This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer File: iwGBfULP-LiBS70XAK3pFnQmjtc.cer (raw, json) Hash identifier: EhK0v9l4UgjJfYe7h5K/zAqaon8m44sY7AokAYxI0YE= Subject key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79109C284F9BDBDB8821EE336F817CD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212755 IP: 91.233.197.0/24 IP: 2a0a:b440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9c:28:4f:9b:db:db:88:21:ee:33:6f:81:7c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:ee:95:8c:d0:4f:b6:77:4a:cc:a0:56:41: c6:4b:14:46:d4:07:0a:5c:99:eb:55:36:95:44:e7: b3:8d:f3:15:75:36:72:5d:14:dc:21:e1:3e:b0:91: 1e:94:8f:fb:18:5d:20:12:18:0f:fc:be:92:a2:2c: 1b:41:70:bb:a8:31:fd:19:a0:b9:2d:83:0b:19:ce: 45:70:23:84:93:8c:05:f6:07:da:2d:43:01:89:dd: 22:90:db:c6:db:86:33:5d:e7:52:fe:e8:42:5e:b8: 57:35:80:9a:48:5b:93:80:38:36:1a:be:e7:cf:a8: df:a8:bf:ba:47:54:21:ca:01:21:8f:c2:b8:80:53: f6:3b:17:86:65:13:bf:ed:69:17:4e:fe:15:07:b6: 00:de:8e:c1:7a:ab:32:f6:35:26:a5:47:f4:ff:da: bc:e0:f2:2c:3c:80:a8:4d:ca:f7:72:60:89:98:7c: 31:3b:c2:fe:58:ce:a8:88:ac:55:8e:f9:8f:c4:bc: 29:37:5f:3b:97:a7:2f:20:3d:ae:09:8d:5e:5a:00: fb:ad:a5:5d:76:17:e2:3b:39:13:25:18:12:55:98: b2:20:0b:ee:5b:cd:35:03:38:af:a2:fd:18:b3:3d: a4:20:ab:78:3d:ee:a8:20:19:0a:af:1b:5f:1e:d4: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.197.0/24 IPv6: 2a0a:b440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212755 Signature Algorithm: sha256WithRSAEncryption 9b:83:51:2f:33:64:d9:9e:45:21:d9:64:da:02:8f:25:86:2f: 9d:83:d4:03:9c:56:b6:a3:32:ff:0c:c9:4d:12:18:f1:df:b6: 4e:1f:db:99:df:39:c6:6e:45:ae:7b:00:5f:80:70:cc:64:56: f4:0a:f3:89:f2:7f:1a:86:43:2d:5b:3c:d4:85:43:af:8f:8c: 9a:bf:d5:49:e4:4d:a8:c9:c5:3d:44:7f:4d:5d:a6:9d:74:e7: e4:32:ee:b8:f9:fb:18:7f:6a:7c:d1:63:40:76:0e:97:d4:e4: 2c:2c:fa:8a:a7:28:19:78:ae:17:e8:25:b3:46:ae:d0:56:95: 56:10:24:82:e4:3b:f9:69:0f:7c:38:76:67:28:7f:b0:4a:12: 0e:ca:6f:11:03:03:54:6c:f5:2e:77:28:d1:4a:d1:2d:de:2e: 80:2d:bb:f7:a1:60:93:22:23:51:27:20:30:be:21:4a:24:19: 66:9a:1b:cb:67:ec:a0:f3:90:25:5d:7f:f2:5e:92:77:45:6d: 44:de:52:96:d1:ac:03:d6:5b:a5:12:08:d4:1a:de:35:43:7c: f1:a7:a2:94:23:ec:32:00:b0:f3:e1:7d:22:8b:35:a0:1e:73: 34:e0:5a:40:fd:48:65:bc:06:88:63:5b:d9:89:aa:63:2b:94: 4d:6f:e9:6b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EJwoT5vb24gh7jNvgXzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjAxODE3ZDQyY2ZmOGI4ODE0YmJkMTcwMGFkZTkxNjc0MjY4ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdLulYzQT7Z3SsygVkHGSxRG1AcK XJnrVTaVROezjfMVdTZyXRTcIeE+sJEelI/7GF0gEhgP/L6SoiwbQXC7qDH9GaC5 LYMLGc5FcCOEk4wF9gfaLUMBid0ikNvG24YzXedS/uhCXrhXNYCaSFuTgDg2Gr7n z6jfqL+6R1QhygEhj8K4gFP2OxeGZRO/7WkXTv4VB7YA3o7Beqsy9jUmpUf0/9q8 4PIsPICoTcr3cmCJmHwxO8L+WM6oiKxVjvmPxLwpN187l6cvID2uCY1eWgD7raVd dhfiOzkTJRgSVZiyIAvuW801Azivov0Ysz2kIKt4Pe6oIBkKrxtfHtT+IQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2M0Y2Fj OS01YjYzLTQ3M2MtODhkNy1kN2E2NjBkNGNhYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzRjYWM5 LTViNjMtNDczYy04OGQ3LWQ3YTY2MGQ0Y2FhZC8xL2l3R0JmVUxQLUxpQlM3MFhB SzNwRm5RbWp0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+nFMA0EAgACMAcDBQMqCrRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/EzANBgkqhkiG9w0BAQsFAAOCAQEAm4NRLzNk2Z5F Idlk2gKPJYYvnYPUA5xWtqMy/wzJTRIY8d+2Th/bmd85xm5FrnsAX4BwzGRW9Arz ifJ/GoZDLVs81IVDr4+Mmr/VSeRNqMnFPUR/TV2mnXTn5DLuuPn7GH9qfNFjQHYO l9TkLCz6iqcoGXiuF+gls0au0FaVVhAkguQ7+WkPfDh2Zyh/sEoSDspvEQMDVGz1 Lnco0UrRLd4ugC2796FgkyIjUScgML4hSiQZZpoby2fsoPOQJV1/8l6Sd0VtRN5S ltGsA9ZbpRII1BreNUN88aeilCPsMgCw8+F9Ios1oB5zNOBaQP1IZbwGiGNb2Ymq YyuUTW/paw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:27 2026 by rpki-client