This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer File: IwqhYKbohsED2tvkSyPCd3YFc5E.cer (raw, json) Hash identifier: ejgl5zP4SzidPZ21qoqrND8fr7WO2LNYcqs/MEbBb40= Subject key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F159E4F7F9E50AA4B09A569E8FC91FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56662 IP: 2001:67c:21ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9e:4f:7f:9e:50:aa:4b:09:a5:69:e8:fc:91:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=230aa160a6e886c103dadbe44b23c27776057391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:ac:1f:8c:ee:d7:b8:a9:86:eb:d2:7d:3a: d3:f2:c5:65:62:e5:80:1e:c5:27:d9:bd:57:07:cb: 4c:44:1c:f2:22:23:3c:b8:7c:a9:c9:0c:06:fb:ab: 5d:11:57:fa:8e:09:d9:b0:ce:d7:41:c9:28:7f:45: cb:36:ea:73:44:19:1d:33:b7:ea:93:23:0b:5b:42: c7:5d:36:c7:cc:d9:0d:35:4a:1b:b8:f6:3f:db:33: ab:d5:aa:43:c4:c4:45:12:b9:64:8b:16:58:43:b7: fb:5f:17:ad:e9:66:ea:7f:37:f6:19:e8:81:b1:f5: 3b:f5:84:4b:6c:94:79:99:d2:f4:01:83:78:f6:3f: 5a:72:82:31:9f:53:93:d1:cb:76:79:cc:80:cd:8f: 91:f4:92:6b:ad:f1:6a:ca:10:d6:4e:67:e2:de:4e: af:f9:e3:7d:64:f1:6b:ed:ca:84:39:82:5c:1e:fc: 24:8b:1d:c6:d0:c5:ce:b0:db:ee:c1:25:62:11:ec: 2b:63:c8:43:c6:2c:fc:46:c6:c1:9e:1c:eb:7d:a4: 90:de:a6:f7:d0:46:0d:c5:96:8e:75:ad:6d:15:09: 85:be:75:fb:9e:cd:1c:74:da:87:c6:a3:7f:f2:63: ab:cd:ce:3b:08:e7:95:ba:f3:17:0d:d3:e8:92:d6: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56662 Signature Algorithm: sha256WithRSAEncryption a1:8c:1e:b8:18:a1:18:e3:6b:9f:ab:da:e4:9d:7d:7f:49:a2: 84:77:4e:d0:8d:a2:da:fa:d2:e6:4c:14:e5:52:83:2f:2a:0e: 0a:d1:cc:03:d0:0e:78:cd:a6:f6:26:75:bb:01:21:f3:f9:ac: 3e:92:9e:13:a3:f1:a9:c7:f2:fa:35:4b:aa:87:49:ec:16:e9: 5d:e5:7a:26:74:3d:11:60:c1:c2:c5:da:41:da:c9:a4:53:1c: 0c:bf:0a:76:12:3e:b5:27:cd:4c:40:3a:a3:1a:e5:1a:7e:99: 2c:f7:50:54:4b:a7:2c:49:fb:37:d0:5e:34:e9:92:f8:c3:5b: 51:60:03:64:bd:bb:e5:85:a4:22:65:43:b2:d5:bd:7d:ca:8a: bc:6b:d8:dc:2e:a1:b9:50:f6:3a:a4:94:c1:ca:b5:dc:5b:93: 15:90:21:21:92:d2:f8:f8:bc:38:10:3f:33:26:d3:ec:b4:ba: e3:44:30:1f:79:a0:9c:12:7f:32:3c:70:66:9d:9c:11:ee:b1: 95:71:c8:37:90:c0:d6:63:db:9a:66:ad:7f:98:ac:d3:10:7f: aa:65:ad:9a:e5:33:f9:93:60:b1:84:3f:3b:dd:ca:25:d8:2f: 6d:e6:98:bf:80:75:d4:3f:7c:7c:8b:c4:f1:11:b1:7f:a6:3c: 18:8d:21:32 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/FZ5Pf55QqksJpWno/JH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzBhYTE2MGE2ZTg4NmMxMDNkYWRiZTQ0YjIzYzI3Nzc2MDU3MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZasH4zu17iphuvSfTrT8sVlYuWA HsUn2b1XB8tMRBzyIiM8uHypyQwG+6tdEVf6jgnZsM7XQckof0XLNupzRBkdM7fq kyMLW0LHXTbHzNkNNUobuPY/2zOr1apDxMRFErlkixZYQ7f7Xxet6Wbqfzf2GeiB sfU79YRLbJR5mdL0AYN49j9acoIxn1OT0ct2ecyAzY+R9JJrrfFqyhDWTmfi3k6v +eN9ZPFr7cqEOYJcHvwkix3G0MXOsNvuwSViEewrY8hDxiz8RsbBnhzrfaSQ3qb3 0EYNxZaOda1tFQmFvnX7ns0cdNqHxqN/8mOrzc47COeVuvMXDdPoktY/zQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCMKoWCm6IbBA9rb5Esjwnd2BXORMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzZlYjU0 ZS1lNzA5LTRiN2EtYWRlOS1hOWFlYjQ4NWQ1OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNmViNTRl LWU3MDktNGI3YS1hZGU5LWE5YWViNDg1ZDU5Mi8xL0l3cWhZS2JvaHNFRDJ0dmtT eVBDZDNZRmM1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDdVjANBgkqhkiG9w0BAQsFAAOCAQEAoYweuBihGONrn6va5J19f0mihHdO 0I2i2vrS5kwU5VKDLyoOCtHMA9AOeM2m9iZ1uwEh8/msPpKeE6Pxqcfy+jVLqodJ 7BbpXeV6JnQ9EWDBwsXaQdrJpFMcDL8KdhI+tSfNTEA6oxrlGn6ZLPdQVEunLEn7 N9BeNOmS+MNbUWADZL275YWkImVDstW9fcqKvGvY3C6huVD2OqSUwcq13FuTFZAh IZLS+Pi8OBA/MybT7LS640QwH3mgnBJ/MjxwZp2cEe6xlXHIN5DA1mPbmmatf5is 0xB/qmWtmuUz+ZNgsYQ/O93KJdgvbeaYv4B11D98fIvE8RGxf6Y8GI0hMg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:24:49 2026 by rpki-client