This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer File: IZUnwiTwCiiy9MtOExLXSNXKUWk.cer (raw, json) Hash identifier: d5Lw1Eo6ewEZMamhGBiVDerTUElnyKn1a2xR9dDSQMo= Subject key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB29F8737AF2AA2DB203600760C725 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208092 IP: 193.9.156.0/23 IP: 193.16.40.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:29:f8:73:7a:f2:aa:2d:b2:03:60:07:60:c7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:a0:af:37:7f:5b:5b:29:55:65:34:51:aa: cc:91:e8:35:9c:be:a1:38:ca:90:84:db:03:41:39: 60:ff:f6:15:f9:cd:74:14:93:71:b8:d6:51:f6:21: 03:7f:60:98:e6:10:f5:94:40:e4:33:3e:20:19:52: e9:78:55:4b:d5:b9:dc:4e:5b:51:64:02:9b:a3:1c: aa:0b:3c:0a:90:bf:94:1a:c2:ba:ef:b7:2b:57:bd: c9:f1:cf:95:54:40:71:82:54:14:06:cf:97:46:4a: fe:ff:a3:61:33:89:bc:44:dc:e5:15:9d:b8:34:ba: 4a:41:fa:10:f0:80:3a:ea:c1:77:fe:f2:07:45:35: ed:e2:17:c6:34:6a:46:83:02:80:85:62:2a:62:6b: e8:52:03:07:f2:ec:31:ef:9c:37:63:d7:40:8f:7a: 89:99:01:92:e2:76:6c:29:33:75:1f:d6:97:db:75: 17:c8:a5:fa:f2:55:98:85:f2:6d:9b:79:e9:d5:3e: c4:56:d7:b5:d4:b4:63:df:7c:61:8d:84:d5:e8:5d: 71:9a:28:96:7b:f3:de:09:9d:da:47:4c:17:24:6b: 74:15:52:ec:81:88:38:aa:ea:78:14:c0:19:63:3b: 54:00:3b:36:bb:15:f8:ec:b7:19:ad:00:a6:b6:43: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.156.0/23 193.16.40.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208092 Signature Algorithm: sha256WithRSAEncryption 70:e2:6a:94:90:ec:38:76:b3:26:31:08:34:3b:e2:31:13:5c: b1:5e:ee:84:14:47:71:26:2a:2d:91:2d:e6:5c:fd:fb:8a:58: b5:62:84:7e:b4:1f:6b:ad:29:3c:65:ec:b3:10:7a:ba:90:33: 54:67:c9:84:17:4c:a3:8a:ba:18:1f:ed:4b:88:6f:ed:9a:41: 30:75:16:eb:20:05:6b:ad:e3:33:a3:24:8e:9f:9a:b8:75:c9: 24:f9:17:33:e0:7a:78:13:39:e1:78:b4:70:ab:25:95:53:9a: 7e:58:68:3a:82:9e:c4:61:73:31:48:33:22:27:2a:58:fc:ca: c3:34:27:21:d5:2b:e5:f0:2e:cc:1e:8f:b8:b8:cf:e6:72:ec: 14:d3:f4:e5:49:52:10:42:4e:cf:dd:77:a3:2e:50:b1:31:c4: fc:8f:4c:87:60:a4:40:a0:df:8f:37:56:89:f6:4a:a9:07:83: 4a:12:ed:bf:e1:48:f0:96:d6:24:6a:c6:98:a8:73:55:bb:78: 79:6c:20:b4:7d:f8:26:6c:47:d1:f7:34:9b:bd:33:33:93:39: 6c:49:12:37:31:a7:3c:a3:bb:f7:51:d2:dd:17:3f:68:86:70: e4:4d:ac:cc:46:c1:dc:77:99:4d:64:82:aa:0a:5c:3c:25:e8: 4a:c9:f5:86 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt26yn4c3ryqi2yA2AHYMclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTk1MjdjMjI0ZjAwYTI4YjJmNGNiNGUxMzEyZDc0OGQ1Y2E1MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDygrzd/W1spVWU0UarMkeg1nL6h OMqQhNsDQTlg//YV+c10FJNxuNZR9iEDf2CY5hD1lEDkMz4gGVLpeFVL1bncTltR ZAKboxyqCzwKkL+UGsK677crV73J8c+VVEBxglQUBs+XRkr+/6NhM4m8RNzlFZ24 NLpKQfoQ8IA66sF3/vIHRTXt4hfGNGpGgwKAhWIqYmvoUgMH8uwx75w3Y9dAj3qJ mQGS4nZsKTN1H9aX23UXyKX68lWYhfJtm3np1T7EVte11LRj33xhjYTV6F1xmiiW e/PeCZ3aR0wXJGt0FVLsgYg4qup4FMAZYztUADs2uxX47LcZrQCmtkODjQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCGVJ8Ik8AoosvTLThMS10jVylFpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzg1NDBk Yi1mOTAxLTQzM2ItODFiYi05N2Q1NWYzOTE1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODU0MGRi LWY5MDEtNDMzYi04MWJiLTk3ZDU1ZjM5MTU2MS8xL0laVW53aVR3Q2lpeTlNdE9F eExYU05YS1VXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwQmcAwQBwRAoMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMs3DANBgkqhkiG9w0BAQsFAAOCAQEAcOJqlJDsOHazJjEINDviMRNc sV7uhBRHcSYqLZEt5lz9+4pYtWKEfrQfa60pPGXssxB6upAzVGfJhBdMo4q6GB/t S4hv7ZpBMHUW6yAFa63jM6Mkjp+auHXJJPkXM+B6eBM54Xi0cKsllVOaflhoOoKe xGFzMUgzIicqWPzKwzQnIdUr5fAuzB6PuLjP5nLsFNP05UlSEEJOz913oy5QsTHE /I9Mh2CkQKDfjzdWifZKqQeDShLtv+FI8JbWJGrGmKhzVbt4eWwgtH34JmxH0fc0 m70zM5M5bEkSNzGnPKO791HS3Rc/aIZw5E2szEbB3HeZTWSCqgpcPCXoSsn1hg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:39 2026 by rpki-client