This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer File: W0lMbhb0nQi-dhyowOqnEihy-oI.cer (raw, json) Hash identifier: UZ8JE5L8eGcAA3Rca3LlAbYLaSgeD0M2UGmmwr2NYpw= Subject key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39254E0B87F53C7E95230CFA567AE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43706 IP: 79.170.0.0/21 IP: 185.123.20.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:25:4e:0b:87:f5:3c:7e:95:23:0c:fa:56:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:22:dc:ff:70:08:ea:ae:29:8a:d7:ff:a7: 4d:90:74:c0:99:f6:c3:18:85:e9:8e:3e:68:82:c6: 08:13:e4:4b:96:ac:e9:58:75:04:43:e4:b6:cd:d4: e0:3d:97:b8:eb:9e:59:5e:5e:43:ae:d8:bb:29:ac: ba:7b:c6:c1:8d:8c:a8:d0:f4:3e:b4:c9:01:c0:71: b5:c4:52:fe:40:f2:75:be:44:ab:5b:1b:c9:39:96: f5:15:fd:07:c8:c6:ad:f8:f9:f8:5f:e3:94:95:ea: 28:0c:98:c3:73:44:67:71:12:c9:18:71:27:05:b8: bf:3c:fb:fc:50:2e:8a:68:e1:9a:29:b0:fe:9f:31: 96:3a:e3:7e:20:81:d9:49:60:f8:37:57:7e:46:ad: bc:4b:9e:3c:c9:ca:e1:38:cd:90:25:bf:49:14:4c: 13:c6:5b:40:df:a7:fe:09:aa:87:c6:2c:7e:ae:6b: 44:68:b0:a1:16:b3:4c:f8:fd:15:26:72:ba:46:d8: 99:09:98:30:78:58:c4:1f:0c:37:50:c4:0f:22:2c: 26:cd:91:fa:dc:51:ad:22:8b:90:87:b1:3a:e5:9b: f3:17:77:eb:3b:74:ab:c8:e8:79:1b:fb:25:27:63: ff:ed:a9:b3:69:67:90:cf:4d:7d:6f:14:ee:fe:f4: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.0.0/21 185.123.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43706 Signature Algorithm: sha256WithRSAEncryption 26:d2:66:4b:40:1f:f9:9a:81:29:83:56:18:ac:3e:40:73:0e: d0:d5:f3:3a:3a:0f:6c:ac:f0:40:76:01:f8:fc:72:9a:fd:3c: 09:e0:71:30:5d:73:3b:f9:d8:53:45:24:df:95:29:64:e3:73: a4:0f:f7:c8:ab:f9:8a:70:60:92:23:04:6b:25:c7:78:83:45: 67:7a:6d:05:54:4c:76:92:f0:75:41:7b:86:ed:20:82:f2:2f: 8c:f1:74:ae:da:69:7d:1f:44:4b:6c:85:97:51:c6:b7:f4:9a: 8c:52:2c:25:54:74:57:73:8c:7b:51:c7:63:3e:ee:1e:c0:84: ec:29:d1:6e:cc:fb:60:d0:7c:bc:5e:ad:ea:44:52:cf:b9:e3: d8:a0:cb:8f:46:84:08:fe:ed:02:55:91:8f:aa:2d:2d:7f:13: ad:92:8d:f9:2f:a4:a1:40:c1:15:d1:8f:1a:3a:f6:e5:af:40: a0:a3:aa:d9:b3:ba:4c:ef:e0:b6:39:c8:90:3e:5a:df:10:0c: 66:7d:16:12:b5:29:78:a3:25:50:4b:27:d6:62:98:3e:e9:bf: 5c:b7:b4:ed:38:75:a2:48:b0:8a:c2:0b:85:84:2e:c7:4f:98: 70:c8:ce:d8:eb:93:a5:4d:76:43:e7:55:b5:f9:d3:bf:e8:da: 7b:7f:6d:27 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OSVOC4f1PH6VIwz6VnroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ5NGM2ZTE2ZjQ5ZDA4YmU3NjFjYThjMGVhYTcxMjI4NzJmYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYIi3P9wCOquKYrX/6dNkHTAmfbD GIXpjj5ogsYIE+RLlqzpWHUEQ+S2zdTgPZe4655ZXl5Drti7Kay6e8bBjYyo0PQ+ tMkBwHG1xFL+QPJ1vkSrWxvJOZb1Ff0HyMat+Pn4X+OUleooDJjDc0RncRLJGHEn Bbi/PPv8UC6KaOGaKbD+nzGWOuN+IIHZSWD4N1d+Rq28S548ycrhOM2QJb9JFEwT xltA36f+CaqHxix+rmtEaLChFrNM+P0VJnK6RtiZCZgweFjEHww3UMQPIiwmzZH6 3FGtIouQh7E65ZvzF3frO3SryOh5G/slJ2P/7amzaWeQz019bxTu/vSVVQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFtJTG4W9J0IvnYcqMDqpxIocvqCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzkyYmNm NC1kMGYyLTRmOWUtODc0ZC1jMmM2ZjZhNDA5N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvOTJiY2Y0 LWQwZjItNGY5ZS04NzRkLWMyYzZmNmE0MDk3Zi8xL1cwbE1iaGIwblFpLWRoeW93 T3FuRWloeS1vSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDT6oAAwQCuXsUMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCqujANBgkqhkiG9w0BAQsFAAOCAQEAJtJmS0Af+ZqBKYNWGKw+QHMO 0NXzOjoPbKzwQHYB+Pxymv08CeBxMF1zO/nYU0Uk35UpZONzpA/3yKv5inBgkiME ayXHeINFZ3ptBVRMdpLwdUF7hu0ggvIvjPF0rtppfR9ES2yFl1HGt/SajFIsJVR0 V3OMe1HHYz7uHsCE7CnRbsz7YNB8vF6t6kRSz7nj2KDLj0aECP7tAlWRj6otLX8T rZKN+S+koUDBFdGPGjr25a9AoKOq2bO6TO/gtjnIkD5a3xAMZn0WErUpeKMlUEsn 1mKYPum/XLe07Th1okiwisILhYQux0+YcMjO2OuTpU12Q+dVtfnTv+jae39tJw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:07 2026 by rpki-client