This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer (raw, json) Hash identifier: GHMHY9LCu9nvPA+Ioslcf3trbItmsjzxyIrkP3M5t4Y= Subject key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7ED965FC842058429E9417DDD21D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207809 IP: 46.16.128.0/22 IP: 109.104.152.0/22 IP: 147.78.0.0/22 IP: 185.47.252.0/22 IP: 185.123.100.0/23 IP: 185.126.236.0/22 IP: 185.213.20.0/22 IP: 2a11:840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:d9:65:fc:84:20:58:42:9e:94:17:dd:d2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89056fa9625b6c87404267c6dc219924ac160045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:4e:c8:f3:e5:dc:ef:b9:60:f8:b7:71:a2: 1a:f9:95:26:bc:51:0c:ff:b8:ed:f5:02:1d:5d:d3: be:79:1e:50:73:fc:a9:f1:e7:a5:81:59:f5:14:1a: 13:71:e2:fb:d3:2c:35:5c:4d:33:e7:39:44:c2:23: 60:f7:38:3d:b1:be:68:6f:0f:4c:33:31:9c:02:01: 66:99:68:13:0e:56:2c:7e:20:a9:ca:06:ef:16:5c: 29:8d:be:78:ad:dc:c8:d4:eb:fa:1e:6e:7e:ee:7e: 14:1d:6a:1e:dc:63:53:20:7c:56:7a:e7:c3:63:a9: dc:a0:e6:56:d1:7b:53:5e:d9:ad:4c:52:56:b4:85: da:3e:60:d9:8d:7e:b3:f3:87:27:f7:94:cc:d0:05: 89:de:a7:5c:69:d0:b3:fe:11:61:b2:3c:93:33:10: 4b:c5:cb:1b:a2:e2:2f:d3:92:cb:a1:57:60:40:c6: 20:5f:bc:e4:11:e2:e7:dd:56:87:4c:c5:c8:94:c7: d1:fe:5e:a2:4d:0c:9f:63:ad:45:d6:ce:c5:04:80: 30:d6:61:1d:4a:57:3c:61:66:d4:e0:16:35:7a:f2: 75:ad:ad:82:63:e8:cb:d0:4b:d7:0a:f3:f3:c3:13: f4:55:fc:a7:fb:1f:a8:5b:0f:c9:90:62:cc:50:cc: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.128.0/22 109.104.152.0/22 147.78.0.0/22 185.47.252.0/22 185.123.100.0/23 185.126.236.0/22 185.213.20.0/22 IPv6: 2a11:840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207809 Signature Algorithm: sha256WithRSAEncryption 8d:b0:30:d5:1c:1a:ba:d8:cb:d7:92:2f:8c:f5:c2:40:2e:4b: af:9b:a8:10:38:80:30:70:72:90:87:c8:b4:34:da:b0:4c:10: d9:23:13:dc:24:de:f5:47:79:7a:fd:1d:f4:9c:42:a3:39:ad: 5b:c0:35:21:f2:20:f4:0d:84:b7:af:3b:7f:7e:e5:16:ff:91: 1e:7e:ec:e1:8c:0e:32:cc:92:13:0c:08:da:4c:76:4a:43:9c: 97:a1:db:de:bc:b2:c1:05:98:71:14:cd:2d:c6:78:9c:9f:9a: e1:81:bb:0e:94:46:ea:1a:30:05:5f:b6:26:06:de:c2:b7:15: 44:54:ed:1c:55:38:aa:d5:8f:ab:bb:7f:0d:67:75:52:fb:6b: 8d:62:8e:8b:9f:4a:7b:d1:23:a7:36:7d:da:f9:e0:68:e5:62: 99:50:d2:49:6a:fd:1f:a6:b7:70:fb:19:05:ad:92:2e:9f:d1: b1:39:aa:84:4b:42:a0:72:06:92:b1:d2:a6:04:4e:74:50:88: 59:4e:3f:a8:58:8a:73:c4:f9:ad:8f:ec:be:6b:11:7f:a3:d0: 55:96:76:e4:33:d8:7a:71:43:39:38:6d:78:e6:4b:85:d2:cb: b7:bb:8c:0d:65:3b:ce:70:47:d3:d5:20:e2:9d:b6:97:ed:fb: ed:71:71:72 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt2637ZZfyEIFhCnpQX3dIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTA1NmZhOTYyNWI2Yzg3NDA0MjY3YzZkYzIxOTkyNGFjMTYwMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBOyPPl3O+5YPi3caIa+ZUmvFEM /7jt9QIdXdO+eR5Qc/yp8eelgVn1FBoTceL70yw1XE0z5zlEwiNg9zg9sb5obw9M MzGcAgFmmWgTDlYsfiCpygbvFlwpjb54rdzI1Ov6Hm5+7n4UHWoe3GNTIHxWeufD Y6ncoOZW0XtTXtmtTFJWtIXaPmDZjX6z84cn95TM0AWJ3qdcadCz/hFhsjyTMxBL xcsbouIv05LLoVdgQMYgX7zkEeLn3VaHTMXIlMfR/l6iTQyfY61F1s7FBIAw1mEd Slc8YWbU4BY1evJ1ra2CY+jL0EvXCvPzwxP0Vfyn+x+oWw/JkGLMUMzpBQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFIkFb6liW2yHQEJnxtwhmSSsFgBFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzk5YWUy Zi0zOWNjLTQzZjMtOTQxZC01MTkyMDM3MzM1M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOTlhZTJm LTM5Y2MtNDNmMy05NDFkLTUxOTIwMzczMzUzYy8xL2lRVnZxV0piYklkQVFtZkcz Q0daSkt3V0FFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCLhCAAwQCbWiYAwQCk04AAwQCuS/8AwQBuXtk AwQCuX7sAwQCudUUMA0EAgACMAcDBQMqEQhAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMrwTANBgkqhkiG9w0BAQsFAAOCAQEAjbAw1RwautjL15IvjPXCQC5Lr5uo EDiAMHBykIfItDTasEwQ2SMT3CTe9Ud5ev0d9JxCozmtW8A1IfIg9A2Et687f37l Fv+RHn7s4YwOMsySEwwI2kx2SkOcl6Hb3ryywQWYcRTNLcZ4nJ+a4YG7DpRG6how BV+2JgbewrcVRFTtHFU4qtWPq7t/DWd1UvtrjWKOi59Ke9EjpzZ92vngaOVimVDS SWr9H6a3cPsZBa2SLp/RsTmqhEtCoHIGkrHSpgROdFCIWU4/qFiKc8T5rY/svmsR f6PQVZZ25DPYenFDOThteOZLhdLLt7uMDWU7znBH09Ug4p22l+377XFxcg== -----END CERTIFICATE-----Generated at Thu Jan 1 14:22:55 2026 by rpki-client