This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer (raw, json) Hash identifier: Mz4v1zNTwtcInrNhaQaxq1+5XaAVCW158kHUIOxbR9g= Subject key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82065B0FD7F16E5EA961337A0C3C97 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.203.234.0/24 IP: 91.241.47.0/24 IP: 193.19.110.0/24 IP: 193.106.97.0/24 IP: 194.242.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:06:5b:0f:d7:f1:6e:5e:a9:61:33:7a:0c:3c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8968883765549991d7ff376126d58a909a14b8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:59:b7:64:07:48:94:37:5d:75:38:d9:41: aa:ed:9c:0c:b8:24:9e:b1:93:9b:ac:bc:d0:17:7a: 76:08:3b:02:1c:a6:af:11:8f:2d:ea:59:b9:84:53: 79:dc:3f:2b:8e:5d:5f:81:4b:70:2a:e8:70:e6:39: 02:93:d6:8b:ea:90:90:d2:1a:db:8f:36:03:ec:30: 63:d4:51:06:90:51:09:54:e0:1c:4b:2a:e2:81:3f: f1:6d:ee:03:cf:38:f4:c5:23:ed:c8:e7:90:30:88: 8b:ac:95:62:30:b1:36:fb:67:70:87:db:ed:35:36: c1:2b:08:15:c1:8f:45:6b:d8:57:36:2b:d7:0a:85: 8d:a9:89:1f:71:7d:20:85:cc:f1:9b:98:62:90:92: be:fb:c7:43:fa:06:80:0b:19:63:f2:0c:78:96:96: 46:67:7d:06:88:19:65:44:eb:e7:ff:58:63:6f:c2: 59:5c:cd:4b:34:05:93:d8:56:b8:09:86:00:c4:86: f8:5b:59:f3:12:fc:81:52:4e:39:26:32:c9:1b:73: 18:12:ad:d5:57:be:c9:2f:37:13:37:9f:95:16:c4: 4f:82:d4:b4:a3:22:fc:6b:51:aa:51:17:54:58:4e: 0e:d8:f7:f1:34:78:64:90:09:5d:23:53:ea:f2:14: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.234.0/24 91.241.47.0/24 193.19.110.0/24 193.106.97.0/24 194.242.26.0/23 Signature Algorithm: sha256WithRSAEncryption 81:84:55:40:b8:d8:8e:f8:d6:41:92:d2:2b:a9:42:8e:e7:fe: 55:19:85:5a:41:6c:82:3a:11:13:52:13:05:b1:08:7f:65:4d: 6f:e3:fb:f6:91:f1:76:46:e2:4e:75:85:f4:8a:40:ce:8f:d7: 58:2c:27:c6:2b:14:13:ff:58:26:6c:18:e9:52:5e:c1:d6:52: b1:83:37:f8:95:d1:b9:35:a6:12:99:b4:3c:64:d6:cb:25:23: 5e:81:d0:c7:de:f0:5c:db:9b:96:15:77:c3:0a:ef:ad:e0:8e: 63:58:1c:8c:3b:60:b5:e7:ba:25:2b:3c:ae:04:6c:38:17:9c: a5:fa:7f:39:bd:56:7e:1e:84:0b:5c:1b:51:43:c3:74:ca:7e: 5e:f0:9c:3f:c9:77:7d:90:a5:cf:e4:3c:cb:b0:6f:52:ac:84: 91:99:13:16:94:7c:46:e5:b6:3b:19:fb:f8:94:a3:26:a5:e5: 0b:11:46:7e:8e:55:28:fb:e2:61:d2:ec:54:5a:3f:a2:ef:27: 32:9c:c9:a2:d6:43:63:57:08:74:eb:8f:d8:ed:d7:2c:e7:d3: 82:69:3d:08:0d:6e:86:93:a4:05:fd:87:51:26:3e:6a:8f:a8: c5:d2:a3:f7:3e:0d:6e:8a:f2:01:ac:af:3b:6b:7f:eb:80:2e: d7:65:18:12 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt/ggZbD9fxbl6pYTN6DDyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTY4ODgzNzY1NTQ5OTkxZDdmZjM3NjEyNmQ1OGE5MDlhMTRiOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryNZt2QHSJQ3XXU42UGq7ZwMuCSe sZObrLzQF3p2CDsCHKavEY8t6lm5hFN53D8rjl1fgUtwKuhw5jkCk9aL6pCQ0hrb jzYD7DBj1FEGkFEJVOAcSyrigT/xbe4Dzzj0xSPtyOeQMIiLrJViMLE2+2dwh9vt NTbBKwgVwY9Fa9hXNivXCoWNqYkfcX0ghczxm5hikJK++8dD+gaACxlj8gx4lpZG Z30GiBllROvn/1hjb8JZXM1LNAWT2Fa4CYYAxIb4W1nzEvyBUk45JjLJG3MYEq3V V77JLzcTN5+VFsRPgtS0oyL8a1GqURdUWE4O2PfxNHhkkAldI1Pq8hQavwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFIloiDdlVJmR1/83YSbVipCaFLjxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2MxNzFk NC0wNjcyLTQxNGQtYTAyZC1jZDAyN2EwNjgxYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYzE3MWQ0 LTA2NzItNDE0ZC1hMDJkLWNkMDI3YTA2ODFiZC8xL2lXaUlOMlZVbVpIWF96ZGhK dFdLa0pvVXVQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQAW8vqAwQAW/EvAwQAwRNuAwQAwWphAwQBwvIa MA0GCSqGSIb3DQEBCwUAA4IBAQCBhFVAuNiO+NZBktIrqUKO5/5VGYVaQWyCOhET UhMFsQh/ZU1v4/v2kfF2RuJOdYX0ikDOj9dYLCfGKxQT/1gmbBjpUl7B1lKxgzf4 ldG5NaYSmbQ8ZNbLJSNegdDH3vBc25uWFXfDCu+t4I5jWByMO2C157olKzyuBGw4 F5yl+n85vVZ+HoQLXBtRQ8N0yn5e8Jw/yXd9kKXP5DzLsG9SrISRmRMWlHxG5bY7 Gfv4lKMmpeULEUZ+jlUo++Jh0uxUWj+i7ycynMmi1kNjVwh064/Y7dcs59OCaT0I DW6Gk6QF/YdRJj5qj6jF0qP3Pg1uivIBrK87a3/rgC7XZRgS -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:10 2026 by rpki-client