This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.cer (raw, json) Hash identifier: LDmHwhhK8PqSpT+jT0ljMl9myR6APMDTX6pZfLdCpxE= Subject key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1A8EBE3C4367905D799A13F78779 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49158 IP: 37.60.64.0/18 IP: 2a00:5bc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1a:8e:be:3c:43:67:90:5d:79:9a:13:f7:87:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:f3:3d:b3:8c:f2:33:a9:f4:0b:f1:c3:e8: 68:72:b3:79:ae:8b:0a:61:f8:b6:6f:a7:6e:6b:b5: b8:5d:2c:c8:c4:f1:c4:66:ab:eb:af:b7:cd:9f:62: 49:c8:f1:e8:2c:81:b7:13:c5:94:1e:47:e8:ee:76: 91:b4:6f:73:94:74:c7:2a:3a:51:ab:a1:71:f4:ee: f5:c5:9e:d4:53:54:7f:c9:d8:e6:cd:f7:44:3b:75: 8d:15:29:28:59:ac:c5:97:24:ed:8b:26:36:75:ff: 39:78:05:77:79:47:d7:4e:59:a9:a8:61:d1:fd:59: 39:a9:2f:26:27:2d:dd:1d:5c:e9:bd:a8:51:29:b5: ca:5e:f9:4e:9e:bc:b7:1a:2b:16:4d:e8:85:81:b6: 9c:c2:b4:fd:84:5c:c0:1a:b0:11:3e:5d:1d:09:8e: 6e:3d:e4:f7:6d:ab:a8:5a:18:20:a9:8b:a5:df:54: 95:0e:80:8c:17:fe:79:ad:18:38:59:dc:e7:11:82: 97:20:b8:93:a6:c8:37:15:a0:05:6b:ff:10:c7:05: cc:eb:cf:c1:49:dc:be:2c:e9:0c:1c:ac:da:01:92: 78:71:a0:af:82:1b:c3:8e:cc:14:a7:ad:9a:b9:6b: 0c:6b:72:89:7e:85:f7:9d:e9:10:23:7e:76:ec:f3: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.64.0/18 IPv6: 2a00:5bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49158 Signature Algorithm: sha256WithRSAEncryption 5f:9c:23:61:f1:be:c6:39:08:44:da:32:5d:3a:89:27:3c:3a: 44:7a:fc:de:51:af:7a:15:79:24:5d:92:49:61:99:29:21:9b: 7d:c2:da:81:97:1a:06:9f:06:26:77:b5:6d:77:c5:57:b8:b3: f3:a1:0f:f2:c4:98:e5:58:55:1b:14:2c:37:5c:ca:46:f0:59: 0d:0a:19:a5:3a:3a:db:12:c3:8c:2d:9e:84:3e:e1:d9:6a:25: d5:b6:f2:fb:1e:c0:ad:7a:0d:7f:d2:b0:b3:fa:9e:9f:a0:df: e0:dc:bf:7c:bc:44:6f:12:04:2f:56:b7:61:c6:b1:77:46:01: b5:bb:1b:3c:0f:39:ba:83:79:91:2c:fd:49:79:48:39:58:f0: 4b:e6:93:78:ba:85:8d:08:b7:4a:a9:79:e3:76:0f:b5:dd:1e: 47:fa:02:ea:00:e3:0e:13:3c:29:34:72:b1:12:53:61:9f:77: 88:92:92:c3:e2:73:af:16:80:78:9a:ce:e5:73:27:54:37:6e: b4:db:ce:52:d5:7f:ba:03:74:63:60:1c:3c:e1:53:2c:14:21: f5:92:f4:46:01:2b:36:5e:5b:ff:30:66:ef:33:a6:05:7a:c6: a5:15:58:b1:31:ab:c4:10:d4:71:fb:26:c9:fd:d0:07:b0:7f: 6d:79:1b:02 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WxqOvjxDZ5BdeZoT94d5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzlmOTZjMjBlMTBmNzZmMDNlZDQ3ODE1YjdhNmE1ZWZkYmUwM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFjzPbOM8jOp9Avxw+hocrN5rosK Yfi2b6dua7W4XSzIxPHEZqvrr7fNn2JJyPHoLIG3E8WUHkfo7naRtG9zlHTHKjpR q6Fx9O71xZ7UU1R/ydjmzfdEO3WNFSkoWazFlyTtiyY2df85eAV3eUfXTlmpqGHR /Vk5qS8mJy3dHVzpvahRKbXKXvlOnry3GisWTeiFgbacwrT9hFzAGrARPl0dCY5u PeT3bauoWhggqYul31SVDoCMF/55rRg4WdznEYKXILiTpsg3FaAFa/8QxwXM68/B Sdy+LOkMHKzaAZJ4caCvghvDjswUp62auWsMa3KJfoX3nekQI3527POxjQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPOflsIOEPdvA+1HgVt6al79vgPVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzBiNDVl OS0zZjRhLTRiZDgtYmFiOS1mYjkwODFhMTYxMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvMGI0NWU5 LTNmNGEtNGJkOC1iYWI5LWZiOTA4MWExNjEzOS8xLzg1LVd3ZzRROTI4RDdVZUJX M3BxWHYyLUE5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGJTxAMA0EAgACMAcDBQAqAFvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDABjANBgkqhkiG9w0BAQsFAAOCAQEAX5wjYfG+xjkI RNoyXTqJJzw6RHr83lGvehV5JF2SSWGZKSGbfcLagZcaBp8GJne1bXfFV7iz86EP 8sSY5VhVGxQsN1zKRvBZDQoZpTo62xLDjC2ehD7h2Wol1bby+x7ArXoNf9Kws/qe n6Df4Ny/fLxEbxIEL1a3Ycaxd0YBtbsbPA85uoN5kSz9SXlIOVjwS+aTeLqFjQi3 Sql543YPtd0eR/oC6gDjDhM8KTRysRJTYZ93iJKSw+JzrxaAeJrO5XMnVDdutNvO UtV/ugN0Y2AcPOFTLBQh9ZL0RgErNl5b/zBm7zOmBXrGpRVYsTGrxBDUcfsmyf3Q B7B/bXkbAg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:21 2026 by rpki-client