This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer File: W81A0QtW87Uy-g39AdgX75PaGjQ.cer (raw, json) Hash identifier: raZsYtcGp2L5mYUyftxy4KEe69OmDM5MRCmUUkIDvKU= Subject key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35DD1FC4934EC6F2D250F5C827212E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.57.173.0/24 IP: 193.57.200.0/24 IP: 193.57.223.0 -- 193.57.224.255 IP: 2a0f:8640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:1f:c4:93:4e:c6:f2:d2:50:f5:c8:27:21:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:0f:2b:f0:6a:92:83:04:a1:d1:17:3a:83: 54:52:4f:e9:b1:83:4e:db:5a:68:83:7f:8f:6c:6f: b4:73:80:52:86:89:47:ec:3a:ab:d2:e5:b6:69:ea: bc:fb:09:c7:cf:73:c1:e8:f3:d3:88:23:b9:41:57: d8:80:28:7a:e9:c9:21:38:ee:6b:4f:dc:5e:c0:32: 24:d3:10:b5:d8:f3:fb:f5:c4:a8:a5:f9:41:b1:01: 09:bb:7a:1c:7a:e7:dc:7c:8c:4a:33:d3:82:f9:1d: a5:9c:bc:d0:89:73:5a:56:54:4d:ba:8e:b3:4f:2a: 47:38:85:a8:4c:50:07:5c:eb:ac:a4:bc:4e:8e:06: b5:90:89:ee:47:14:70:0f:2a:67:25:50:4d:e9:92: 5d:e9:3a:45:34:3f:4e:f4:19:76:30:62:9a:d7:0a: 9c:15:b3:e1:1a:6f:d8:e7:e9:01:f7:0a:b0:6d:e7: 03:3b:96:bc:ec:9c:78:6a:0d:bc:c3:49:32:0a:02: 12:72:04:34:a0:0b:f7:e6:7c:fa:24:93:12:21:31: 09:ec:96:c0:e4:2c:f5:3e:44:01:9e:78:e1:a5:ef: 8c:ac:35:a3:0a:1e:a1:b3:2a:99:2a:63:b4:ac:9d: 4c:7a:12:da:e5:c5:5d:c2:b2:aa:68:e8:f0:24:23: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.173.0/24 193.57.200.0/24 193.57.223.0-193.57.224.255 IPv6: 2a0f:8640::/29 Signature Algorithm: sha256WithRSAEncryption 8c:76:56:7a:d6:ba:f4:fc:93:cd:aa:01:83:50:14:01:c6:68: 05:67:4b:57:e7:be:54:1f:da:b2:7c:9f:c7:b7:3f:14:d3:ba: 8d:84:55:b3:f6:7b:6d:dc:ec:71:00:d5:49:fc:34:40:1d:c0: 36:3d:22:e4:7e:63:9f:cd:ec:5a:49:a7:5a:5e:42:88:4a:a8: 00:05:83:92:a1:f9:d6:84:66:8d:6e:e3:30:7e:db:b8:75:60: 6d:d2:d5:35:5f:ff:9d:ba:a1:82:99:fe:d3:1f:5a:74:73:17: 4f:4b:e0:b5:89:f5:f7:49:17:ce:f4:60:0a:12:2f:0d:e2:1b: e3:20:cc:4b:08:3a:d5:43:f4:a6:6e:8f:8b:2d:b6:8b:0e:3d: fb:00:a6:e0:1f:2e:68:af:4d:3f:39:7d:5a:7f:5d:bf:91:07: e7:44:8b:24:34:72:b4:76:a0:f7:27:e5:da:34:4c:c5:11:b4: 11:36:28:e0:76:c5:bf:d8:25:28:6f:40:0d:2e:49:e1:69:d3: 4b:ae:96:10:8b:6b:c3:05:7f:de:14:bd:e4:fb:7a:04:20:e8: 44:22:4c:a9:a8:34:f5:4f:72:96:4e:cc:e5:c3:76:40:11:7f: 47:42:1b:e3:21:f7:da:bd:97:27:ed:ea:30:db:04:ea:13:44: f3:9c:09:82 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt7Nd0fxJNOxvLSUPXIJyEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNkNDBkMTBiNTZmM2I1MzJmYTBkZmQwMWQ4MTdlZjkzZGExYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UsPK/BqkoMEodEXOoNUUk/psYNO 21pog3+PbG+0c4BSholH7Dqr0uW2aeq8+wnHz3PB6PPTiCO5QVfYgCh66ckhOO5r T9xewDIk0xC12PP79cSopflBsQEJu3oceufcfIxKM9OC+R2lnLzQiXNaVlRNuo6z TypHOIWoTFAHXOuspLxOjga1kInuRxRwDypnJVBN6ZJd6TpFND9O9Bl2MGKa1wqc FbPhGm/Y5+kB9wqwbecDO5a87Jx4ag28w0kyCgIScgQ0oAv35nz6JJMSITEJ7JbA 5Cz1PkQBnnjhpe+MrDWjCh6hsyqZKmO0rJ1MehLa5cVdwrKqaOjwJCODpQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFFvNQNELVvO1MvoN/QHYF++T2ho0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2JmZjc1 OC00YjgzLTQ3M2QtYjA3Mi1hMmNlMWNjOGI4N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYmZmNzU4 LTRiODMtNDczZC1iMDcyLWEyY2UxY2M4Yjg3Zi8xL1c4MUEwUXRXODdVeS1nMzlB ZGdYNzVQYUdqUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAwTmtAwQAwTnIMAwDBADBOd8DBADBOeAwDQQC AAIwBwMFAyoPhkAwDQYJKoZIhvcNAQELBQADggEBAIx2VnrWuvT8k82qAYNQFAHG aAVnS1fnvlQf2rJ8n8e3PxTTuo2EVbP2e23c7HEA1Un8NEAdwDY9IuR+Y5/N7FpJ p1peQohKqAAFg5Kh+daEZo1u4zB+27h1YG3S1TVf/526oYKZ/tMfWnRzF09L4LWJ 9fdJF870YAoSLw3iG+MgzEsIOtVD9KZuj4sttosOPfsApuAfLmivTT85fVp/Xb+R B+dEiyQ0crR2oPcn5do0TMURtBE2KOB2xb/YJShvQA0uSeFp00uulhCLa8MFf94U veT7egQg6EQiTKmoNPVPcpZOzOXDdkARf0dCG+Mh99q9lyft6jDbBOoTRPOcCYI= -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:34 2026 by rpki-client