This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer File: IwWuBiEvPC-PVzoLVJJEHljyHE4.cer (raw, json) Hash identifier: 5+pWZdmkhD/ZZrC9loYb7N0Q2B8gk9dttjK3ahK/PSw= Subject key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759637EB768AEA60CAD7328AF2A653D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.119.48.0/22 IP: 2a09:b5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:63:7e:b7:68:ae:a6:0c:ad:73:28:af:2a:65:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:98:55:4c:7a:24:ed:3e:f1:e9:8e:59:ca:5b: 05:9d:e4:a1:48:76:29:41:b3:cd:69:16:8c:75:40: 61:f4:f5:03:42:60:ab:4c:12:2e:78:77:d3:67:84: d2:91:3a:ac:3f:e9:92:db:f6:e0:03:63:ef:e9:29: b1:ff:85:fd:b8:b8:60:57:39:d2:42:07:81:58:ee: a1:71:5f:03:6a:91:4c:69:6b:33:8a:c7:5f:1e:02: 47:a9:bb:35:4f:c0:96:3c:78:3c:49:e3:63:4e:d0: 13:ca:e3:31:36:89:56:2e:58:63:9a:5b:b8:cd:de: 61:16:ab:1b:3b:3d:cf:1e:cd:e3:1c:38:0e:b9:c7: fb:8e:76:da:d5:0d:16:14:d0:68:3c:22:f5:22:c3: 89:12:90:b8:e0:19:aa:ba:59:72:6e:45:0e:f7:43: 75:07:0f:5f:34:3e:c7:12:64:00:77:a1:e7:34:73: b8:1a:4d:f0:ea:02:d5:71:40:ba:bb:5c:fc:63:a8: 8b:03:60:72:dc:86:c0:8a:0b:c0:f4:47:38:67:1c: 0f:8b:9e:cb:7b:bf:f3:65:25:ff:00:f4:0b:df:ce: e6:b7:52:c9:5a:9e:4a:c0:38:95:1f:83:c9:33:6c: ff:41:4c:4e:ff:46:f9:58:98:6a:c3:c2:95:c9:e4: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.48.0/22 IPv6: 2a09:b5c0::/29 Signature Algorithm: sha256WithRSAEncryption a3:58:f3:9e:f4:2f:82:18:0d:1b:00:d8:ef:53:c9:21:b5:01: 84:88:f0:23:3f:4d:55:e4:f6:fe:4b:c6:b0:89:c7:71:2d:9d: 89:92:52:ba:5e:4a:c4:05:85:96:e5:d2:d2:bf:63:44:38:a8: f5:41:d3:1a:fd:e1:be:fb:71:9d:50:9e:b9:58:d3:3c:df:90: ea:9a:ed:ac:08:d1:14:74:be:33:ea:b1:47:d6:46:8f:84:43: c2:d4:06:f6:c2:53:a7:bf:18:bd:34:7d:de:37:5d:83:82:4c: fd:1f:1b:15:b6:ca:34:70:84:e2:63:e4:1b:23:91:59:47:c5: 58:65:5f:07:a7:25:9d:4a:7c:fe:27:2a:3c:42:cd:15:7d:23: 25:4b:8e:81:2e:08:c4:f8:f8:6b:fc:03:4a:2a:c3:a1:e9:71: f3:b0:8e:f8:11:db:61:6d:d4:d8:5d:e0:9f:56:fa:2b:2b:b9: 60:a9:7a:95:ad:a1:46:38:33:d7:3e:33:9c:d1:3a:18:13:26: e7:39:aa:78:3f:b1:be:d7:89:1e:b0:f4:e7:0a:16:c0:24:40: b0:39:5b:02:92:cd:ce:5b:58:14:e2:bb:bd:53:31:ed:90:4d: 82:5c:82:6f:f9:8a:70:9c:09:ae:df:56:c3:66:ab:3a:43:e2: f5:74:8c:71 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WWN+t2iupgytcyivKmU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA1YWUwNjIxMmYzYzJmOGY1NzNhMGI1NDkyNDQxZTU4ZjIxYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JhVTHok7T7x6Y5ZylsFneShSHYp QbPNaRaMdUBh9PUDQmCrTBIueHfTZ4TSkTqsP+mS2/bgA2Pv6Smx/4X9uLhgVznS QgeBWO6hcV8DapFMaWszisdfHgJHqbs1T8CWPHg8SeNjTtATyuMxNolWLlhjmlu4 zd5hFqsbOz3PHs3jHDgOucf7jnba1Q0WFNBoPCL1IsOJEpC44BmqullybkUO90N1 Bw9fND7HEmQAd6HnNHO4Gk3w6gLVcUC6u1z8Y6iLA2By3IbAigvA9Ec4ZxwPi57L e7/zZSX/APQL387mt1LJWp5KwDiVH4PJM2z/QUxO/0b5WJhqw8KVyeT5tQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCMFrgYhLzwvj1c6C1SSRB5Y8hxOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2E2Y2Fk ZS1kNDI1LTRkODktYTBjMS1jZjZiMjNkMjYxN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvYTZjYWRl LWQ0MjUtNGQ4OS1hMGMxLWNmNmIyM2QyNjE3Yy8xL0l3V3VCaUV2UEMtUFZ6b0xW SkpFSGxqeUhFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCXHcwMA0EAgACMAcDBQMqCbXAMA0GCSqGSIb3 DQEBCwUAA4IBAQCjWPOe9C+CGA0bANjvU8khtQGEiPAjP01V5Pb+S8awicdxLZ2J klK6XkrEBYWW5dLSv2NEOKj1QdMa/eG++3GdUJ65WNM835Dqmu2sCNEUdL4z6rFH 1kaPhEPC1Ab2wlOnvxi9NH3eN12Dgkz9HxsVtso0cITiY+QbI5FZR8VYZV8HpyWd Snz+Jyo8Qs0VfSMlS46BLgjE+Phr/ANKKsOh6XHzsI74EdthbdTYXeCfVvorK7lg qXqVraFGODPXPjOc0ToYEybnOap4P7G+14kesPTnChbAJECwOVsCks3OW1gU4ru9 UzHtkE2CXIJv+YpwnAmu31bDZqs6Q+L1dIxx -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:01 2026 by rpki-client