This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer (raw, json) Hash identifier: HX/U4rO+grgv38VzOXurwYaFJJvDmgvR26TcZ133TZA= Subject key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9E998AC61B1AA1EED69289CBA48A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5377 AS: 8264 AS: 8841 AS: 9207 AS: 44933 AS: 209980 AS: 210314 IP: 77.70.128.0/17 IP: 88.151.224.0/21 IP: 192.124.199.0/24 IP: 192.124.205.0/24 IP: 193.39.251.0/24 IP: 193.219.192.0 -- 193.220.255.255 IP: 194.35.64.0 -- 194.35.72.255 IP: 194.61.95.0/24 IP: 194.62.100.0/23 IP: 194.62.204.0 -- 194.62.213.255 IP: 195.20.160.0/19 IP: 212.197.0.0/17 IP: 2a00:ff80::/29 IP: 2a02:6600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9e:99:8a:c6:1b:1a:a1:ee:d6:92:89:cb:a4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=896a82a725ed22bb46847ae568912078de25c108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:4c:33:25:0f:1d:33:6e:3b:46:a1:6b:a5: c7:5e:a1:b1:11:8d:2e:b7:c5:4e:24:c6:ed:77:93: 33:1b:ec:02:0c:a7:db:dd:35:b1:67:a9:f8:19:81: e4:8a:3d:e9:1a:d0:e3:85:ac:78:f0:a5:10:17:10: ee:81:83:db:85:84:19:dc:4a:b5:c5:ec:c1:27:8a: 25:ac:32:26:de:34:16:b3:24:c1:54:20:33:0c:31: 69:72:e0:ea:a1:71:09:24:fc:a9:3c:ff:8c:ac:14: c1:59:8a:b0:94:7e:48:10:ff:d7:9f:98:4a:4e:a2: f1:47:4d:6e:a2:8b:6c:f4:6a:32:ee:66:e2:24:26: 58:9a:33:a1:71:5e:a2:69:e8:e2:d7:ae:7b:d2:a1: 30:35:97:ca:01:14:f0:9a:37:1c:fb:38:86:d2:ad: 89:54:84:76:a9:8f:fe:f9:b8:0b:60:db:3f:68:9c: 04:a8:ed:ed:20:b9:7a:2b:7e:1d:66:9f:d2:5b:09: 45:18:a2:8c:ac:45:33:be:73:a4:b9:92:31:17:2f: e0:46:d1:fd:7f:d2:c0:df:15:72:93:8c:d4:57:eb: 54:30:28:93:18:28:fb:aa:1a:74:e1:c3:96:07:0d: 8b:6c:53:4a:4c:2b:3c:cd:dc:9a:09:3d:74:87:9f: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.70.128.0/17 88.151.224.0/21 192.124.199.0/24 192.124.205.0/24 193.39.251.0/24 193.219.192.0-193.220.255.255 194.35.64.0-194.35.72.255 194.61.95.0/24 194.62.100.0/23 194.62.204.0-194.62.213.255 195.20.160.0/19 212.197.0.0/17 IPv6: 2a00:ff80::/29 2a02:6600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5377 8264 8841 9207 44933 209980 210314 Signature Algorithm: sha256WithRSAEncryption 81:60:d5:51:a4:d7:1d:86:a4:01:61:fe:f7:ae:00:6c:fb:c1: cc:1e:71:37:8c:82:d7:9d:ab:4b:f6:be:1d:7a:cc:95:92:ce: de:09:05:87:15:bd:0e:d3:c6:7c:67:20:1d:6d:32:9b:64:34: 28:77:e3:04:cf:df:e6:cd:d8:a1:26:50:33:e1:63:be:4e:e1: 03:41:79:42:41:cc:66:7d:aa:38:6c:88:1c:ac:e4:65:98:46: 77:00:10:22:d8:81:d9:59:69:68:43:5e:21:03:bc:3a:d6:a5: 8a:47:c1:b5:7e:49:e0:35:ea:50:77:40:0e:16:7b:aa:38:df: 89:eb:40:e1:12:35:ea:e3:c1:62:bb:81:b7:ba:20:6a:25:fb: 91:0f:02:53:b5:c1:6d:17:00:3b:27:84:f5:fc:26:3d:d8:18: a0:de:b4:29:a2:60:f7:3e:a0:87:8e:55:e7:53:4d:2c:f5:4e: 16:e0:bd:a2:2f:51:32:d1:36:e1:16:49:8c:b3:ab:e4:8b:04: d0:1e:ca:e7:d7:3b:9e:d3:af:cf:e6:b0:94:89:70:85:7a:bb: 9d:95:4c:b4:e6:2e:48:77:22:6c:36:f7:05:99:a7:5b:03:2e: 3b:a4:c2:80:f5:75:59:d9:f7:a7:49:b3:da:fa:92:d5:b1:87: 3b:65:20:6a -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISAZt5fp6ZisYbGqHu1pKJy6SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTZhODJhNzI1ZWQyMmJiNDY4NDdhZTU2ODkxMjA3OGRlMjVjMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HFMMyUPHTNuO0aha6XHXqGxEY0u t8VOJMbtd5MzG+wCDKfb3TWxZ6n4GYHkij3pGtDjhax48KUQFxDugYPbhYQZ3Eq1 xezBJ4olrDIm3jQWsyTBVCAzDDFpcuDqoXEJJPypPP+MrBTBWYqwlH5IEP/Xn5hK TqLxR01uoots9Goy7mbiJCZYmjOhcV6iaeji16570qEwNZfKARTwmjcc+ziG0q2J VIR2qY/++bgLYNs/aJwEqO3tILl6K34dZp/SWwlFGKKMrEUzvnOkuZIxFy/gRtH9 f9LA3xVyk4zUV+tUMCiTGCj7qhp04cOWBw2LbFNKTCs8zdyaCT10h5+DkQIDAQAB o4IDKjCCAyYwHQYDVR0OBBYEFIlqgqcl7SK7RoR65WiRIHjeJcEIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzNmYzhk YS0zNTE1LTQzNGQtOWYwZS0wNDAxMjcxMDIyMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvM2ZjOGRh LTM1MTUtNDM0ZC05ZjBlLTA0MDEyNzEwMjIwOS8xL2lXcUNweVh0SXJ0R2hIcmxh SkVnZU40bHdRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wZQQCAAEwXwMEB01GgAMEA1iX4AMEAMB8xwMEAMB8zQMEAMEn +zALAwQGwdvAAwMAwdwwDAMEBsIjQAMEAMIjSAMEAMI9XwMEAcI+ZDAMAwQCwj7M AwQBwj7UAwQFwxSgAwQH1MUAMBQEAgACMA4DBQMqAP+AAwUDKgJmADA0BggrBgEF BQcBCAEB/wQlMCOgITAfAgIVAQICIEgCAiKJAgIj9wIDAK+FAgMDNDwCAwM1ijAN BgkqhkiG9w0BAQsFAAOCAQEAgWDVUaTXHYakAWH+964AbPvBzB5xN4yC152rS/a+ HXrMlZLO3gkFhxW9DtPGfGcgHW0ym2Q0KHfjBM/f5s3YoSZQM+Fjvk7hA0F5QkHM Zn2qOGyIHKzkZZhGdwAQItiB2VlpaENeIQO8OtalikfBtX5J4DXqUHdADhZ7qjjf ietA4RI16uPBYruBt7ogaiX7kQ8CU7XBbRcAOyeE9fwmPdgYoN60KaJg9z6gh45V 51NNLPVOFuC9oi9RMtE24RZJjLOr5IsE0B7K59c7ntOvz+awlIlwhXq7nZVMtOYu SHcibDb3BZmnWwMuO6TCgPV1Wdn3p0mz2vqS1bGHO2Ugag== -----END CERTIFICATE-----Generated at Sat Feb 7 05:45:31 2026 by rpki-client