This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer File: r22p1WtCwrgWsa5rGFElq_IVk-8.cer (raw, json) Hash identifier: tuMkBmwTOoXK5sPCRztqzJ30P36SCLGer31Paa3SN1A= Subject key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D4C4C10C828E3E0487A2FF0AAD1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21190 AS: 25090 IP: 193.8.222.0/23 IP: 194.56.96.0 -- 194.56.123.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d4:c4:c1:0c:82:8e:3e:04:87:a2:ff:0a:ad:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:94:79:1f:47:fc:a7:1d:31:56:92:31:1e: 6f:07:14:d6:94:5a:5e:4e:6e:22:88:a0:19:86:e5: 21:85:4e:38:d1:df:dc:77:92:bc:c9:33:26:f5:a2: 3d:9e:ce:f0:7b:1a:ca:6f:e5:e4:00:3b:3d:1f:04: 74:78:c7:2e:d7:cf:00:60:ab:bd:2b:a9:d3:33:ba: 90:82:aa:0f:fa:d3:02:42:77:eb:8f:9e:86:18:b4: 0a:51:e1:29:65:68:c2:13:1f:d6:91:54:02:46:f7: 5e:1d:87:38:64:98:ca:42:d5:fb:f5:24:3d:af:b4: 6b:35:4c:79:57:96:a7:47:7d:cb:63:6b:6b:26:fb: d7:76:95:c8:13:cb:57:ce:0c:4e:34:5b:98:62:33: 18:da:a4:68:58:e0:e9:c4:3e:87:e5:a2:93:d1:db: 49:72:0a:d7:b9:c0:50:54:e8:f4:a4:92:0d:3f:f7: bd:8d:c6:19:23:6e:32:cb:55:f6:9d:ca:ff:b1:af: 85:e0:6b:15:d6:d5:49:fd:9a:3e:d1:80:99:d9:9b: b3:c0:5c:a2:3d:64:34:c2:13:9b:3e:fc:b6:55:78: 1d:69:d7:d3:56:40:97:bc:41:97:e3:8b:98:12:69: 59:e1:c1:a3:6d:45:4a:4d:03:34:64:c0:33:84:6d: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.222.0/23 194.56.96.0-194.56.123.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21190 25090 Signature Algorithm: sha256WithRSAEncryption 85:b1:69:4e:6b:44:63:d9:ca:22:c7:0b:57:15:2c:75:c1:45: da:eb:7d:30:5f:37:b8:e8:5f:04:94:b4:a1:f2:8b:bd:12:60: 37:ea:ed:e0:9b:83:88:6f:52:5a:84:89:b7:61:8a:de:1d:4d: a4:c1:7f:a5:7f:69:bd:fe:c4:e0:40:18:10:13:d3:16:f0:7a: 71:a5:dc:6e:b8:21:6a:73:5a:11:b7:3a:80:09:6e:de:53:b6: 91:e4:31:55:4b:cf:9e:c3:81:2b:4b:05:14:38:86:e7:7b:06: 2a:05:99:0d:de:7d:9a:56:85:f9:ea:42:45:95:a7:fa:f8:a2: 27:34:15:09:e2:aa:a9:07:80:08:4e:5e:26:ee:fd:e6:cc:06: 74:54:b3:24:2d:9a:91:b3:ff:ad:3a:33:ec:81:a6:1f:fb:1d: ac:d5:86:15:47:8e:69:03:3a:44:56:d3:43:8f:48:52:fa:79: e7:a4:40:5b:43:b4:8e:50:c9:9a:05:1d:d5:34:a7:78:34:22: 52:3e:93:a9:60:30:e9:da:49:f5:1e:9d:1e:3b:25:5e:95:db: 48:04:70:85:e4:68:97:1a:f6:60:d8:42:f1:08:87:01:54:be: 33:e9:e1:74:bb:32:7c:54:cb:cb:2e:2b:41:d2:29:61:20:4e: 8a:25:19:53 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8gNTEwQyCjj4Eh6L/Cq0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjZkYTlkNTZiNDJjMmI4MTZiMWFlNmIxODUxMjVhYmYyMTU5M2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx+UeR9H/KcdMVaSMR5vBxTWlFpe Tm4iiKAZhuUhhU440d/cd5K8yTMm9aI9ns7wexrKb+XkADs9HwR0eMcu188AYKu9 K6nTM7qQgqoP+tMCQnfrj56GGLQKUeEpZWjCEx/WkVQCRvdeHYc4ZJjKQtX79SQ9 r7RrNUx5V5anR33LY2trJvvXdpXIE8tXzgxONFuYYjMY2qRoWODpxD6H5aKT0dtJ cgrXucBQVOj0pJINP/e9jcYZI24yy1X2ncr/sa+F4GsV1tVJ/Zo+0YCZ2ZuzwFyi PWQ0whObPvy2VXgdadfTVkCXvEGX44uYEmlZ4cGjbUVKTQM0ZMAzhG2nTQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFK9tqdVrQsK4FrGuaxhRJavyFZPvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzg5NzM3 OC1jNTU2LTQzNTItOWEwNC1iMTBhODMyYmNhNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvODk3Mzc4 LWM1NTYtNDM1Mi05YTA0LWIxMGE4MzJiY2E0My8xL3IyMnAxV3RDd3JnV3NhNXJH RkVscV9JVmstOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQBwQjeMAwDBAXCOGADBALCOHgwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICUsYCAmICMA0GCSqGSIb3DQEBCwUAA4IBAQCFsWlOa0Rj 2coixwtXFSx1wUXa630wXze46F8ElLSh8ou9EmA36u3gm4OIb1JahIm3YYreHU2k wX+lf2m9/sTgQBgQE9MW8HpxpdxuuCFqc1oRtzqACW7eU7aR5DFVS8+ew4ErSwUU OIbnewYqBZkN3n2aVoX56kJFlaf6+KInNBUJ4qqpB4AITl4m7v3mzAZ0VLMkLZqR s/+tOjPsgaYf+x2s1YYVR45pAzpEVtNDj0hS+nnnpEBbQ7SOUMmaBR3VNKd4NCJS PpOpYDDp2kn1Hp0eOyVeldtIBHCF5GiXGvZg2ELxCIcBVL4z6eF0uzJ8VMvLLitB 0ilhIE6KJRlT -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:50 2026 by rpki-client