This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer File: W3qQXiWk1czLLuvk4tXDkggZdY4.cer (raw, json) Hash identifier: xfc0UKeHtldK6jhsG6pDsxWkxXnkpDFH5icDeF99Nm4= Subject key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B878959D0FC65C7C2450E9A4796BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62250 IP: 185.110.252.0/22 IP: 185.118.152.0/22 IP: 185.119.164.0/22 IP: 2a06:7980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:87:89:59:d0:fc:65:c7:c2:45:0e:9a:47:96:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:bf:a2:03:e3:2b:39:15:e1:2c:8e:34:5f: 83:37:f9:44:5b:46:e0:a9:72:80:d6:25:df:43:53: 7a:eb:da:66:5a:96:8a:bc:94:d9:24:2a:34:80:88: 95:38:f6:13:57:ce:0e:4f:0d:b9:2f:6a:a3:e8:25: 04:83:17:42:33:ae:a4:71:a9:58:0b:dc:f9:17:57: ac:69:70:86:d3:8b:81:bb:a1:f8:6a:de:8f:85:96: 67:c9:b1:76:bc:f3:ee:87:1d:63:61:20:dd:f6:97: 24:ee:25:48:0f:a7:f5:55:d1:f2:2f:50:93:6e:a4: 35:c4:75:c5:f7:d3:68:97:fd:7e:fa:c5:2a:c5:28: d4:4f:c8:f4:1c:22:af:06:cf:f2:37:36:4f:d5:7c: 84:e7:50:22:20:2a:91:c2:86:4e:3e:42:b5:ea:9f: 54:e9:87:0b:6d:f8:fa:ad:5e:5e:66:70:56:23:91: 17:3b:52:8f:fe:30:32:20:c9:8c:0d:2e:98:ce:43: 4f:86:c3:34:2c:92:e1:d3:ab:ad:5a:d2:d2:0d:05: 10:d2:18:3d:3b:54:e3:a3:74:c5:90:d3:5c:84:43: d7:33:52:04:03:ab:94:11:7e:5a:95:57:35:37:90: a2:ac:c8:5b:ad:8e:21:c8:f0:11:57:25:b4:45:11: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.252.0/22 185.118.152.0/22 185.119.164.0/22 IPv6: 2a06:7980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62250 Signature Algorithm: sha256WithRSAEncryption 14:10:2f:73:04:d0:06:93:29:ff:c9:28:60:1f:a3:c7:71:58: dc:71:47:76:cf:c4:24:99:0c:f9:71:23:ce:e0:43:5f:8b:e2: 57:5f:a4:32:a4:a9:40:a8:5f:b4:fc:69:8b:b5:ed:da:ca:61: 4c:69:6f:88:65:88:ba:33:a3:94:a3:b9:e1:0c:56:60:89:4b: be:37:08:de:06:8d:60:f0:4f:e8:b0:39:be:75:31:ef:7e:07: ba:5a:54:97:13:32:c8:13:2a:5b:21:10:85:0a:61:51:81:ad: 0a:2b:43:47:44:30:58:95:e4:38:04:be:c9:e3:9c:b4:82:01: 89:d6:da:1e:da:2a:f7:3b:07:ac:06:54:1a:c0:c3:3f:94:ab: ba:b0:96:33:c3:5d:4f:c9:66:ca:af:cf:c5:82:6f:75:96:f6: 72:07:3a:30:0a:20:08:15:db:f9:6a:43:82:6b:f1:dd:ff:5e: e9:60:60:f6:ef:bc:5c:e8:f2:bb:74:c6:d1:4a:fa:4a:61:66: de:24:a7:c1:0a:03:ba:c0:44:2f:8a:86:99:28:f8:87:bf:d8: 3f:42:a9:2b:83:c1:b7:cf:71:57:3f:83:57:2f:32:fd:1f:3a: 69:77:e1:f4:af:d5:a9:fb:85:c4:a1:ac:c2:23:53:dc:ec:36: 0b:4e:82:0c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6W4eJWdD8ZcfCRQ6aR5a6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjdhOTA1ZTI1YTRkNWNjY2IyZWViZTRlMmQ1YzM5MjA4MTk3NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwry/ogPjKzkV4SyONF+DN/lEW0bg qXKA1iXfQ1N669pmWpaKvJTZJCo0gIiVOPYTV84OTw25L2qj6CUEgxdCM66kcalY C9z5F1esaXCG04uBu6H4at6PhZZnybF2vPPuhx1jYSDd9pck7iVID6f1VdHyL1CT bqQ1xHXF99Nol/1++sUqxSjUT8j0HCKvBs/yNzZP1XyE51AiICqRwoZOPkK16p9U 6YcLbfj6rV5eZnBWI5EXO1KP/jAyIMmMDS6YzkNPhsM0LJLh06utWtLSDQUQ0hg9 O1Tjo3TFkNNchEPXM1IEA6uUEX5alVc1N5CirMhbrY4hyPARVyW0RRGnsQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFt6kF4lpNXMyy7r5OLVw5IIGXWOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2MxMjM5 NS1jMGY4LTRlMDUtOGNiMS03M2EzZDA3ZDJjMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYzEyMzk1 LWMwZjgtNGUwNS04Y2IxLTczYTNkMDdkMmMzMS8xL1czcVFYaVdrMWN6TEx1dms0 dFhEa2dnWmRZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuW78AwQCuXaYAwQCuXekMA0EAgACMAcDBQMq BnmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzKjANBgkqhkiG9w0BAQsFAAOC AQEAFBAvcwTQBpMp/8koYB+jx3FY3HFHds/EJJkM+XEjzuBDX4viV1+kMqSpQKhf tPxpi7Xt2sphTGlviGWIujOjlKO54QxWYIlLvjcI3gaNYPBP6LA5vnUx734HulpU lxMyyBMqWyEQhQphUYGtCitDR0QwWJXkOAS+yeOctIIBidbaHtoq9zsHrAZUGsDD P5SrurCWM8NdT8lmyq/PxYJvdZb2cgc6MAogCBXb+WpDgmvx3f9e6WBg9u+8XOjy u3TG0Ur6SmFm3iSnwQoDusBEL4qGmSj4h7/YP0KpK4PBt89xVz+DVy8y/R86aXfh 9K/VqfuFxKGswiNT3Ow2C06CDA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:53 2026 by rpki-client