This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer File: irwyQN37A-DMqmOXXycpc-cTlSs.cer (raw, json) Hash identifier: rxTCo+273rO9zVJlsS4fRA6hYcLTYPqf+RJaMJpDzHU= Subject key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD18D1561F968AD025D8A74C6414CAEA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 18 Jan 2026 14:40:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214223 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:8d:15:61:f9:68:ad:02:5d:8a:74:c6:41:4c:ae:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 18 14:40:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8abc3240ddfb03e0ccaa63975f272973e713952b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:5d:5d:66:3b:33:d7:19:b7:91:0e:17:ce: e0:01:f2:9f:82:fe:68:26:a6:24:6d:4f:ce:d8:95: 6d:9b:38:5d:1e:f4:62:80:57:8c:2a:3c:b2:4e:fa: c5:ff:79:ff:dc:1e:a9:e6:bc:36:0e:2f:00:a8:33: 8a:5f:5d:fb:f6:8c:04:ef:5e:10:55:1e:8f:db:f5: dd:8f:f2:75:ae:69:46:e1:26:fb:cd:55:dd:6e:f3: 39:36:ab:03:aa:ba:9c:c1:d5:c1:c7:99:82:c3:7a: c1:04:6f:54:5e:aa:85:ed:84:ce:10:ce:ee:fb:7c: d4:ea:f9:05:0d:1e:31:88:f2:e2:1f:ef:c2:81:47: d0:9c:e4:55:de:7e:47:af:88:22:9e:19:09:3b:f7: b3:2f:4a:29:e3:3d:a4:6f:e8:fb:a0:ab:8e:cb:c5: bb:45:61:b1:8c:94:fd:5a:10:8c:8f:fe:b3:03:4e: 73:d0:e3:dd:54:c2:cc:6f:df:e7:18:bd:a5:f4:f9: 13:34:40:5f:54:17:4e:38:7f:b4:9c:8f:1c:d0:04: 7a:44:e0:5e:ab:20:cd:ba:34:ae:60:7d:be:e7:8e: d0:a2:f9:a9:3e:aa:34:a5:89:c3:3c:8d:aa:f6:3f: bd:7d:22:65:6a:e8:0f:c9:6c:2e:12:1f:1b:45:7a: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214223 Signature Algorithm: sha256WithRSAEncryption af:ca:57:93:b6:ec:23:a9:b7:75:77:40:f6:64:85:32:db:75: 01:b3:cf:77:bf:70:e7:e3:b4:fa:f6:df:64:6c:e8:54:b1:7c: 9a:59:33:8a:e9:0d:9a:ac:60:d6:3f:67:63:60:4c:64:a2:66: bb:fa:4e:ab:a1:20:55:53:2d:70:98:31:ae:0a:98:6f:84:12: 49:41:d9:b7:75:85:24:f5:46:81:9d:57:6c:36:b9:a7:3d:f0: 6e:23:99:1e:50:22:81:ba:77:cf:b6:9c:33:0d:5a:8c:3b:b4: 80:a8:4d:8b:65:68:48:1a:e6:cc:77:82:77:af:d6:be:7f:a2: ec:4f:7b:b7:14:30:d7:50:6f:56:a8:79:e6:0a:78:ef:15:32: e7:e5:7d:e3:35:0b:c4:b6:c3:5a:46:17:ed:2d:76:0e:29:2c: 27:36:77:ae:f7:60:8c:4e:82:17:29:1e:a9:e1:d4:b3:be:c0: 7b:db:cc:ae:5f:bd:22:1b:a3:c9:7f:f1:00:11:b9:ee:7a:15: 26:4f:e9:fc:82:3b:8a:b4:8c:5f:59:c5:05:8d:db:9b:13:42: f3:21:1a:2f:2e:03:81:77:b8:bf:79:2e:8d:17:8d:bc:2f:5c: 14:b6:15:96:59:cc:c8:e3:3b:27:77:3f:4b:23:9a:1c:5a:89: cc:fb:a4:0e -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZvRjRVh+WitAl2KdMZBTK6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE4MTQ0MDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWJjMzI0MGRkZmIwM2UwY2NhYTYzOTc1ZjI3Mjk3M2U3MTM5NTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqpdXWY7M9cZt5EOF87gAfKfgv5o JqYkbU/O2JVtmzhdHvRigFeMKjyyTvrF/3n/3B6p5rw2Di8AqDOKX1379owE714Q VR6P2/Xdj/J1rmlG4Sb7zVXdbvM5NqsDqrqcwdXBx5mCw3rBBG9UXqqF7YTOEM7u +3zU6vkFDR4xiPLiH+/CgUfQnORV3n5Hr4ginhkJO/ezL0op4z2kb+j7oKuOy8W7 RWGxjJT9WhCMj/6zA05z0OPdVMLMb9/nGL2l9PkTNEBfVBdOOH+0nI8c0AR6ROBe qyDNujSuYH2+547QovmpPqo0pYnDPI2q9j+9fSJlaugPyWwuEh8bRXrr8QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFIq8MkDd+wPgzKpjl18nKXPnE5UrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJlZDRi N2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmVk NGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgzYzkwLzAvOEFCQzMyNDBEREZC MDNFMENDQUE2Mzk3NUYyNzI5NzNFNzEzOTUyQi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRM8w DQYJKoZIhvcNAQELBQADggEBAK/KV5O27COpt3V3QPZkhTLbdQGzz3e/cOfjtPr2 32Rs6FSxfJpZM4rpDZqsYNY/Z2NgTGSiZrv6TquhIFVTLXCYMa4KmG+EEklB2bd1 hST1RoGdV2w2uac98G4jmR5QIoG6d8+2nDMNWow7tICoTYtlaEga5sx3gnev1r5/ ouxPe7cUMNdQb1aoeeYKeO8VMuflfeM1C8S2w1pGF+0tdg4pLCc2d673YIxOghcp Hqnh1LO+wHvbzK5fvSIbo8l/8QARue56FSZP6fyCO4q0jF9ZxQWN25sTQvMhGi8u A4F3uL95Lo0XjbwvXBS2FZZZzMjjOyd3P0sjmhxaicz7pA4= -----END CERTIFICATE-----Generated at Wed Jan 21 05:43:18 2026 by rpki-client