This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer File: iOZzGonffpNxq6M-sU1y9h45gLk.cer (raw, json) Hash identifier: Woiq5iaZty6LFCevqTz9+pdxunkX6Oc68JYzbGPfezY= Subject key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A06F74715F72BC542D7AD9CB7264B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.134.200.0/21 IP: 5.134.224.0/19 IP: 89.47.80.0/21 IP: 93.113.164.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:06:f7:47:15:f7:2b:c5:42:d7:ad:9c:b7:26:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:71:8c:7d:12:9b:f5:a2:b3:65:2d:22:35: 56:d8:3c:65:e5:c6:23:1e:8e:6d:00:11:b9:83:15: 69:3a:fb:f1:db:cc:f8:bf:13:4a:e1:bf:02:30:c9: ff:17:55:12:1f:24:44:fe:cd:57:0b:f1:76:af:95: 09:dc:b1:42:49:6c:af:c4:76:63:c0:5f:c6:59:b7: 17:a0:b9:7a:ba:31:ea:7d:c6:19:89:0c:1c:42:f7: 7a:43:99:91:53:01:a0:f4:80:b5:e9:ee:28:b3:5c: 81:17:40:4f:19:f5:c7:83:85:36:39:a8:fe:05:eb: d3:b2:f0:03:05:04:2c:55:c3:b3:e6:13:21:cc:4b: 3c:80:ad:82:39:d7:e8:51:1b:a9:2d:23:d2:7a:c9: 92:16:46:ca:11:77:12:dd:4e:58:34:b7:4a:7d:b7: 3b:f0:a1:f3:2e:f7:cd:ba:07:ce:74:96:e2:a3:37: 83:de:ad:83:a2:db:c6:37:af:93:3e:b3:a7:4c:c6: af:c8:84:2e:94:e7:1b:18:be:77:ed:be:df:14:34: a9:f3:ee:38:37:ab:d1:70:60:f1:e7:49:b4:18:d0: 01:fb:2d:e6:c8:7a:7a:66:76:f2:ce:75:a6:aa:23: b3:90:a3:d4:3f:eb:4f:eb:05:73:94:ac:f1:0b:e0: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.200.0/21 5.134.224.0/19 89.47.80.0/21 93.113.164.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:ad:27:04:69:84:aa:94:95:d6:12:fe:67:e0:87:0a:59:33: 90:62:e5:7a:4f:51:61:63:4e:82:6b:f2:49:36:5c:1b:ba:31: f2:ef:c3:f3:25:80:e5:9f:5c:67:e0:69:c9:52:e2:0f:ca:a1: b6:57:8c:77:24:16:d8:0d:dc:6b:e3:47:0b:41:28:b4:5c:00: 57:31:a7:73:32:bc:81:b1:97:64:6f:79:2b:a0:35:e9:dd:71: 70:cd:0b:4b:f0:cf:25:e1:ee:21:fc:96:d8:60:87:8a:76:fb: ba:06:40:89:7f:c5:16:1f:84:76:e4:69:c7:e2:2e:53:db:a4: d8:86:9a:4b:2a:ad:b5:c2:b1:73:9c:eb:12:23:db:cf:59:f4: 1a:68:a0:34:54:e8:02:aa:9c:12:5f:06:ec:26:88:c3:88:ac: 14:69:b8:6a:ed:a8:a2:9b:04:9f:44:a0:23:ba:55:f3:92:ee: c1:45:bf:91:f0:e2:d1:da:e1:f6:32:29:35:f1:dc:eb:27:ba: c1:60:97:5f:c3:e5:09:71:96:19:dd:dc:9c:0c:d3:40:e4:0d: 03:33:0a:e0:a6:94:25:64:07:33:f0:b9:79:1b:46:1e:5a:60: bb:cc:50:e1:75:60:35:04:05:53:b8:64:be:47:82:f8:f1:7c: 13:84:9c:2b -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt6Wgb3RxX3K8VC162ctyZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGU2NzMxYTg5ZGY3ZTkzNzFhYmEzM2ViMTRkNzJmNjFlMzk4MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElxjH0Sm/Wis2UtIjVW2Dxl5cYj Ho5tABG5gxVpOvvx28z4vxNK4b8CMMn/F1USHyRE/s1XC/F2r5UJ3LFCSWyvxHZj wF/GWbcXoLl6ujHqfcYZiQwcQvd6Q5mRUwGg9IC16e4os1yBF0BPGfXHg4U2Oaj+ BevTsvADBQQsVcOz5hMhzEs8gK2COdfoURupLSPSesmSFkbKEXcS3U5YNLdKfbc7 8KHzLvfNugfOdJbiozeD3q2DotvGN6+TPrOnTMavyIQulOcbGL537b7fFDSp8+44 N6vRcGDx50m0GNAB+y3myHp6ZnbyznWmqiOzkKPUP+tP6wVzlKzxC+CEiwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFIjmcxqJ336TcaujPrFNcvYeOYC5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzMzNmNi My1mNGY3LTRkOGEtOTVjZS02YmNmNGE0MmFjN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMzM2Y2Iz LWY0ZjctNGQ4YS05NWNlLTZiY2Y0YTQyYWM3ZC8xL2lPWnpHb25mZnBOeHE2TS1z VTF5OWg0NWdMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQDBYbIAwQFBYbgAwQDWS9QAwQCXXGkMA0GCSqG SIb3DQEBCwUAA4IBAQAurScEaYSqlJXWEv5n4IcKWTOQYuV6T1FhY06Ca/JJNlwb ujHy78PzJYDln1xn4GnJUuIPyqG2V4x3JBbYDdxr40cLQSi0XABXMadzMryBsZdk b3kroDXp3XFwzQtL8M8l4e4h/JbYYIeKdvu6BkCJf8UWH4R25GnH4i5T26TYhppL Kq21wrFznOsSI9vPWfQaaKA0VOgCqpwSXwbsJojDiKwUabhq7aiimwSfRKAjulXz ku7BRb+R8OLR2uH2Mik18dzrJ7rBYJdfw+UJcZYZ3dycDNNA5A0DMwrgppQlZAcz 8Ll5G0YeWmC7zFDhdWA1BAVTuGS+R4L48XwThJwr -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:50 2026 by rpki-client