This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer File: igjCi-FVFikLnaUTXlj1X7uA_7Q.cer (raw, json) Hash identifier: Daeyom6tBO6k7A+2sbUonI588SZSN7ypyAin5IxpAHk= Subject key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E5998B249C66AE8BEE07D92D8C83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21449 IP: 160.53.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e5:99:8b:24:9c:66:ae:8b:ee:07:d9:2d:8c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:f6:83:d0:6a:1f:31:b6:72:f0:31:65:3b: d8:be:33:58:b9:c4:09:7a:89:89:99:dc:7d:fb:f5: 82:d3:27:b2:b1:56:46:7f:4a:81:35:a2:cc:60:5f: 0c:75:ef:01:d5:63:45:c3:ea:ef:98:96:47:ca:7e: a1:b8:38:a1:bc:f3:f8:4f:a8:1c:be:37:49:da:23: 56:a7:10:f9:11:93:4f:92:e1:4a:38:f3:54:0d:f8: 42:03:79:8f:aa:26:2d:95:d9:ff:0d:5e:bc:5f:9d: 1f:80:59:eb:8b:63:c1:9c:1d:24:cc:73:e4:ef:96: e7:aa:3b:5e:fb:8f:0d:bd:07:2a:8b:df:21:91:37: 9d:a4:03:e5:c2:e8:19:cf:8a:8f:f2:1f:68:ea:33: 0b:14:51:fa:7a:74:ce:19:22:e2:d9:cf:3c:cc:96: b6:4c:c4:4c:32:8a:d0:63:1d:f5:f4:37:7d:9a:d8: d1:6e:6f:dd:65:0b:16:63:9a:28:1a:de:5a:b2:0b: 1a:b3:bc:1a:d1:eb:f2:fd:df:4c:38:7a:a2:cd:49: d4:79:08:d2:b5:92:ad:7c:79:22:60:67:26:b2:a6: b1:26:ea:9c:35:12:72:cd:18:9c:7c:44:c9:aa:d9: 89:d1:b7:14:40:40:cf:68:4b:a5:6e:a4:9c:4a:f1: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.53.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21449 Signature Algorithm: sha256WithRSAEncryption 2c:84:ed:91:0c:f4:c4:be:80:24:08:50:fc:e6:a8:aa:97:72: 34:a2:5a:bb:9a:7b:b8:95:9c:f6:11:1f:f5:3c:ca:85:13:4a: 78:a8:fc:e9:29:fa:3a:e1:1b:cd:9c:48:40:05:98:59:8b:9c: d4:1c:83:22:3a:a9:22:11:e3:3e:ee:02:8b:9f:2b:b6:0c:ae: 44:ff:c2:94:ab:a3:74:18:a3:e8:58:a1:67:d0:e7:48:b6:bb: 45:6c:24:27:8c:c6:7f:b6:03:64:64:a7:3c:b1:d4:7a:f1:e8: cc:c7:29:45:b0:75:74:03:2d:43:3a:98:82:0d:46:42:fd:3d: 7e:37:e4:8e:af:3d:bd:3e:75:ca:56:03:7a:47:df:2a:af:a6: a2:60:63:72:71:43:0c:5b:0a:12:14:56:f7:68:f9:ad:47:be: c3:54:8d:26:5e:4d:58:e8:b7:8a:06:9c:02:55:ef:9f:87:fa: 1c:43:93:74:05:dd:ad:42:c2:65:4a:10:6b:35:73:ff:53:81: 76:f6:42:20:5e:f1:ad:81:f9:9e:ec:6f:a2:6d:82:37:bf:85: 29:30:2c:9d:e0:a1:92:96:cd:d9:81:30:cb:b0:46:8d:0b:12: 5d:85:36:6b:33:74:7b:d6:8c:60:ce:d9:e7:46:0b:84:72:cc: 24:89:37:fe -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt3xuWZiyScZq6L7gfZLYyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTA4YzI4YmUxNTUxNjI5MGI5ZGE1MTM1ZTU4ZjU1ZmJiODBmZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUb2g9BqHzG2cvAxZTvYvjNYucQJ eomJmdx9+/WC0yeysVZGf0qBNaLMYF8Mde8B1WNFw+rvmJZHyn6huDihvPP4T6gc vjdJ2iNWpxD5EZNPkuFKOPNUDfhCA3mPqiYtldn/DV68X50fgFnri2PBnB0kzHPk 75bnqjte+48NvQcqi98hkTedpAPlwugZz4qP8h9o6jMLFFH6enTOGSLi2c88zJa2 TMRMMorQYx319Dd9mtjRbm/dZQsWY5ooGt5asgsas7wa0evy/d9MOHqizUnUeQjS tZKtfHkiYGcmsqaxJuqcNRJyzRicfETJqtmJ0bcUQEDPaEulbqScSvF3lwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFIoIwovhVRYpC52lE15Y9V+7gP+0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzY3MmFm OC0zMzQ4LTQyMTMtYjQ3Yy0wNjE4YzlhOGNhYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNjcyYWY4 LTMzNDgtNDIxMy1iNDdjLTA2MThjOWE4Y2FjNC8xL2lnakNpLUZWRmlrTG5hVVRY bGoxWDd1QV83US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoDUwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC U8kwDQYJKoZIhvcNAQELBQADggEBACyE7ZEM9MS+gCQIUPzmqKqXcjSiWruae7iV nPYRH/U8yoUTSnio/Okp+jrhG82cSEAFmFmLnNQcgyI6qSIR4z7uAoufK7YMrkT/ wpSro3QYo+hYoWfQ50i2u0VsJCeMxn+2A2Rkpzyx1Hrx6MzHKUWwdXQDLUM6mIIN RkL9PX435I6vPb0+dcpWA3pH3yqvpqJgY3JxQwxbChIUVvdo+a1HvsNUjSZeTVjo t4oGnAJV75+H+hxDk3QF3a1CwmVKEGs1c/9TgXb2QiBe8a2B+Z7sb6Jtgje/hSkw LJ3goZKWzdmBMMuwRo0LEl2FNmszdHvWjGDO2edGC4RyzCSJN/4= -----END CERTIFICATE-----Generated at Mon Jan 12 13:06:01 2026 by rpki-client