This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer File: izTw-SddmAZir7tsr__k25ycnUc.cer (raw, json) Hash identifier: e4gRU0DsQpXXQ4O0vnANvuiXV/Pgo5xBcrR+oB+EH6o= Subject key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC888B8A51836D1BC778A979C03332C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206758 IP: 185.150.236.0/22 IP: 2a0a:6e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:88:b8:a5:18:36:d1:bc:77:8a:97:9c:03:33:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:04:71:6d:7c:d7:1c:c3:be:19:30:f8:04: 2c:e6:af:48:2e:ac:61:36:8b:48:5d:1b:b2:04:9e: b7:b1:77:3d:2a:08:b3:96:55:c1:3e:17:45:d2:3d: 33:14:fe:5f:1b:c8:2c:26:aa:44:ed:bc:63:4c:10: 1c:2a:f5:5c:46:f6:ae:44:14:3f:b2:fc:5e:bc:38: e0:42:b8:d0:4e:ed:38:b5:23:5f:e1:e7:64:ec:fb: 3d:04:f0:65:c7:a6:b1:31:0c:2b:6a:f0:8d:1e:ee: 67:4d:3a:83:c7:ef:ef:56:04:45:14:39:12:be:6a: 8d:60:f0:2a:b5:4e:e1:ca:bd:fc:0d:56:74:c4:e4: 64:74:83:a4:31:a5:01:c9:df:72:c1:23:bd:05:a4: e4:86:26:0a:ca:06:85:a1:67:f4:f1:25:c1:b7:bf: 13:41:08:d3:e6:24:26:9b:e2:33:00:b3:49:61:e0: 12:3d:1a:57:b7:ed:a2:98:be:2a:96:99:fb:a7:5a: 33:07:14:c6:ea:90:21:0a:e1:cf:10:be:5f:d7:86: 4b:87:a9:ef:14:ee:d3:be:42:f0:d0:61:61:27:b5: a7:e4:76:b3:be:6d:24:2e:97:32:f0:88:67:c3:32: 82:e8:b9:c5:0e:5f:5a:6a:ad:87:f0:00:10:ec:2d: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.236.0/22 IPv6: 2a0a:6e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206758 Signature Algorithm: sha256WithRSAEncryption 18:a8:e4:51:de:16:1d:ab:f8:53:9a:75:1c:a1:a7:3d:25:72: 71:31:cd:8e:7d:e9:37:bc:fd:2e:28:fd:4c:67:4b:df:3d:31: 24:4d:e2:17:e8:73:01:49:d4:8c:0f:7f:54:e5:27:14:eb:9d: 44:9f:46:1e:b4:22:cc:74:83:e2:13:ae:ad:b0:b6:79:24:62: e1:69:37:35:c9:02:b9:15:c8:fc:cb:77:8f:c2:ee:32:36:f2: 30:f7:54:0b:dc:7c:b1:9c:11:ca:54:4b:f0:cb:a7:7e:44:74: 85:9d:2c:76:4c:f6:d6:80:3e:28:7a:2e:31:69:a4:f6:07:9d: 16:a4:15:2e:80:1e:81:08:3b:ed:ae:9a:25:96:83:d0:7e:0a: f7:60:90:97:55:3d:bf:b5:3b:18:5e:7f:88:c2:8f:e6:fc:5f: 7f:00:5f:11:be:46:7a:57:ed:c3:79:f9:db:4d:55:4f:07:9b: c1:c7:15:34:eb:d3:8a:21:46:80:38:9c:28:61:7f:38:be:b3: 63:0d:93:8a:fb:6d:85:f4:82:ca:8b:b5:84:c7:0f:46:f2:18: 74:31:1c:ff:8c:3a:0c:cf:c2:92:47:e5:c0:4e:33:de:d5:35: 47:21:cc:aa:d1:93:e4:20:a1:11:d6:af:44:34:5c:36:d6:ad: 58:b9:e9:0e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yIi4pRg20bx3ipecAzMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjM0ZjBmOTI3NWQ5ODA2NjJhZmJiNmNhZmZmZTRkYjljOWM5ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GcEcW181xzDvhkw+AQs5q9ILqxh NotIXRuyBJ63sXc9KgizllXBPhdF0j0zFP5fG8gsJqpE7bxjTBAcKvVcRvauRBQ/ svxevDjgQrjQTu04tSNf4edk7Ps9BPBlx6axMQwravCNHu5nTTqDx+/vVgRFFDkS vmqNYPAqtU7hyr38DVZ0xORkdIOkMaUByd9ywSO9BaTkhiYKygaFoWf08SXBt78T QQjT5iQmm+IzALNJYeASPRpXt+2imL4qlpn7p1ozBxTG6pAhCuHPEL5f14ZLh6nv FO7TvkLw0GFhJ7Wn5Hazvm0kLpcy8IhnwzKC6LnFDl9aaq2H8AAQ7C3eHQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIs08PknXZgGYq+7bK//5NucnJ1HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2RjOTMw OS1jYTA4LTQxOGUtYjUxOC0xYWEwMTY2ZTM3ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZGM5MzA5 LWNhMDgtNDE4ZS1iNTE4LTFhYTAxNjZlMzdlNC8xL2l6VHctU2RkbUFaaXI3dHNy X19rMjV5Y25VYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZbsMA0EAgACMAcDBQMqCm6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnpjANBgkqhkiG9w0BAQsFAAOCAQEAGKjkUd4WHav4 U5p1HKGnPSVycTHNjn3pN7z9Lij9TGdL3z0xJE3iF+hzAUnUjA9/VOUnFOudRJ9G HrQizHSD4hOurbC2eSRi4Wk3NckCuRXI/Mt3j8LuMjbyMPdUC9x8sZwRylRL8Mun fkR0hZ0sdkz21oA+KHouMWmk9gedFqQVLoAegQg77a6aJZaD0H4K92CQl1U9v7U7 GF5/iMKP5vxffwBfEb5Gelftw3n5201VTwebwccVNOvTiiFGgDicKGF/OL6zYw2T ivtthfSCyou1hMcPRvIYdDEc/4w6DM/CkkflwE4z3tU1RyHMqtGT5CChEdavRDRc NtatWLnpDg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:04 2026 by rpki-client