This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer File: igr5b5WYkhMXjTPWXwcOj7L-N98.cer (raw, json) Hash identifier: r1jPsSGKkYdwKhHuHUPlXs4Fn94nMJWn213OST5mfAQ= Subject key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783537045438310F393D3CB3959305F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48278 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:37:04:54:38:31:0f:39:3d:3c:b3:95:93:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a0af96f95989213178d33d65f070e8fb2fe37df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:d5:b4:e4:b2:d5:04:79:4d:7b:fa:fa:1f: 05:32:29:a1:c1:23:e1:9f:4f:fc:cd:42:2e:0e:ab: 48:f4:63:47:e4:63:13:47:7b:a9:de:03:de:2d:d8: c7:32:e6:ef:a8:d4:46:47:8d:65:39:7a:f6:09:83: 88:94:ba:69:8c:03:83:68:59:d2:5a:7c:1f:40:c9: 5a:e3:eb:d3:2f:1a:6f:f4:77:e1:bf:cc:9d:a2:1c: c0:c8:02:94:1a:3e:f2:94:f0:16:bb:ef:bb:c5:af: 37:a2:48:05:b5:d3:e6:3b:8c:d9:90:b7:b5:48:4f: 44:4b:eb:77:a8:e7:00:7b:eb:a5:59:6d:fb:5b:de: 8f:f1:1e:31:86:f1:ae:a9:97:63:d4:da:1d:6c:84: 92:c8:75:dc:09:a4:62:c6:7b:59:75:6b:4d:37:b0: 89:42:0d:0d:2a:07:80:9e:1e:03:2e:5b:af:a4:c3: 94:8d:a2:88:ed:41:c6:c1:3f:51:a6:72:d1:87:e8: 22:0c:6a:91:d3:d3:a6:53:f0:da:da:66:84:02:72: 85:0a:62:79:1c:71:22:ec:94:c9:85:ae:21:9d:24: 74:3d:06:dc:d3:22:51:3f:66:90:e3:3a:30:1a:ab: a6:0f:1c:fa:81:30:62:41:e6:54:bc:cd:1b:89:d1: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48278 Signature Algorithm: sha256WithRSAEncryption ab:2e:53:d8:d8:ec:b2:3d:0d:32:99:a3:ee:0c:1d:94:5c:9a: 00:d0:2c:6a:81:59:e2:1a:8b:7c:b3:4f:9d:48:c8:12:c9:0c: 08:a3:71:b7:f4:2e:e7:4b:9d:c7:5c:d5:50:56:c1:ba:34:5d: 30:23:9e:8a:27:ec:1c:35:41:f4:b3:29:ef:a6:8b:cb:67:b6: 98:56:11:50:74:5e:c4:01:a4:ca:e9:0b:99:e6:cb:4e:98:7d: ea:59:fb:3d:fd:01:21:49:95:40:bf:d0:21:23:5f:02:92:4a: ea:4d:57:7b:ee:a8:b1:ff:b9:3c:59:a5:63:f0:10:f5:4d:b8: 4e:6d:91:f4:0d:ae:46:84:fc:8d:eb:28:d8:21:d6:2c:82:04: e2:b2:26:c0:88:76:0e:ba:fa:6a:ef:4c:cc:37:c7:9a:fc:78: 9b:35:f4:b6:b7:54:1d:de:cd:49:89:1c:3d:e8:97:fd:bd:8a: cc:20:bb:96:19:d1:1b:dd:ff:ef:9c:27:c1:17:2c:f9:00:4b: a0:4e:41:a6:f7:13:18:bc:bc:73:f2:e8:56:53:6c:f6:21:c7: fc:1d:de:2c:0b:65:2c:b7:fe:d9:dc:98:b9:0a:3b:97:ff:d5: 12:1f:d6:c2:8b:b3:a0:e8:3d:87:c1:b5:b1:74:35:57:8c:fa: e3:65:cb:bf -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NTcEVDgxDzk9PLOVkwX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTBhZjk2Zjk1OTg5MjEzMTc4ZDMzZDY1ZjA3MGU4ZmIyZmUzN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1DVtOSy1QR5TXv6+h8FMimhwSPh n0/8zUIuDqtI9GNH5GMTR3up3gPeLdjHMubvqNRGR41lOXr2CYOIlLppjAODaFnS WnwfQMla4+vTLxpv9Hfhv8ydohzAyAKUGj7ylPAWu++7xa83okgFtdPmO4zZkLe1 SE9ES+t3qOcAe+ulWW37W96P8R4xhvGuqZdj1NodbISSyHXcCaRixntZdWtNN7CJ Qg0NKgeAnh4DLluvpMOUjaKI7UHGwT9RpnLRh+giDGqR09OmU/Da2maEAnKFCmJ5 HHEi7JTJha4hnSR0PQbc0yJRP2aQ4zowGqumDxz6gTBiQeZUvM0bidHP1QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIoK+W+VmJITF40z1l8HDo+y/jffMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzA5ZjZk My05NzJmLTRiMDUtYjI3YS1iNzdjMWY5NzI5ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMDlmNmQz LTk3MmYtNGIwNS1iMjdhLWI3N2MxZjk3MjlmZi8xL2lncjViNVdZa2hNWGpUUFdY d2NPajdMLU45OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8ljANBgkqhkiG9w0BAQsFAAOCAQEAqy5T2Njssj0N Mpmj7gwdlFyaANAsaoFZ4hqLfLNPnUjIEskMCKNxt/Qu50udx1zVUFbBujRdMCOe iifsHDVB9LMp76aLy2e2mFYRUHRexAGkyukLmebLTph96ln7Pf0BIUmVQL/QISNf ApJK6k1Xe+6osf+5PFmlY/AQ9U24Tm2R9A2uRoT8jeso2CHWLIIE4rImwIh2Drr6 au9MzDfHmvx4mzX0trdUHd7NSYkcPeiX/b2KzCC7lhnRG93/75wnwRcs+QBLoE5B pvcTGLy8c/LoVlNs9iHH/B3eLAtlLLf+2dyYuQo7l//VEh/WwouzoOg9h8G1sXQ1 V4z642XLvw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:15 2026 by rpki-client