This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer (raw, json) Hash identifier: +5cBIxXod8q553UYRnMtigNZ+B6pPVd6UO2NfyyjbRk= Subject key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD5FDC74DB5FAD2380A95F891824A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211372 IP: 193.107.14.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d5:fd:c7:4d:b5:fa:d2:38:0a:95:f8:91:82:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2307652144c9127dd626796056c9ec2932a4f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:29:65:3b:cc:e5:71:98:ce:15:e0:16:c2: ec:43:78:93:be:24:08:a5:d3:76:32:46:0c:1f:07: b9:46:58:c2:48:29:2f:c8:ac:06:e3:cd:58:43:ba: e7:c8:45:38:84:75:f0:fb:a1:0d:62:ec:c6:a5:d8: 76:4a:f3:c5:22:62:8f:97:39:47:b9:0a:98:a3:f1: 29:ab:c9:65:2a:ad:26:c6:f1:ca:36:4f:c0:15:de: 12:da:b7:3f:ec:7e:e3:7e:a0:bc:2b:68:2d:e5:ee: 19:a2:90:8c:05:bf:cf:2f:d2:e7:7a:49:22:c0:74: 84:5c:a0:9e:88:18:99:ee:fd:b3:31:e4:d0:75:00: 0f:66:f2:ce:f4:c3:9d:a5:72:50:ba:6e:72:e1:75: c2:5e:63:a8:d9:27:49:69:61:8b:e2:40:e6:90:25: 21:0a:d7:17:60:6b:3e:49:06:ae:02:17:8f:a9:fb: 47:8d:87:8e:06:97:1d:00:bf:db:e5:cf:07:be:68: ef:c9:ec:0f:97:4d:3d:e1:20:39:5a:8c:34:4c:f5: c1:ec:d7:f9:6f:92:44:a8:fa:ec:ec:77:5b:1e:1c: 32:c8:36:7e:b3:90:81:a5:5d:fa:bb:c5:8d:32:97: 35:5c:5d:07:8b:47:d7:24:c9:68:bb:4c:00:71:11: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.14.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211372 Signature Algorithm: sha256WithRSAEncryption 12:1e:5a:f3:5a:ca:4d:18:63:64:37:7d:3b:91:4e:d0:05:b7: 9b:38:dd:37:b7:4a:ec:9a:f9:4a:15:1e:bd:ba:c4:6f:b4:6a: 56:8f:d5:60:4c:b7:6a:15:8c:eb:68:5e:f9:78:a3:f8:8c:1f: e5:e1:11:64:6c:ff:dc:e0:ea:c9:30:c4:82:40:c1:c3:ee:b0: ad:93:df:22:1c:c6:05:36:f6:7a:26:d2:83:43:1e:9e:34:71: 51:03:c1:69:5b:1b:fe:30:44:35:6f:61:da:dc:97:59:1d:3e: d5:6f:44:ba:6a:31:be:26:9f:f8:77:0f:15:0e:f4:c5:3e:eb: 57:7a:59:11:2f:db:ac:04:ac:b9:f2:45:de:ce:1e:7d:16:c5: 4a:28:3b:95:13:3b:b9:85:60:2b:24:03:65:95:ab:8c:ee:39: f4:da:a0:e7:11:b5:5e:a8:90:27:0f:d0:d8:0d:cf:59:82:8b: ba:59:78:ba:10:31:e7:8d:ca:c8:1f:b4:9c:b6:67:ec:19:4e: 61:2c:df:59:14:a0:da:97:65:77:28:5d:db:8e:2d:a9:9a:81: f1:0c:23:38:bf:20:8f:de:31:be:8e:29:e5:4b:8a:4e:8b:51: 94:38:dc:8d:7e:57:33:f4:e2:d7:9e:4e:ac:85:45:bb:f9:58: 73:e9:d2:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8f9X9x021+tI4CpX4kYJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA3NjUyMTQ0YzkxMjdkZDYyNjc5NjA1NmM5ZWMyOTMyYTRmMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFYpZTvM5XGYzhXgFsLsQ3iTviQI pdN2MkYMHwe5RljCSCkvyKwG481YQ7rnyEU4hHXw+6ENYuzGpdh2SvPFImKPlzlH uQqYo/Epq8llKq0mxvHKNk/AFd4S2rc/7H7jfqC8K2gt5e4ZopCMBb/PL9Lnekki wHSEXKCeiBiZ7v2zMeTQdQAPZvLO9MOdpXJQum5y4XXCXmOo2SdJaWGL4kDmkCUh CtcXYGs+SQauAhePqftHjYeOBpcdAL/b5c8HvmjvyewPl0094SA5Wow0TPXB7Nf5 b5JEqPrs7HdbHhwyyDZ+s5CBpV36u8WNMpc1XF0Hi0fXJMlou0wAcRE7aQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCMHZSFEyRJ91iZ5YFbJ7CkypPIFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4Lzk5ZDE3 Ny04YzAzLTQ5OGYtYjIwMi03YTc4YWUwNTRiNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvOTlkMTc3 LThjMDMtNDk4Zi1iMjAyLTdhNzhhZTA1NGI0Yy8xL0l3ZGxJVVRKRW4zV0pubGdW c25zS1RLazhnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWsOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5rDANBgkqhkiG9w0BAQsFAAOCAQEAEh5a81rKTRhjZDd9O5FO0AW3mzjdN7dK 7Jr5ShUevbrEb7RqVo/VYEy3ahWM62he+Xij+Iwf5eERZGz/3ODqyTDEgkDBw+6w rZPfIhzGBTb2eibSg0MenjRxUQPBaVsb/jBENW9h2tyXWR0+1W9Eumoxviaf+HcP FQ70xT7rV3pZES/brASsufJF3s4efRbFSig7lRM7uYVgKyQDZZWrjO459Nqg5xG1 XqiQJw/Q2A3PWYKLull4uhAx543KyB+0nLZn7BlOYSzfWRSg2pdldyhd244tqZqB 8QwjOL8gj94xvo4p5UuKTotRlDjcjX5XM/Ti155OrIVFu/lYc+nSPg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:52 2026 by rpki-client