This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer File: iDHWIdGS-S2wk9kzCSweI2tNSXs.cer (raw, json) Hash identifier: x4Ddk5cL1dpUVRatSyEe6cIMFatOnWgLY8KnCgS2NyQ= Subject key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC6A127C6B1A57097715697705C1A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39798 IP: 5.181.156.0/22 IP: 5.252.176.0/22 IP: 94.158.244.0/22 IP: 185.163.44.0/22 IP: 185.225.16.0/22 IP: 194.180.157.0 -- 194.180.158.255 IP: 194.180.174.0/24 IP: 194.180.191.0/24 IP: 2001:67c:2db8::/48 IP: 2a0a:c800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6a:12:7c:6b:1a:57:09:77:15:69:77:05:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8831d621d192f92db093d933092c1e236b4d497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:63:bb:8a:dd:3c:3e:8c:29:ef:83:0f:cf: d7:cc:41:c9:80:64:49:6a:b4:60:2c:d1:03:8e:92: 2a:0b:7d:28:f6:57:e3:bc:16:be:d5:08:34:67:b5: 5b:5b:f4:c4:c5:8d:d7:be:1f:df:6e:51:04:ba:12: b3:9a:dd:28:bb:07:5c:5f:0f:6d:2b:bb:61:10:f7: d7:51:95:24:14:c4:da:aa:5e:80:cd:4b:65:dc:ef: 56:bc:e3:32:6f:16:23:e4:9f:f1:3b:d0:af:28:5f: 50:7c:0d:1b:58:21:41:29:7e:bd:6c:81:73:78:47: d7:c1:99:28:ac:f7:53:a7:20:de:67:1d:30:6c:01: 19:bb:95:b7:d4:1c:1d:72:e2:09:52:0a:c5:c5:f0: 42:0c:81:68:28:f6:36:65:eb:2c:35:f3:f4:43:71: 5c:af:b2:a0:ae:b8:82:0a:03:f8:6c:b6:80:97:8a: df:3b:13:00:23:4f:ee:41:97:94:e1:e8:c4:d9:12: a0:27:8c:96:38:8a:fe:b6:9f:9b:61:fc:16:0f:e8: 80:ff:d8:1b:87:de:cc:72:4e:45:7e:3c:bc:7d:a1: 64:58:6c:16:53:ca:7c:77:3a:32:47:6d:8f:8c:d7: 84:52:a8:f8:cf:40:a8:62:c0:a9:14:de:eb:b3:66: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.156.0/22 5.252.176.0/22 94.158.244.0/22 185.163.44.0/22 185.225.16.0/22 194.180.157.0-194.180.158.255 194.180.174.0/24 194.180.191.0/24 IPv6: 2001:67c:2db8::/48 2a0a:c800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39798 Signature Algorithm: sha256WithRSAEncryption aa:9a:65:09:77:5a:3c:76:3a:ed:38:c1:40:c2:95:85:d5:6d: 01:95:0e:a9:0f:0d:61:00:cd:f0:96:6a:82:90:ae:71:e1:ea: 96:e5:52:41:08:57:ed:13:25:45:f4:72:a5:15:63:a5:26:e7: be:bc:ce:6a:db:72:e8:27:c0:f2:ba:59:d7:46:91:69:b8:17: 27:17:cd:42:06:9e:a4:38:2a:34:53:04:2f:01:c7:4a:8c:cc: 48:da:02:78:0f:6e:d1:f4:9f:0d:7b:3f:18:6f:15:21:04:0e: 0d:1c:f2:5a:4c:ec:0a:87:61:5f:15:ae:77:04:af:4c:5e:b3: e0:f0:0e:ef:f6:79:3b:91:9f:0d:d2:f8:11:cd:8f:b9:37:49: 39:bc:94:94:2d:1e:59:a1:8c:32:46:6d:e7:98:d0:2f:40:1c: 18:42:55:d8:0b:05:ae:8b:89:fb:e8:6e:1e:25:2f:4a:db:5e: 72:72:cf:41:94:98:94:75:fd:d2:dd:40:86:07:5e:9c:60:e4: a7:02:7a:49:2d:b2:5e:cd:26:e4:64:4a:78:cf:b5:a5:af:bd: e0:a2:b5:a8:50:b4:2c:83:85:87:ee:d5:66:52:8c:c1:45:e7: 2c:44:5e:4c:87:11:76:01:28:13:3f:82:e6:4d:7f:30:c7:a4: 95:26:db:51 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt57GoSfGsaVwl3FWl3BcGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMxZDYyMWQxOTJmOTJkYjA5M2Q5MzMwOTJjMWUyMzZiNGQ0OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Vju4rdPD6MKe+DD8/XzEHJgGRJ arRgLNEDjpIqC30o9lfjvBa+1Qg0Z7VbW/TExY3Xvh/fblEEuhKzmt0ouwdcXw9t K7thEPfXUZUkFMTaql6AzUtl3O9WvOMybxYj5J/xO9CvKF9QfA0bWCFBKX69bIFz eEfXwZkorPdTpyDeZx0wbAEZu5W31BwdcuIJUgrFxfBCDIFoKPY2ZessNfP0Q3Fc r7KgrriCCgP4bLaAl4rfOxMAI0/uQZeU4ejE2RKgJ4yWOIr+tp+bYfwWD+iA/9gb h97Mck5Ffjy8faFkWGwWU8p8dzoyR22PjNeEUqj4z0CoYsCpFN7rs2bmMQIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFIgx1iHRkvktsJPZMwksHiNrTUl7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzQ0MDc4 MS1mNjE0LTQ1MGQtOWQ5Zi0yYjg3NjFkOGExMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNDQwNzgx LWY2MTQtNDUwZC05ZDlmLTJiODc2MWQ4YTEzNy8xL2lESFdJZEdTLVMyd2s5a3pD U3dlSTJ0TlNYcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDA+BAIAATA4AwQCBbWcAwQCBfywAwQCXp70AwQCuaMsAwQCueEQ MAwDBADCtJ0DBADCtJ4DBADCtK4DBADCtL8wFgQCAAIwEAMHACABBnwtuAMFAyoK yAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJt2MA0GCSqGSIb3DQEBCwUAA4IB AQCqmmUJd1o8djrtOMFAwpWF1W0BlQ6pDw1hAM3wlmqCkK5x4eqW5VJBCFftEyVF 9HKlFWOlJue+vM5q23LoJ8DyulnXRpFpuBcnF81CBp6kOCo0UwQvAcdKjMxI2gJ4 D27R9J8Nez8YbxUhBA4NHPJaTOwKh2FfFa53BK9MXrPg8A7v9nk7kZ8N0vgRzY+5 N0k5vJSULR5ZoYwyRm3nmNAvQBwYQlXYCwWui4n76G4eJS9K215ycs9BlJiUdf3S 3UCGB16cYOSnAnpJLbJezSbkZEp4z7Wlr73gorWoULQsg4WH7tVmUozBRecsRF5M hxF2ASgTP4LmTX8wx6SVJttR -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:23 2026 by rpki-client