This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer File: 1-iWi8osetikWERKHCUKl7RgbUZ8.cer (raw, json) Hash identifier: VXU+E+ZcKoPD9o70nUv4BUD4BQYD1Z6nastOw36ceSc= Subject key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8D370CDE3334074D96E0BD0540426157 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 08:12:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.221.26.0/23 IP: 91.244.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:37:0c:de:33:34:07:4d:96:e0:bd:05:40:42:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 08:12:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa25a2f28b1eb629161112870942a5ed181b519f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:69:01:4d:0f:45:31:fa:db:82:26:36:cf:58: 5d:32:a5:4e:63:28:98:05:8a:db:ad:dd:aa:f8:d4: 0b:b3:af:28:c5:45:f8:0b:a3:f0:46:1f:7e:db:c5: ac:d8:ef:b0:fa:d6:12:d6:8b:9e:1b:cd:2a:38:54: 5d:eb:95:68:a4:5c:e9:20:85:5b:d5:9c:a4:05:0f: 85:15:5d:aa:78:9a:f0:7d:d9:3a:52:80:f9:75:53: ed:b1:7e:72:d7:d7:a9:01:9a:45:59:f9:fe:c7:c6: 4d:76:84:dd:a3:93:d8:a2:df:a0:27:d9:75:2c:ab: a7:d4:0a:89:1b:2c:d3:8d:c1:e0:0b:6c:33:89:9a: 2c:04:7e:7c:93:0a:36:24:dd:88:b2:5f:89:d9:3d: cd:20:a7:f0:42:8b:bb:b7:20:81:f2:d3:b3:42:69: 3c:2f:eb:1d:91:c7:70:31:15:a0:6d:b5:bc:b3:f1: 03:db:fc:a9:d5:8d:ee:95:89:a2:11:cb:3d:b1:d0: 39:6a:77:c2:c4:d9:5f:60:a2:27:3b:46:5e:c8:56: 7a:1c:0f:6d:33:ce:e0:11:82:cf:0c:5f:41:f6:ae: 04:11:d2:7a:ae:94:9d:3b:8f:9f:ff:b3:d0:67:9e: dd:bb:b3:6a:6c:6a:ca:c7:f7:00:4a:f6:6e:ce:bc: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.26.0/23 91.244.248.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:02:36:65:e1:97:c0:ae:5f:a6:61:d6:69:d3:49:60:da:4d: b0:bc:21:e2:7e:61:3b:c1:7e:a2:f7:1c:c4:81:13:b4:38:dc: 56:69:55:84:f9:92:1c:27:97:92:40:7b:0f:20:37:63:3f:a3: ba:1a:9c:19:a7:83:61:88:c7:cf:1d:4f:4b:2f:d2:21:c6:52: 78:f6:04:5b:fa:76:26:22:b4:7a:f8:e1:72:75:a1:9b:bc:ef: 74:ee:c5:a8:f8:e9:3b:9e:20:50:fd:a5:70:98:4a:07:63:9c: 29:0c:bf:b1:c9:55:49:60:15:68:d9:43:2f:05:8e:cd:fd:de: 8b:3e:d7:96:3e:ed:75:aa:1f:30:22:39:a3:73:14:10:41:43: 93:71:5d:73:5e:3d:1e:36:c6:88:35:af:a2:76:fd:ae:78:12: 3c:fb:e5:65:ed:9e:e6:4f:7e:90:a9:8a:f4:4c:6c:32:b8:6f: 08:b0:0c:47:85:63:f2:37:12:e6:4f:8e:e4:4a:43:5e:ab:6f: 06:c3:ff:93:ba:41:8f:1d:2f:d0:52:1d:e1:a2:fa:7b:4a:51: 34:e3:72:b8:c4:66:cc:76:2a:7a:b4:f6:f9:1d:d2:eb:d9:66: 73:49:eb:11:16:fe:78:74:b5:07:d0:9e:80:60:5e:ed:e1:2f: bb:b5:bc:18 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZuNNwzeMzQHTZbgvQVAQmFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MDgxMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTI1YTJmMjhiMWViNjI5MTYxMTEyODcwOTQyYTVlZDE4MWI1MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWkBTQ9FMfrbgiY2z1hdMqVOYyiY BYrbrd2q+NQLs68oxUX4C6PwRh9+28Ws2O+w+tYS1oueG80qOFRd65VopFzpIIVb 1ZykBQ+FFV2qeJrwfdk6UoD5dVPtsX5y19epAZpFWfn+x8ZNdoTdo5PYot+gJ9l1 LKun1AqJGyzTjcHgC2wziZosBH58kwo2JN2Isl+J2T3NIKfwQou7tyCB8tOzQmk8 L+sdkcdwMRWgbbW8s/ED2/yp1Y3ulYmiEcs9sdA5anfCxNlfYKInO0ZeyFZ6HA9t M87gEYLPDF9B9q4EEdJ6rpSdO4+f/7PQZ57du7NqbGrKx/cASvZuzrzrCwIDAQAB o4ICizCCAocwHQYDVR0OBBYEFPolovKLHrYpFhEShwlCpe0YG1GfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzY0NDQz ZS0wM2Y4LTQzNzUtOTQxYy1lMWQxOTVhYzM1ZDIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNl LTAzZjgtNDM3NS05NDFjLWUxZDE5NWFjMzVkMi8xLzEtaVdpOG9zZXRpa1dFUktI Q1VLbDdSZ2JVWjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAVvdGgMEAlv0+DANBgkqhkiG9w0BAQsFAAOC AQEATgI2ZeGXwK5fpmHWadNJYNpNsLwh4n5hO8F+ovccxIETtDjcVmlVhPmSHCeX kkB7DyA3Yz+juhqcGaeDYYjHzx1PSy/SIcZSePYEW/p2JiK0evjhcnWhm7zvdO7F qPjpO54gUP2lcJhKB2OcKQy/sclVSWAVaNlDLwWOzf3eiz7Xlj7tdaofMCI5o3MU EEFDk3Fdc149HjbGiDWvonb9rngSPPvlZe2e5k9+kKmK9ExsMrhvCLAMR4Vj8jcS 5k+O5EpDXqtvBsP/k7pBjx0v0FId4aL6e0pRNONyuMRmzHYqerT2+R3S69lmc0nr ERb+eHS1B9CegGBe7eEvu7W8GA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:27 2026 by rpki-client