This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwQieKfGvGylbuevokosgfPcvvs.cer File: IwQieKfGvGylbuevokosgfPcvvs.cer (raw, json) Hash identifier: SoEBKGKnfYrv7h+UMev5SfxbvXwtBuYK0+gb/Feigk4= Subject key identifier: 23:04:22:78:A7:C6:BC:6C:A5:6E:E7:AF:A2:4A:2C:81:F3:DC:BE:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366A30B32E630044FA80333122082C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/IwQieKfGvGylbuevokosgfPcvvs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202569 IP: 185.160.124.0/22 IP: 2a07:bd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6a:30:b3:2e:63:00:44:fa:80:33:31:22:08:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23042278a7c6bc6ca56ee7afa24a2c81f3dcbefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:27:72:5f:68:f6:39:ef:65:61:43:be:d9: 88:e3:a1:cf:df:03:b1:40:23:67:7d:5a:f0:a8:51: fc:0c:5b:6f:c1:dd:f9:4d:50:8e:d0:07:a9:6c:10: a4:ff:c3:d4:5d:aa:91:6c:fd:b2:52:c0:17:18:3e: c1:db:7d:42:1d:1a:98:05:b2:33:42:3b:63:47:ab: e6:69:c1:46:0b:65:9a:f9:d4:e2:33:be:73:87:15: fe:f0:76:e5:8f:60:8d:a8:63:41:cd:f0:38:44:51: a1:ba:7f:4b:7a:79:25:c0:94:f9:ec:03:8b:cc:42: 33:e4:0e:b9:5a:7a:04:d8:d3:de:29:e2:78:84:5e: 10:78:16:a8:55:a3:51:fb:f6:4a:dd:1d:88:99:0c: 5b:96:14:58:a7:fd:8e:17:0e:b9:4c:ea:7b:d5:49: 8e:af:0f:76:9a:ba:38:8c:39:10:60:e3:6b:3d:15: 96:87:6d:8f:68:ad:6c:54:f7:28:1e:bd:60:19:ad: f2:9e:aa:db:7a:e2:74:12:fc:7f:69:41:e8:63:b0: 1c:1a:2f:25:cb:d8:9d:84:44:3f:19:2a:c5:06:39: a2:a0:5c:2f:00:03:86:e0:ab:4a:3c:4f:ab:f5:80: 80:c5:e5:cd:f7:e9:83:09:c7:0a:85:13:3e:db:f5: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:04:22:78:A7:C6:BC:6C:A5:6E:E7:AF:A2:4A:2C:81:F3:DC:BE:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/IwQieKfGvGylbuevokosgfPcvvs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.124.0/22 IPv6: 2a07:bd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202569 Signature Algorithm: sha256WithRSAEncryption 65:ad:5a:ee:e5:f0:53:a0:34:a9:d3:2d:d6:ca:27:92:2c:a7: be:5b:1d:0c:eb:d3:43:d5:67:2c:1e:2e:82:ce:f8:92:fd:1a: a4:8c:95:d4:d6:56:cb:2b:43:f1:23:44:9c:fd:91:f1:92:55: f6:1d:eb:4d:da:25:99:9c:30:6e:1c:99:ea:ff:e3:ab:73:e1: 5c:bc:25:66:cf:44:8d:e0:d4:eb:a7:e5:e1:77:dd:d0:70:da: 36:9f:a4:1d:e8:4d:88:61:9c:94:7c:a9:75:6c:8a:70:4a:15: d5:a7:fb:db:83:d0:de:48:40:d8:a6:2b:2d:25:a7:a6:e4:41: dd:b7:1d:76:8e:c6:6d:f5:09:ba:a3:82:27:d5:5b:10:7f:c7: 42:eb:9c:49:2c:3b:8a:72:c7:9e:d5:e6:0d:65:c0:e0:d4:e1: 93:cd:f3:33:49:43:5d:2e:76:21:bc:22:5e:0b:9d:b3:f2:32: d4:8e:c2:8a:48:e7:2b:23:d7:fd:87:3d:aa:69:21:e0:9b:8f: a4:cf:6b:a5:64:b4:57:40:02:9a:ab:c1:ae:9e:0f:94:09:79: 57:93:c6:18:3a:4b:b7:6d:6b:4f:88:88:bd:62:87:f1:0f:3a: c0:af:4d:a1:29:4b:12:c6:34:88:7a:3c:01:c7:8a:d2:68:0e: 0f:92:ee:64 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Nmowsy5jAET6gDMxIggsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA0MjI3OGE3YzZiYzZjYTU2ZWU3YWZhMjRhMmM4MWYzZGNiZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQoncl9o9jnvZWFDvtmI46HP3wOx QCNnfVrwqFH8DFtvwd35TVCO0AepbBCk/8PUXaqRbP2yUsAXGD7B231CHRqYBbIz QjtjR6vmacFGC2Wa+dTiM75zhxX+8Hblj2CNqGNBzfA4RFGhun9LenklwJT57AOL zEIz5A65WnoE2NPeKeJ4hF4QeBaoVaNR+/ZK3R2ImQxblhRYp/2OFw65TOp71UmO rw92mro4jDkQYONrPRWWh22PaK1sVPcoHr1gGa3ynqrbeuJ0Evx/aUHoY7AcGi8l y9idhEQ/GSrFBjmioFwvAAOG4KtKPE+r9YCAxeXN9+mDCccKhRM+2/V2WwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCMEIninxrxspW7nr6JKLIHz3L77MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5Lzc4ZWJj Yi1kY2E4LTQyZDYtYWY4Mi0zYWQ2ZTVkYzA3ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvNzhlYmNi LWRjYTgtNDJkNi1hZjgyLTNhZDZlNWRjMDdkNy8xL0l3UWllS2ZHdkd5bGJ1ZXZv a29zZ2ZQY3Z2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaB8MA0EAgACMAcDBQMqB70AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXSTANBgkqhkiG9w0BAQsFAAOCAQEAZa1a7uXwU6A0 qdMt1sonkiynvlsdDOvTQ9VnLB4ugs74kv0apIyV1NZWyytD8SNEnP2R8ZJV9h3r TdolmZwwbhyZ6v/jq3PhXLwlZs9EjeDU66fl4Xfd0HDaNp+kHehNiGGclHypdWyK cEoV1af724PQ3khA2KYrLSWnpuRB3bcddo7GbfUJuqOCJ9VbEH/HQuucSSw7inLH ntXmDWXA4NThk83zM0lDXS52IbwiXguds/Iy1I7CikjnKyPX/Yc9qmkh4JuPpM9r pWS0V0ACmqvBrp4PlAl5V5PGGDpLt21rT4iIvWKH8Q86wK9NoSlLEsY0iHo8AceK 0mgOD5LuZA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:07 2026 by rpki-client