This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer (raw, json) Hash identifier: HB3hE/eo4JWXSD06L6B91VZ3KBqRYBO3ZiaD4QCJR4A= Subject key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC1924EADD061079CEFF41E7D23E9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15550 IP: 193.25.224.0/20 IP: 2001:678:9fc::/48 IP: 2001:67c:242c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:19:24:ea:dd:06:10:79:ce:ff:41:e7:d2:3e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:f4:22:c2:31:5d:f0:2e:93:da:dc:bc:54: 34:0d:d2:9b:7b:27:d9:71:2f:80:47:7c:9d:8e:20: 6e:24:ef:05:91:aa:b7:1c:03:c5:ad:41:44:af:8b: 05:fb:02:25:18:0b:c2:41:5f:45:dd:a4:af:50:aa: d7:7c:69:00:5c:5b:f4:7f:f8:c7:57:32:63:f7:ff: 96:14:dd:c7:01:ef:f4:a9:31:35:73:45:50:76:ea: 9f:10:a3:8a:5d:e5:2d:00:7a:c3:ff:3f:01:fb:63: d8:0f:18:03:60:ec:b4:90:6f:f7:40:80:c1:3f:6c: ec:8a:e3:8d:5a:58:88:87:f8:bd:51:78:1d:1e:58: 92:a3:8a:b3:75:b4:f8:f4:06:ab:ab:71:cd:b6:f7: d6:a3:38:5c:76:de:68:bf:de:57:bc:88:c4:6d:d4: ff:a6:82:29:c3:2b:03:23:c8:9b:4d:e3:9d:9a:de: 49:98:3e:a8:0a:93:00:41:c2:b7:dc:b6:cf:5c:d0: f3:fe:8d:9d:34:68:cc:c3:fb:58:e9:e0:6c:98:9b: 9a:6d:c9:3b:bf:d1:e1:39:15:88:24:65:fa:50:29: 79:cc:26:d8:7e:0c:0e:9a:5b:c3:22:16:19:b2:ac: 9f:34:5a:77:58:61:af:ea:b7:00:a6:fb:f2:fc:be: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.224.0/20 IPv6: 2001:678:9fc::/48 2001:67c:242c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15550 Signature Algorithm: sha256WithRSAEncryption 8d:e7:07:24:af:46:19:60:bb:82:a9:ab:f2:28:01:12:32:0c: f1:b6:91:2e:bd:91:c2:b5:7e:cc:5a:a7:94:c6:56:0d:0b:80: 89:93:23:0d:a4:bc:33:6c:f8:20:3d:42:c0:0a:81:33:f3:a3: 96:80:36:0b:18:29:28:22:91:85:07:a6:af:7d:78:71:5b:9f: 49:43:7a:ff:66:b8:41:2b:8b:a8:ba:70:58:68:fe:6a:e3:4b: 14:cc:21:f1:35:c9:b6:6f:a7:72:95:5b:86:a5:f9:7f:58:32: 44:da:50:c8:22:57:2e:a5:27:dc:17:a2:25:3b:ea:c5:a4:ae: 46:24:f3:0b:98:34:6d:84:78:dd:c1:a6:15:45:3c:a0:b4:ac: 7f:8c:16:c5:54:8e:9f:52:38:80:93:a1:2d:ba:5f:88:41:0a: 9c:97:89:ac:95:d0:c5:64:25:77:dd:56:00:1f:15:2d:9b:20: 86:23:83:13:23:82:da:7e:43:5d:28:0b:29:8c:49:32:67:c9: 0c:e0:28:41:b2:d8:8f:44:23:32:3c:9b:6d:bd:bf:0d:69:0f: e0:b6:7d:f7:6a:75:1f:07:f4:89:ea:5e:b3:1a:d6:41:e3:29: af:0f:91:36:11:db:99:54:72:a7:98:a3:b0:18:d7:41:70:82: 7e:c3:e4:0e -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt57Bkk6t0GEHnO/0Hn0j6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM1YTBjMmFjM2IxNjc5NDk5YTk2YmUzMWU0M2JlODVjZjA5OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3D0IsIxXfAuk9rcvFQ0DdKbeyfZ cS+AR3ydjiBuJO8Fkaq3HAPFrUFEr4sF+wIlGAvCQV9F3aSvUKrXfGkAXFv0f/jH VzJj9/+WFN3HAe/0qTE1c0VQduqfEKOKXeUtAHrD/z8B+2PYDxgDYOy0kG/3QIDB P2zsiuONWliIh/i9UXgdHliSo4qzdbT49Aarq3HNtvfWozhcdt5ov95XvIjEbdT/ poIpwysDI8ibTeOdmt5JmD6oCpMAQcK33LbPXNDz/o2dNGjMw/tY6eBsmJuabck7 v9HhORWIJGX6UCl5zCbYfgwOmlvDIhYZsqyfNFp3WGGv6rcApvvy/L5dqQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFCLFoMKsOxZ5SZqWvjHkO+hc8JlTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2VlZWRm Ni01MmMxLTRhMDEtOTA5Ny1hNmNmMTZjODVjZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZWVlZGY2 LTUyYzEtNGEwMS05MDk3LWE2Y2YxNmM4NWNlNC8xL0lzV2d3cXc3Rm5sSm1wYS1N ZVE3NkZ6d21WTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQEwRngMBgEAgACMBIDBwAgAQZ4CfwDBwAgAQZ8 JCwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPL4wDQYJKoZIhvcNAQELBQADggEB AI3nBySvRhlgu4Kpq/IoARIyDPG2kS69kcK1fsxap5TGVg0LgImTIw2kvDNs+CA9 QsAKgTPzo5aANgsYKSgikYUHpq99eHFbn0lDev9muEEri6i6cFho/mrjSxTMIfE1 ybZvp3KVW4al+X9YMkTaUMgiVy6lJ9wXoiU76sWkrkYk8wuYNG2EeN3BphVFPKC0 rH+MFsVUjp9SOICToS26X4hBCpyXiayV0MVkJXfdVgAfFS2bIIYjgxMjgtp+Q10o CymMSTJnyQzgKEGy2I9EIzI8m229vw1pD+C2ffdqdR8H9InqXrMa1kHjKa8PkTYR 25lUcqeYo7AY10Fwgn7D5A4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:45:36 2026 by rpki-client