This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer File: izGWcRDKvuxKZreAN-Uqh7K8j10.cer (raw, json) Hash identifier: oaTho+5/eslwcBgRCYfLULj4gV9rQyR2DqVr8N8XXTM= Subject key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC907264808FBBCBDEB4AFE1531CB01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34122 IP: 91.216.117.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:07:26:48:08:fb:bc:bd:eb:4a:fe:15:31:cb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:80:6f:24:99:f8:ef:19:42:66:81:dc:8a: bf:6a:cc:3e:02:4c:42:2a:14:2e:0d:39:2c:cb:1f: 54:8e:ef:95:ea:2a:c7:df:f7:6d:8e:14:4d:7f:41: fc:8c:e4:74:78:79:0f:39:b7:c3:cf:7a:4e:42:3e: 0b:e2:74:49:7e:65:8f:1b:38:b0:db:74:68:30:87: 7b:43:d5:72:05:eb:63:a1:17:b3:66:92:61:e0:e1: c5:d1:51:ad:ae:10:9a:9d:24:6c:e9:c7:82:b3:63: 83:ea:46:68:de:ff:ac:17:f0:2e:b0:96:f5:52:e8: 0b:fa:e9:1e:73:6d:49:15:91:1c:61:23:ed:1e:c9: 11:fa:16:db:19:36:e2:fc:f5:b9:d8:ec:72:da:28: 92:38:58:5b:aa:00:c0:73:39:cb:44:b9:5b:34:0e: 95:24:37:1d:fb:a7:ff:49:7b:15:d5:6b:cc:ae:45: 77:cf:43:52:b3:9f:ca:96:47:4d:0d:2b:af:32:75: 2e:cc:bc:ff:37:a3:a1:0f:f3:cf:d6:11:c3:27:75: c1:95:d5:26:65:46:1e:51:57:f1:96:92:88:44:19: 53:66:0d:94:81:ca:66:07:aa:2f:27:ae:de:db:3d: 0a:41:d2:3f:3e:d7:50:84:85:fd:07:f8:8d:dc:9d: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34122 Signature Algorithm: sha256WithRSAEncryption 76:e2:82:75:57:22:6b:03:cd:25:3b:f8:8d:65:dc:1f:39:8a: 25:59:f2:70:eb:f6:3b:f0:0b:10:87:2c:85:81:51:17:62:1c: 68:a1:eb:59:5a:1c:3d:7e:b2:07:7e:a5:ef:26:57:d9:7c:e8: 9c:a4:f8:0a:ad:03:83:9f:0a:03:1f:70:55:ee:a7:7e:8e:54: 2a:e7:e7:38:9d:38:d3:d6:f7:79:07:5c:c7:78:c8:1e:bf:13: 8e:13:08:a3:63:29:5a:a5:bd:ec:01:08:d3:36:17:8b:19:15: 77:ff:3b:49:42:1b:fb:d9:a8:eb:26:7a:8c:91:d7:69:d7:81: ac:6e:f1:c1:78:4b:c1:bf:d5:9b:e2:87:85:78:29:fd:52:ce: 7d:0b:80:82:1a:89:ea:49:82:51:dc:21:02:eb:8f:d9:3d:29: d8:a3:66:ec:63:11:92:fc:26:60:51:bd:b5:db:6c:7d:84:ae: 3c:53:a8:1d:94:cd:b5:ae:37:63:df:5c:13:e5:9c:eb:5b:ab: b5:9e:51:e4:d3:c0:ee:5f:19:9b:11:7a:8a:f4:09:a1:5b:ef: 70:37:58:05:b3:6d:c6:68:63:97:24:8c:df:6e:b8:a4:14:8b: 09:26:59:5a:33:8b:92:86:ed:04:59:da:57:34:00:07:9c:ff: 98:3d:ce:71 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yQcmSAj7vL3rSv4VMcsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjMxOTY3MTEwY2FiZWVjNGE2NmI3ODAzN2U1MmE4N2IyYmM4ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyqAbySZ+O8ZQmaB3Iq/asw+AkxC KhQuDTksyx9Uju+V6irH3/dtjhRNf0H8jOR0eHkPObfDz3pOQj4L4nRJfmWPGziw 23RoMId7Q9VyBetjoRezZpJh4OHF0VGtrhCanSRs6ceCs2OD6kZo3v+sF/AusJb1 UugL+ukec21JFZEcYSPtHskR+hbbGTbi/PW52Oxy2iiSOFhbqgDAcznLRLlbNA6V JDcd+6f/SXsV1WvMrkV3z0NSs5/KlkdNDSuvMnUuzLz/N6OhD/PP1hHDJ3XBldUm ZUYeUVfxlpKIRBlTZg2UgcpmB6ovJ67e2z0KQdI/PtdQhIX9B/iN3J1eswIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIsxlnEQyr7sSma3gDflKoeyvI9dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzMxZGYw Ny1kY2I1LTRhNTAtYTcwNC1hMDE3YzM2ODQ2NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMzFkZjA3 LWRjYjUtNGE1MC1hNzA0LWEwMTdjMzY4NDY2ZC8xL2l6R1djUkRLdnV4S1pyZUFO LVVxaDdLOGoxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9h1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCFSjANBgkqhkiG9w0BAQsFAAOCAQEAduKCdVciawPNJTv4jWXcHzmKJVnycOv2 O/ALEIcshYFRF2IcaKHrWVocPX6yB36l7yZX2XzonKT4Cq0Dg58KAx9wVe6nfo5U KufnOJ0409b3eQdcx3jIHr8TjhMIo2MpWqW97AEI0zYXixkVd/87SUIb+9mo6yZ6 jJHXadeBrG7xwXhLwb/Vm+KHhXgp/VLOfQuAghqJ6kmCUdwhAuuP2T0p2KNm7GMR kvwmYFG9tdtsfYSuPFOoHZTNta43Y99cE+Wc61urtZ5R5NPA7l8ZmxF6ivQJoVvv cDdYBbNtxmhjlySM3264pBSLCSZZWjOLkobtBFnaVzQAB5z/mD3OcQ== -----END CERTIFICATE-----Generated at Mon Jan 12 10:30:55 2026 by rpki-client