This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer File: irW5qTaHl6hrrryB9iOz9OeG9Ro.cer (raw, json) Hash identifier: xEFAucDIDnDVQiJbMnW1N3MmQG+SQRBeRW3/mzgHY0g= Subject key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9B3AC406250A0E893D60FDD76E18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.65.124.0/22 IP: 2a04:f840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:3a:c4:06:25:0a:0e:89:3d:60:fd:d7:6e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:31:91:6e:5b:41:64:61:33:23:92:de:84: e0:97:13:09:31:18:68:60:75:76:b4:ba:cf:e2:45: d5:12:cc:5e:27:89:5b:d1:ef:82:d2:1f:56:bc:c4: 50:61:cf:59:18:84:1d:d7:da:ad:75:da:47:79:20: 83:3a:d9:ff:e0:ed:32:58:dc:a7:a3:9a:80:c7:47: de:92:bc:f3:84:ca:45:9a:3b:02:cb:29:ed:14:34: 35:85:1f:d6:f4:3d:6d:f6:4c:b6:c8:27:bc:de:5f: 17:68:32:9f:20:bd:69:ae:50:55:2d:35:42:96:ae: 3b:98:ae:49:20:35:4e:0e:2a:b9:0a:85:65:8c:eb: c6:e0:d7:ef:64:52:fe:f3:4f:52:ee:5b:5b:f0:7e: 92:26:34:07:13:2d:25:e0:6e:9d:f6:36:b4:59:c1: aa:a5:c3:98:d5:38:17:3f:ed:9a:19:cf:79:ac:87: 53:c7:4e:df:19:7c:1b:43:0e:3c:0e:29:b0:eb:c8: 51:f1:35:3f:b5:bf:bf:65:65:9c:5f:18:31:4b:b7: 15:28:f1:6d:4e:55:a3:ea:35:03:14:d2:f3:12:1d: 03:ef:58:dd:3b:17:75:2a:e1:5e:3a:55:ac:f4:69: 56:d8:4c:15:75:f3:53:c2:c8:a4:92:c2:8c:48:73: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.124.0/22 IPv6: 2a04:f840::/29 Signature Algorithm: sha256WithRSAEncryption 37:a6:b8:f5:c9:20:8e:83:93:0c:eb:58:d3:a2:37:46:ee:7c: a5:bc:08:88:bc:18:09:5e:ee:96:70:45:c7:d7:63:fb:c7:a9: 57:47:6c:04:b8:aa:f4:ce:e5:94:0a:60:2d:0e:03:96:4a:fb: a9:8c:30:fc:89:dd:e3:36:16:ce:b0:53:c3:a0:e5:ac:d2:2d: 0d:b6:e3:fe:d4:1c:35:26:4a:ff:66:36:a1:22:75:f7:42:ba: a2:6d:f5:9c:fa:c6:3f:3e:6d:1f:20:bd:85:b4:7b:3b:96:85: 3c:18:7c:8b:a8:89:be:52:db:bb:f6:91:aa:2c:f9:83:f6:67: fe:ab:ee:b3:ea:cf:fd:7f:c7:25:fd:12:d0:94:e7:fa:46:6e: 30:f5:fd:89:8f:02:08:f5:85:f0:5a:19:1f:fb:73:74:3e:b6: 3c:b9:dd:bc:f2:13:a3:a2:a7:9a:d9:70:9c:44:5d:a3:84:6d: fd:5f:99:f7:ab:0d:4e:06:f9:b5:6f:b0:16:f8:b2:5a:df:73: 07:23:6d:a1:f8:42:b3:64:a9:7a:a7:55:48:e9:3d:ee:18:37: e7:cf:f2:76:19:2a:a5:59:36:db:7f:cb:6b:b2:85:05:47:bb: 93:cd:c2:e4:d9:ab:d2:a7:d2:fd:2e:11:a7:3c:98:7f:51:1c: bc:35:96:56 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W5s6xAYlCg6JPWD9124YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWI1YjlhOTM2ODc5N2E4NmJhZWJjODFmNjIzYjNmNGU3ODZmNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a4xkW5bQWRhMyOS3oTglxMJMRho YHV2tLrP4kXVEsxeJ4lb0e+C0h9WvMRQYc9ZGIQd19qtddpHeSCDOtn/4O0yWNyn o5qAx0fekrzzhMpFmjsCyyntFDQ1hR/W9D1t9ky2yCe83l8XaDKfIL1prlBVLTVC lq47mK5JIDVODiq5CoVljOvG4NfvZFL+809S7ltb8H6SJjQHEy0l4G6d9ja0WcGq pcOY1TgXP+2aGc95rIdTx07fGXwbQw48Dimw68hR8TU/tb+/ZWWcXxgxS7cVKPFt TlWj6jUDFNLzEh0D71jdOxd1KuFeOlWs9GlW2EwVdfNTwsikksKMSHNEpQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIq1uak2h5eoa668gfYjs/TnhvUaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzY0YzQz MS01MzMwLTQzN2ItYjIwNy0yOGZlY2M2MzM5OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjRjNDMx LTUzMzAtNDM3Yi1iMjA3LTI4ZmVjYzYzMzk4Yy8xL2lyVzVxVGFIbDZocnJyeUI5 aU96OU9lRzlSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUF8MA0EAgACMAcDBQMqBPhAMA0GCSqGSIb3 DQEBCwUAA4IBAQA3prj1ySCOg5MM61jTojdG7nylvAiIvBgJXu6WcEXH12P7x6lX R2wEuKr0zuWUCmAtDgOWSvupjDD8id3jNhbOsFPDoOWs0i0NtuP+1Bw1Jkr/Zjah InX3QrqibfWc+sY/Pm0fIL2FtHs7loU8GHyLqIm+Utu79pGqLPmD9mf+q+6z6s/9 f8cl/RLQlOf6Rm4w9f2JjwII9YXwWhkf+3N0PrY8ud288hOjoqea2XCcRF2jhG39 X5n3qw1OBvm1b7AW+LJa33MHI22h+EKzZKl6p1VI6T3uGDfnz/J2GSqlWTbbf8tr soUFR7uTzcLk2avSp9L9LhGnPJh/URy8NZZW -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:01 2026 by rpki-client