This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer File: IwNA0n5LJPkSSXcyLts2lC4tFgw.cer (raw, json) Hash identifier: FZS3YMUPqLZMQ4yl0l03R4OzsqRvoslzM43pT3297Xc= Subject key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6EE40FDF584D64C193F5FF418ED69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24848 AS: 30778 IP: 81.6.128.0/18 IP: 81.26.0.0/19 IP: 2a00:cd80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ee:40:fd:f5:84:d6:4c:19:3f:5f:f4:18:ed:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=230340d27e4b24f9124977322edb36942e2d160c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:75:29:da:ee:a5:8d:0f:39:fb:b9:70:17: 60:79:95:54:79:e3:22:05:a8:2b:0c:50:71:df:2b: f1:aa:c7:6c:a3:ea:22:3b:0c:94:8a:d3:c3:6d:e5: c2:8f:5c:1b:6d:92:78:28:c7:3b:2a:af:c1:63:25: e8:ae:2b:69:37:2a:c2:01:e5:2a:1d:04:6b:00:46: 1a:1e:a7:7c:e1:ed:82:74:9d:a6:39:94:7d:77:12: 19:0a:39:0c:3e:80:33:91:b8:f7:41:b7:67:56:51: 54:a7:39:78:ed:a4:76:46:c9:5a:99:bd:13:6a:9e: a9:62:88:7a:e9:46:94:da:23:eb:15:0f:40:2f:d7: 63:ce:9c:d1:e5:4a:8b:9b:69:1c:d9:ce:c2:0d:6b: 4b:ac:fd:a8:4d:41:41:15:61:ba:c9:8d:4c:fe:2d: bd:42:db:18:ab:f3:e6:aa:83:3d:04:27:bb:a3:17: b4:16:42:ca:b8:26:ec:79:af:88:82:0a:90:23:c1: 15:f2:ff:54:c2:f7:17:71:b7:63:4a:a7:b1:34:52: 07:02:42:13:16:10:5e:f7:16:00:fe:69:60:63:68: 7f:c7:85:63:41:a6:cd:d8:27:19:8e:38:c6:4a:ad: a7:47:fd:9b:a7:a9:3c:29:3c:c7:ac:5b:9a:d6:c3: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.6.128.0/18 81.26.0.0/19 IPv6: 2a00:cd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24848 30778 Signature Algorithm: sha256WithRSAEncryption 2c:7d:a0:ec:18:a3:70:12:d5:7c:02:a9:9e:7e:4d:4b:f9:f4: 7a:b2:46:1f:02:bd:44:23:36:ab:93:e8:95:e0:7d:91:82:e3: 94:cb:5f:68:dd:53:77:c0:63:3d:9f:13:cc:80:11:f2:fc:59: 9d:d0:10:53:8a:03:6b:d2:8e:14:7d:13:67:81:a8:de:bf:20: 3f:65:6b:ab:b0:93:e2:ea:d0:24:f4:c5:52:8b:35:83:1e:13: 37:14:97:46:6c:d8:fd:ee:55:d8:ef:85:57:d6:2c:9c:5f:c7: 22:a8:ce:6b:f1:f3:16:f9:5a:92:bd:66:53:22:f5:a0:8f:bd: 24:98:33:ec:59:d4:cf:72:1e:14:26:35:c2:ee:27:93:bd:3c: a4:4b:dc:be:79:ae:df:40:e3:f3:ba:d3:5d:f3:88:dc:96:df: 42:66:6c:a1:fd:df:b3:22:bb:22:d3:6a:d1:2a:27:64:18:ae: 0f:22:34:ef:ec:d8:b5:cf:22:d1:5d:4d:e6:ab:88:ac:af:fa: 02:4c:16:df:a2:68:dc:1c:6c:d7:79:39:40:c0:30:cd:93:1d: 70:b7:9c:aa:68:d9:4d:52:20:26:76:c4:b6:43:69:7b:29:d3: 44:c1:b9:f2:bf:6b:2f:f1:13:f4:36:48:eb:9c:ab:5a:f1:a9: 6e:d2:1c:2a -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt3xu5A/fWE1kwZP1/0GO1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzAzNDBkMjdlNGIyNGY5MTI0OTc3MzIyZWRiMzY5NDJlMmQxNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bl1KdrupY0POfu5cBdgeZVUeeMi BagrDFBx3yvxqsdso+oiOwyUitPDbeXCj1wbbZJ4KMc7Kq/BYyXoritpNyrCAeUq HQRrAEYaHqd84e2CdJ2mOZR9dxIZCjkMPoAzkbj3QbdnVlFUpzl47aR2Rslamb0T ap6pYoh66UaU2iPrFQ9AL9djzpzR5UqLm2kc2c7CDWtLrP2oTUFBFWG6yY1M/i29 QtsYq/PmqoM9BCe7oxe0FkLKuCbsea+IggqQI8EV8v9UwvcXcbdjSqexNFIHAkIT FhBe9xYA/mlgY2h/x4VjQabN2CcZjjjGSq2nR/2bp6k8KTzHrFua1sNVLwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzdiZGY1 Mi02YWM1LTRjMjQtYmZkMC1iNTcwOTA3YjU5ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvN2JkZjUy LTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTllYi8xL0l3TkEwbjVMSlBrU1NYY3lM dHMybEM0dEZndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGUQaAAwQFURoAMA0EAgACMAcDBQAqAM2AMB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAmEQAgJ4OjANBgkqhkiG9w0BAQsFAAOCAQEA LH2g7BijcBLVfAKpnn5NS/n0erJGHwK9RCM2q5PoleB9kYLjlMtfaN1Td8BjPZ8T zIAR8vxZndAQU4oDa9KOFH0TZ4Go3r8gP2Vrq7CT4urQJPTFUos1gx4TNxSXRmzY /e5V2O+FV9YsnF/HIqjOa/HzFvlakr1mUyL1oI+9JJgz7FnUz3IeFCY1wu4nk708 pEvcvnmu30Dj87rTXfOI3JbfQmZsof3fsyK7ItNq0SonZBiuDyI07+zYtc8i0V1N 5quIrK/6AkwW36Jo3Bxs13k5QMAwzZMdcLecqmjZTVIgJnbEtkNpeynTRMG58r9r L/ET9DZI65yrWvGpbtIcKg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:15 2026 by rpki-client