT3Zwlv0o6Bwf1uZj D+hJ0rEJ+90yxW9lZnUK0d7RdCOLw8h5SBOu8sy1EqA4iIBPNNUkw9lUVGU32q7v qxYUag1qaItjv48nLQvM8NcInKMwB7g8O7WGIi3nUVyO8U4vZjtm4JCFT6lStcT5 7WCZktSGut5mIxVJd95MxFwbqF/fFT50W40lLivwuarqbHI8F0E/BUVKpwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFIt756R2Bqs4OR+yFUK19AYfAqhSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzI0N2M1 ZC1hMjcyLTQ4MmItOWM4ZS0zN2ZlMzk1ZDQyZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMjQ3YzVk LWEyNzItNDgyYi05YzhlLTM3ZmUzOTVkNDJmMC8xL2kzdm5wSFlHcXpnNUg3SVZR clgwQmg4Q3FGSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLYqoAwQBW+dsAwQCuRDwAwQBwxoCMA0EAgAC MAcDBQAqAYnAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmNUMA0GCSqGSIb3DQEB CwUAA4IBAQAet05RvUlhBTtf+zQiYhRqw4IhTkO+6NKhvG7C9701T7iJr1tYJNdT mS6sDW5McSvkfCuhyYK1UMrbTYccPHRf/TLbUyUSvoaPyDDnN+grpcRA/JoeTyQY aTQC2RY4teB3p9VJG7jCydG1g1uvJkSf3xUO0psvX5Ystkhi3Vo+yU0cuO3+KKw4 ziJn5E9gLHnY/h/C4lqvZmJ2Tt4ivPpgKiT4isWYjSiiNC3wFedKzjLOUo76UwWu JJPHIoFbIOXa9Tnnq0J5Eq0HLtsajyp5WhPgP9whXkLKe7iNLrFFE8BMIWZqKng3 Mxnw+XCUPiKXJSRiQo49cQFr7yuLIrgJ -----END CERTIFICATE-----Generated at Fri Jan 2 17:04:57 2026 by rpki-client