This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer File: IwbLbMzQnnXtGfwG-1kkzyejmMM.cer (raw, json) Hash identifier: HKUWlZD5FNSs4x7i4JiJgYs1d0Jn6bxY3exi6yx6dPU= Subject key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC83AA4E2C5E92B5848F9A9BACCB34F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.120.19.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3a:a4:e2:c5:e9:2b:58:48:f9:a9:ba:cc:b3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:c8:42:7c:94:de:db:e8:10:b8:7a:dc:46: cb:ad:63:91:70:91:f9:25:39:9e:0c:19:fb:65:09: 5e:85:c4:a3:67:69:6e:16:9e:09:c7:16:5e:e6:9a: 01:68:70:48:cf:26:d0:24:5d:63:e3:85:22:31:d0: eb:b2:9b:e9:64:f5:25:ac:3c:ac:99:a3:a8:52:88: c8:2c:56:7d:49:12:d9:cd:fc:91:11:63:f2:81:b9: 16:f5:b9:c3:cd:8a:cc:59:bf:46:9c:56:47:67:91: 83:10:38:e9:fb:d9:7c:3d:15:81:5f:66:f4:3b:d6: da:77:62:26:7c:91:58:c5:19:d9:8d:c8:11:f8:59: 43:2f:7d:a2:df:57:b9:4b:f7:67:9b:54:b8:5e:6f: 6a:3d:60:55:79:6d:ec:a7:2a:1c:f5:8f:9b:4f:df: 5f:98:d5:07:4c:3a:fd:9a:1e:dd:5c:4c:5d:9c:e3: 1d:44:41:d5:4b:a8:1f:83:87:69:92:7c:b6:ff:4f: 7d:bd:97:a2:37:aa:16:45:48:4a:3a:e5:e3:70:9f: eb:8f:f0:01:3a:1e:ea:a7:7f:66:72:c6:b8:9e:58: 08:3d:9c:a5:b9:63:30:3e:39:b0:f2:b8:f3:de:72: ce:9e:ac:b7:46:25:91:0c:c5:3d:77:9b:84:38:b1: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.19.0/24 Signature Algorithm: sha256WithRSAEncryption 72:90:7b:10:06:c8:9d:a0:3c:cf:d0:e6:e5:3a:9b:67:67:78: 30:60:33:08:e4:2a:7a:e8:58:61:a5:cf:7b:f8:0c:0e:e3:79: c7:fe:d9:60:4f:4f:33:f0:66:cd:db:8c:14:77:1c:ce:d9:7b: 21:f2:e1:bd:03:4b:65:9e:8f:b3:a9:7c:c2:ae:2b:81:35:c0: 81:52:be:18:58:35:79:95:10:dc:09:36:2b:73:2a:a1:87:a1: c9:5b:9b:95:78:e4:a6:19:43:8f:52:84:b0:79:e6:d0:15:ad: 48:42:96:4c:0d:4f:58:29:0b:d4:60:fd:97:36:2d:ec:48:4b: 9a:94:9d:db:96:ae:db:da:27:cb:ec:c2:c6:a9:42:26:86:54: 02:8e:8b:a9:75:7b:1f:e8:f6:93:cb:41:dd:48:72:c1:35:1a: 70:7a:cd:d1:4d:3d:7b:47:d9:ca:64:f6:d4:25:32:04:7b:ba: 4b:1d:10:b5:53:5c:e8:fb:3f:6f:e2:1b:27:be:b2:80:20:59: 9e:a8:fd:01:84:75:0f:28:e6:fa:20:7e:ff:c0:91:db:a7:a5: 91:67:cd:f1:5d:a1:73:d9:86:99:91:e5:53:fb:2d:dd:19:7b: 1a:f6:b0:78:24:4d:a4:7c:f0:f1:91:1a:aa:5e:73:66:a2:2b: 06:bf:a0:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yDqk4sXpK1hI+am6zLNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA2Y2I2Y2NjZDA5ZTc1ZWQxOWZjMDZmYjU5MjRjZjI3YTM5OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX7IQnyU3tvoELh63EbLrWORcJH5 JTmeDBn7ZQlehcSjZ2luFp4JxxZe5poBaHBIzybQJF1j44UiMdDrspvpZPUlrDys maOoUojILFZ9SRLZzfyREWPygbkW9bnDzYrMWb9GnFZHZ5GDEDjp+9l8PRWBX2b0 O9bad2ImfJFYxRnZjcgR+FlDL32i31e5S/dnm1S4Xm9qPWBVeW3spyoc9Y+bT99f mNUHTDr9mh7dXExdnOMdREHVS6gfg4dpkny2/099vZeiN6oWRUhKOuXjcJ/rj/AB Oh7qp39mcsa4nlgIPZyluWMwPjmw8rjz3nLOnqy3RiWRDMU9d5uEOLE3yQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCMGy2zM0J517Rn8BvtZJM8no5jDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2Q5ZGQ4 Mi05YmI5LTQ4NGMtODFjYi04M2JkY2FkMDIwNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZDlkZDgy LTliYjktNDg0Yy04MWNiLTgzYmRjYWQwMjA0Ny8xL0l3YkxiTXpRbm5YdEdmd0ct MWtrenllam1NTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHgTMA0GCSqGSIb3DQEBCwUAA4IBAQBykHsQ BsidoDzP0OblOptnZ3gwYDMI5Cp66Fhhpc97+AwO43nH/tlgT08z8GbN24wUdxzO 2Xsh8uG9A0tlno+zqXzCriuBNcCBUr4YWDV5lRDcCTYrcyqhh6HJW5uVeOSmGUOP UoSweebQFa1IQpZMDU9YKQvUYP2XNi3sSEualJ3blq7b2ifL7MLGqUImhlQCjoup dXsf6PaTy0HdSHLBNRpwes3RTT17R9nKZPbUJTIEe7pLHRC1U1zo+z9v4hsnvrKA IFmeqP0BhHUPKOb6IH7/wJHbp6WRZ83xXaFz2YaZkeVT+y3dGXsa9rB4JE2kfPDx kRqqXnNmoisGv6Bq -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:06 2026 by rpki-client