This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer File: irxd5yn5l1idW-dpw3gkL3VFu4o.cer (raw, json) Hash identifier: 94Hcg1NE8W6Yhsmijax+f+hv6DND+Yjna0DR+91vk4I= Subject key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9924343A3A031B06DA9DC6D6067F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207549 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:99:24:34:3a:3a:03:1b:06:da:9d:c6:d6:06:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8abc5de729f997589d5be769c378242f7545bb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:9a:da:62:41:4b:9b:0b:b8:25:c1:62:1b: 4b:b3:a0:f7:f4:81:98:7b:38:0a:be:b8:b2:fe:a8: 37:f7:33:a3:3f:4e:3c:13:71:4b:f6:79:f7:54:70: 68:9f:94:ed:56:f9:d4:b1:97:25:26:0c:da:64:ef: 50:9d:b0:ca:36:37:b4:12:22:d7:46:6f:3a:66:77: e6:eb:36:d6:97:a0:7e:1e:70:aa:db:67:a0:87:2f: 01:44:47:df:96:e4:95:08:69:bc:c3:f0:07:44:c2: 63:e0:4d:96:cf:01:76:09:83:65:28:32:27:21:5a: 7e:78:ba:1d:1d:ea:24:1c:8f:37:bd:b5:d0:58:6a: 7f:38:37:86:c5:b8:3f:7c:dc:01:18:4c:48:da:84: 8e:22:7d:2b:52:82:f0:ac:e8:39:60:ee:25:51:61: d1:9f:a4:ad:53:2b:52:30:30:30:ce:c1:b1:2f:4e: 3c:1f:4e:e2:ab:de:8d:fc:46:d5:b5:e8:c7:1a:94: 3c:02:cc:5f:fc:ad:e1:f6:77:31:7e:11:c4:20:a3: cb:8d:70:a6:3b:65:67:d3:b9:71:b6:ae:81:91:31: e5:80:66:9b:2a:33:16:84:42:2f:e4:68:ac:8d:09: a0:6c:7d:bd:75:9a:10:1d:c0:90:b3:0b:84:65:23: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207549 Signature Algorithm: sha256WithRSAEncryption 61:27:c8:0f:45:ad:08:db:72:99:8d:86:6d:ee:81:f6:25:d2: 88:e9:04:c0:20:39:43:b0:2e:20:41:d2:f6:47:b2:d5:30:00: 12:bd:11:97:ec:e7:3b:36:56:87:fa:a0:c9:a6:96:1e:c0:a2: f2:84:22:e6:a8:4c:de:61:22:03:7d:7b:17:74:9e:cf:12:e3: ce:4f:20:ec:c3:dd:1e:00:1a:a0:54:10:71:2b:fd:85:9a:9a: a7:5a:41:cf:f6:17:c3:30:9c:a5:cc:9e:46:d1:d5:89:57:f8: f0:db:4e:52:b5:f0:42:b2:a2:23:ec:ae:bd:da:43:a2:11:f4: 16:1d:d9:e2:1c:72:2f:83:c9:be:1f:cc:92:49:c8:66:cc:97: 14:53:23:88:f1:d1:65:cd:1c:2e:be:57:3b:d0:a5:ca:a9:d8: fd:1c:54:5c:98:fe:c0:62:ce:5c:f7:a5:74:05:90:87:62:4f: 68:cb:37:16:fe:55:95:f5:0d:99:db:08:15:a1:98:37:22:86: 41:07:7b:0c:f4:ea:75:52:01:0d:86:ca:38:3d:f9:d7:02:a8: 9f:13:9a:0b:fe:47:f2:20:14:00:df:ae:f3:be:a4:bc:b7:08: 84:53:d3:7a:78:73:ca:71:c4:cd:00:39:85:ed:72:81:ce:1a: 25:f4:77:c3 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt265kkNDo6AxsG2p3G1gZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWJjNWRlNzI5Zjk5NzU4OWQ1YmU3NjljMzc4MjQyZjc1NDViYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ua2mJBS5sLuCXBYhtLs6D39IGY ezgKvriy/qg39zOjP048E3FL9nn3VHBon5TtVvnUsZclJgzaZO9QnbDKNje0EiLX Rm86Znfm6zbWl6B+HnCq22eghy8BREffluSVCGm8w/AHRMJj4E2WzwF2CYNlKDIn IVp+eLodHeokHI83vbXQWGp/ODeGxbg/fNwBGExI2oSOIn0rUoLwrOg5YO4lUWHR n6StUytSMDAwzsGxL048H07iq96N/EbVtejHGpQ8Asxf/K3h9ncxfhHEIKPLjXCm O2Vn07lxtq6BkTHlgGabKjMWhEIv5GisjQmgbH29dZoQHcCQswuEZSNcMwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIq8Xecp+ZdYnVvnacN4JC91RbuKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2JkNjU1 Zi1lMDdmLTQwY2ItYTAwNy03ZWQzYjkxODU5OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYmQ2NTVm LWUwN2YtNDBjYi1hMDA3LTdlZDNiOTE4NTk5MC8xL2lyeGQ1eW41bDFpZFctZHB3 M2drTDNWRnU0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqvTANBgkqhkiG9w0BAQsFAAOCAQEAYSfID0WtCNty mY2Gbe6B9iXSiOkEwCA5Q7AuIEHS9key1TAAEr0Rl+znOzZWh/qgyaaWHsCi8oQi 5qhM3mEiA317F3SezxLjzk8g7MPdHgAaoFQQcSv9hZqap1pBz/YXwzCcpcyeRtHV iVf48NtOUrXwQrKiI+yuvdpDohH0Fh3Z4hxyL4PJvh/MkknIZsyXFFMjiPHRZc0c Lr5XO9ClyqnY/RxUXJj+wGLOXPeldAWQh2JPaMs3Fv5VlfUNmdsIFaGYNyKGQQd7 DPTqdVIBDYbKOD351wKonxOaC/5H8iAUAN+u876kvLcIhFPTenhzynHEzQA5he1y gc4aJfR3ww== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:25 2026 by rpki-client