This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer File: W6vKoQozYHLrwIIKbfC_pNxc_ao.cer (raw, json) Hash identifier: HOEhAHWXfL30QBIoCVF1J5jw4dXCl5I95O76FeUs1yw= Subject key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC28816A03BB73C840BF7F7192E9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.32.82.0/23 IP: 194.34.174.0/24 IP: 194.34.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c2:88:16:a0:3b:b7:3c:84:0b:f7:f7:19:2e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:ca:d9:b4:dc:d8:20:38:6b:af:c2:35:b5: 93:9b:38:08:2b:9e:d5:9c:c9:c3:62:83:3b:0a:19: bf:da:a6:11:18:49:7d:db:7b:b1:99:b9:d1:74:aa: f7:0e:6c:ca:1d:ef:89:98:bc:84:75:b8:0b:d7:b4: f6:f2:d8:5f:2a:f0:b7:41:dc:59:3e:de:3c:5f:7f: 08:f7:1b:c5:74:6d:ae:04:bf:13:9d:b2:bf:cb:db: 05:d4:a0:1a:85:1f:e3:57:6d:38:1f:6f:31:4d:23: eb:7e:3e:37:5c:49:1c:94:45:12:5d:1d:bc:11:d9: c1:4a:9f:44:b6:7e:4f:ef:93:a1:b0:7e:b1:65:95: 69:06:48:0f:57:8b:35:e0:60:94:48:2b:c1:d1:62: fc:a1:63:42:cc:60:69:67:bb:45:a0:5c:0b:1c:24: 58:29:66:44:c5:15:fb:4b:82:47:f2:0a:1b:eb:7f: 25:a8:df:6e:6c:36:0d:97:11:3b:7d:42:f0:94:a7: 81:bb:48:3a:3f:29:4d:1c:c8:07:d8:db:77:82:3c: 17:99:23:87:41:14:cc:7c:06:85:d8:36:2e:a4:15: 49:ac:ac:80:e5:60:a1:ca:6f:0a:ac:9a:9f:fa:8f: a7:72:f7:ac:83:08:93:d0:f2:a5:de:14:7a:6e:3c: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.82.0/23 194.34.174.0/24 194.34.223.0/24 Signature Algorithm: sha256WithRSAEncryption aa:3e:ad:7d:13:fd:41:ee:8d:a5:b6:51:7b:a3:44:03:71:25: 0a:ed:cb:7e:d3:0d:c9:8a:0d:03:8b:a6:c7:dd:a7:db:80:45: 7e:b7:24:59:f5:1b:d8:4b:d7:47:35:32:b8:97:15:58:bf:b6: cd:d4:8e:60:8b:a6:4d:53:c2:d6:8c:26:3e:fb:52:c5:80:db: e1:d1:59:e3:4d:37:7e:86:ed:36:95:93:09:81:ab:90:f4:15: a7:5d:e1:9b:74:16:6b:76:c4:79:dd:9d:52:9a:f1:ab:51:1f: 8f:a6:50:ed:70:68:5f:d7:3e:2d:7f:56:19:37:3e:05:90:c7: 86:43:cf:84:21:d4:cb:0b:be:66:a5:2d:e4:3c:88:69:93:79: cd:20:6d:d8:b5:7b:b5:6a:2e:a4:43:c6:13:ec:c0:6b:67:65: d6:2d:2b:39:53:ba:87:46:e3:e2:2e:45:69:14:66:35:be:4e: 01:93:a3:4e:be:4b:e4:e5:ae:11:b2:30:f5:84:b2:f1:68:f9: cd:fd:95:90:79:fb:55:dd:28:5b:b1:8b:df:1d:24:37:59:c0: 44:da:b1:0a:43:54:98:cb:37:01:84:cc:27:c3:bc:bc:72:cf: 3f:2c:9a:01:5b:e0:a2:e2:10:67:38:72:41:c5:3a:d6:fd:89: da:ab:ef:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt26sKIFqA7tzyEC/f3GS6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmFiY2FhMTBhMzM2MDcyZWJjMDgyMGE2ZGYwYmZhNGRjNWNmZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jHK2bTc2CA4a6/CNbWTmzgIK57V nMnDYoM7Chm/2qYRGEl923uxmbnRdKr3DmzKHe+JmLyEdbgL17T28thfKvC3QdxZ Pt48X38I9xvFdG2uBL8TnbK/y9sF1KAahR/jV204H28xTSPrfj43XEkclEUSXR28 EdnBSp9Etn5P75OhsH6xZZVpBkgPV4s14GCUSCvB0WL8oWNCzGBpZ7tFoFwLHCRY KWZExRX7S4JH8gob638lqN9ubDYNlxE7fULwlKeBu0g6PylNHMgH2Nt3gjwXmSOH QRTMfAaF2DYupBVJrKyA5WChym8KrJqf+o+ncvesgwiT0PKl3hR6bjx1hQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFFuryqEKM2By68CCCm3wv6TcXP2qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzhjNzI0 Ny04NTkyLTQ0YWUtODJiMS0xMDBlNWI2NWU2NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvOGM3MjQ3 LTg1OTItNDRhZS04MmIxLTEwMGU1YjY1ZTY3Mi8xL1c2dktvUW96WUhMcndJSUti ZkNfcE54Y19hby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBwSBSAwQAwiKuAwQAwiLfMA0GCSqGSIb3DQEB CwUAA4IBAQCqPq19E/1B7o2ltlF7o0QDcSUK7ct+0w3Jig0Di6bH3afbgEV+tyRZ 9RvYS9dHNTK4lxVYv7bN1I5gi6ZNU8LWjCY++1LFgNvh0VnjTTd+hu02lZMJgauQ 9BWnXeGbdBZrdsR53Z1SmvGrUR+PplDtcGhf1z4tf1YZNz4FkMeGQ8+EIdTLC75m pS3kPIhpk3nNIG3YtXu1ai6kQ8YT7MBrZ2XWLSs5U7qHRuPiLkVpFGY1vk4Bk6NO vkvk5a4RsjD1hLLxaPnN/ZWQeftV3ShbsYvfHSQ3WcBE2rEKQ1SYyzcBhMwnw7y8 cs8/LJoBW+Ci4hBnOHJBxTrW/Ynaq+85 -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:00 2026 by rpki-client