This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer (raw, json) Hash identifier: jgIOlKLQjXc7O9MZRnH/jL8T/dP8wISE34PDAzxX9JI= Subject key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF207C1306227F40013FB889FE58377 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31308 AS: 60092 IP: 91.195.24.0/23 IP: 193.151.20.0/22 IP: 2001:67c:2c88::/47 IP: 2001:67c:2c90::/46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:07:c1:30:62:27:f4:00:13:fb:88:9f:e5:83:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=896d5866c35093352e7b9e0762c591e08e50f967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:1f:61:7c:d2:83:fa:c7:36:8e:b6:48:ed: 4e:8e:19:14:34:d7:a5:11:f8:0e:b6:03:ce:61:c2: 9f:12:dd:1e:8e:23:87:4e:9f:89:18:5c:08:70:04: 5c:33:d7:86:3d:1f:6f:d6:ba:f1:51:0d:0a:a7:de: 67:b2:a1:d4:3e:f8:f6:81:06:6c:2d:72:db:ac:a8: f9:f6:32:1b:c7:3d:96:7f:8f:85:06:27:c0:39:eb: 36:85:39:21:f7:4f:66:3d:c5:4f:b6:37:5f:c8:2e: bf:bf:ee:c6:5f:3d:d3:82:7f:e9:90:22:5d:54:a1: 8a:fd:01:b1:3f:e2:10:da:e1:15:e1:54:10:91:85: 31:60:e7:ed:ca:a1:ae:02:83:74:a4:b3:40:58:0e: d0:14:5a:bf:07:1e:c7:4e:f2:29:fb:00:b1:85:49: da:2c:b6:ac:08:2c:b2:37:43:05:b3:32:ef:55:73: b4:b3:33:32:cd:c5:3a:5e:ed:72:fb:3e:c8:8c:36: 2a:aa:38:af:d9:b5:d2:72:6d:09:f7:cd:ff:9b:ec: 35:2b:6d:9b:66:08:80:46:87:19:67:0f:90:83:5f: 42:24:6a:9d:82:54:d7:43:69:1d:aa:c2:a2:33:b9: 55:af:8d:29:9c:47:59:09:79:fb:32:5f:4e:af:aa: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.24.0/23 193.151.20.0/22 IPv6: 2001:67c:2c88::/47 2001:67c:2c90::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31308 60092 Signature Algorithm: sha256WithRSAEncryption 3e:4e:69:86:dd:83:63:d8:19:c8:a4:6b:54:8b:e4:ed:a1:79: 25:0a:e0:55:39:bf:0f:13:ee:5a:0c:e1:fd:6d:45:9e:62:58: 56:1e:57:77:cc:c9:f8:76:4c:ce:c3:dc:fb:5e:2e:21:16:75: 27:64:09:94:0f:e7:77:ee:06:c0:ea:89:bf:bc:b3:5a:a2:28: a2:ee:68:c5:2a:4d:63:94:6e:7f:e8:f0:2b:04:76:e0:b9:d5: c1:84:c5:a1:c3:69:77:3a:64:e6:08:49:1f:37:e7:7d:11:fd: 4f:22:3f:77:92:33:bc:77:78:f1:a6:83:37:88:4d:f0:de:07: cc:6b:bc:f4:ce:bb:7f:90:ad:f3:ff:0c:66:8f:a6:c9:ba:4d: 90:a6:46:30:38:74:26:fa:c5:5d:43:6e:c4:41:fe:4f:3b:6e: 03:e6:ae:a5:1c:58:c7:10:6c:e4:ef:42:d5:9a:29:22:91:b5: 12:60:64:27:2e:da:5c:56:c4:9d:0b:2f:10:be:6c:7d:38:50: 06:0c:80:9e:ac:17:bb:a5:46:b4:1d:9e:d8:6f:4d:33:09:dc: 3c:69:96:bc:84:a7:87:7f:bb:2d:7e:24:ae:d4:f9:34:24:35: 8c:d2:cc:50:fe:55:fa:42:9e:8c:4e:6a:ca:69:41:9d:fb:6b: 54:35:72:7c -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt/8gfBMGIn9AAT+4if5YN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTZkNTg2NmMzNTA5MzM1MmU3YjllMDc2MmM1OTFlMDhlNTBmOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAfYXzSg/rHNo62SO1OjhkUNNel EfgOtgPOYcKfEt0ejiOHTp+JGFwIcARcM9eGPR9v1rrxUQ0Kp95nsqHUPvj2gQZs LXLbrKj59jIbxz2Wf4+FBifAOes2hTkh909mPcVPtjdfyC6/v+7GXz3Tgn/pkCJd VKGK/QGxP+IQ2uEV4VQQkYUxYOftyqGuAoN0pLNAWA7QFFq/Bx7HTvIp+wCxhUna LLasCCyyN0MFszLvVXO0szMyzcU6Xu1y+z7IjDYqqjiv2bXScm0J983/m+w1K22b ZgiARocZZw+Qg19CJGqdglTXQ2kdqsKiM7lVr40pnEdZCXn7Ml9Or6pkgwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFIltWGbDUJM1LnueB2LFkeCOUPlnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzlkOGYy MS1iMjdmLTQzNWQtYTdiNS03ODQ2MjRhN2I0N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOWQ4ZjIx LWIyN2YtNDM1ZC1hN2I1LTc4NDYyNGE3YjQ3ZS8xL2lXMVlac05Ra3pVdWU1NEhZ c1dSNEk1US1XYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjASBAIAATAMAwQBW8MYAwQCwZcUMBgEAgACMBIDBwEgAQZ8LIgD BwIgAQZ8LJAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICekwCAwDqvDANBgkqhkiG 9w0BAQsFAAOCAQEAPk5pht2DY9gZyKRrVIvk7aF5JQrgVTm/DxPuWgzh/W1FnmJY Vh5Xd8zJ+HZMzsPc+14uIRZ1J2QJlA/nd+4GwOqJv7yzWqIoou5oxSpNY5Ruf+jw KwR24LnVwYTFocNpdzpk5ghJHzfnfRH9TyI/d5IzvHd48aaDN4hN8N4HzGu89M67 f5Ct8/8MZo+mybpNkKZGMDh0JvrFXUNuxEH+TztuA+aupRxYxxBs5O9C1ZopIpG1 EmBkJy7aXFbEnQsvEL5sfThQBgyAnqwXu6VGtB2e2G9NMwncPGmWvISnh3+7LX4k rtT5NCQ1jNLMUP5V+kKejE5qymlBnftrVDVyfA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:09 2026 by rpki-client