This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer (raw, json) Hash identifier: fI15UYrrZCujFlbvIZbPbnXWEub3C38dP4zqBMtDqog= Subject key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BA094A87BEE65A51BD1DAE0B398E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.43.149.0/24 IP: 2001:67c:2aa8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:09:4a:87:be:e6:5a:51:bd:1d:ae:0b:39:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:86:da:67:e1:2d:30:3b:5f:ac:ea:13:98: 74:65:3a:10:6e:5f:fd:17:06:ba:ca:fa:5b:f4:4d: f4:82:29:32:b8:ba:7d:a5:01:e1:70:00:b8:de:43: c2:53:e3:78:a4:4b:f4:31:0e:c8:4e:14:31:f3:d2: 81:62:c6:d9:db:47:d4:e2:be:49:cc:6d:c9:18:e2: dd:a4:58:5f:a3:5d:28:4b:01:cc:1a:96:d5:d9:20: 54:35:43:db:10:9f:e8:95:15:27:de:63:3e:85:64: b9:78:a6:3b:91:0a:7f:12:f1:b4:d0:4e:b3:92:7d: b2:9f:0b:d9:fe:96:fb:8a:e5:ab:23:82:3f:89:a0: ae:56:ac:e5:df:33:91:3d:c0:b3:26:ad:ae:95:60: ce:23:40:bf:0d:02:7e:d9:c6:c5:36:84:10:fa:da: 0e:7d:e2:2f:58:9f:8c:a3:6d:66:ca:7a:dd:41:19: 9b:e4:e3:b4:fd:4b:3c:a9:2f:c0:90:da:7d:89:58: 9a:ca:93:72:de:4d:f1:46:66:80:32:be:0c:9e:bc: c8:e2:bb:f4:7d:f2:fb:3a:87:a0:77:ec:54:16:80: d7:b8:c0:82:d1:d7:b4:54:46:f4:a7:5f:95:d5:d9: 89:d6:61:6e:d1:1a:96:cc:29:9c:fb:a6:74:18:47: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.149.0/24 IPv6: 2001:67c:2aa8::/48 Signature Algorithm: sha256WithRSAEncryption 59:b5:e1:79:ab:d2:83:ab:2b:59:8d:20:47:74:d1:01:00:58: 89:6a:1d:a4:45:02:0d:bf:7c:40:19:4d:2e:e5:d4:4f:8e:0f: 58:c7:b7:9e:01:14:d5:e2:fa:7e:66:b9:7d:be:20:46:35:a9: 61:03:cd:62:6d:08:f0:88:7a:bc:1b:15:5c:ee:5c:dc:b6:34: ad:6c:0c:19:08:9d:ec:fa:79:1d:71:2a:74:a6:bc:94:71:c9: c7:9a:56:67:ec:97:36:03:c8:8c:b6:1f:f8:9d:5f:11:80:4d: ee:af:cb:09:45:8a:de:79:a8:f8:b4:25:7f:8c:87:8f:a9:71: fd:cd:a3:33:e3:35:72:a0:db:26:4a:5e:6a:3e:eb:d5:89:e3: 79:c9:d7:69:ae:40:f8:95:6e:89:de:04:20:0a:f6:43:a4:a2: 68:cb:60:92:ed:0b:dd:b0:1f:df:b9:e9:ca:72:52:bf:55:6c: 17:34:8c:92:82:f3:0e:db:1d:b8:4f:78:56:7e:4e:ba:40:b3: 9d:67:42:df:29:a3:a7:a8:bd:77:af:53:30:a2:8a:2c:d7:30: dc:5f:fb:93:08:fd:b5:1a:43:67:17:0f:c7:2e:5c:d7:67:4b: 81:61:36:92:d1:48:64:9a:56:30:48:ce:2b:a3:08:cb:58:99: 55:d2:1a:f1 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt/FboJSoe+5lpRvR2uCzmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg2MmUyMzFmY2JkNTM5MWJkNDc2YzZhYjlhYjJiNzIxMGE4N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+mG2mfhLTA7X6zqE5h0ZToQbl/9 Fwa6yvpb9E30gikyuLp9pQHhcAC43kPCU+N4pEv0MQ7IThQx89KBYsbZ20fU4r5J zG3JGOLdpFhfo10oSwHMGpbV2SBUNUPbEJ/olRUn3mM+hWS5eKY7kQp/EvG00E6z kn2ynwvZ/pb7iuWrI4I/iaCuVqzl3zORPcCzJq2ulWDOI0C/DQJ+2cbFNoQQ+toO feIvWJ+Mo21mynrdQRmb5OO0/Us8qS/AkNp9iViaypNy3k3xRmaAMr4MnrzI4rv0 ffL7Ooegd+xUFoDXuMCC0de0VEb0p1+V1dmJ1mFu0RqWzCmc+6Z0GEdWtQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFFuGLiMfy9U5G9R2xquasrchCoekMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzM0MDVl My04Y2MwLTQ2MGQtYjdlOS05YmE2ZGE3MGZhZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvMzQwNWUz LThjYzAtNDYwZC1iN2U5LTliYTZkYTcwZmFkYi8xL1c0WXVJeF9MMVRrYjFIYkdx NXF5dHlFS2g2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwyuVMA8EAgACMAkDBwAgAQZ8KqgwDQYJKoZI hvcNAQELBQADggEBAFm14Xmr0oOrK1mNIEd00QEAWIlqHaRFAg2/fEAZTS7l1E+O D1jHt54BFNXi+n5muX2+IEY1qWEDzWJtCPCIerwbFVzuXNy2NK1sDBkInez6eR1x KnSmvJRxyceaVmfslzYDyIy2H/idXxGATe6vywlFit55qPi0JX+Mh4+pcf3NozPj NXKg2yZKXmo+69WJ43nJ12muQPiVboneBCAK9kOkomjLYJLtC92wH9+56cpyUr9V bBc0jJKC8w7bHbhPeFZ+TrpAs51nQt8po6eovXevUzCiiizXMNxf+5MI/bUaQ2cX D8cuXNdnS4FhNpLRSGSaVjBIziujCMtYmVXSGvE= -----END CERTIFICATE-----Generated at Tue Jan 27 07:19:08 2026 by rpki-client