This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer (raw, json) Hash identifier: pM0aQODhoMW2ialT2+qesjkWZZGbK05KDJbYuH24o1I= Subject key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758BD1A967B1383411EC3F4CF4538F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.33.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bd:1a:96:7b:13:83:41:1e:c3:f4:cf:45:38:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4d:cc:5f:96:f3:a8:cd:a3:ff:18:1e:1c:59: fd:ef:a2:fa:d7:72:c9:62:4a:9b:f0:d6:08:8b:ac: d6:15:98:69:1f:2f:60:65:4b:1b:e5:f2:e7:be:74: e8:f8:cd:d0:83:e6:8f:95:0a:b1:95:1f:f8:9d:73: 1a:b1:a3:78:0e:99:a2:9a:9c:a6:c2:2c:66:2d:9e: 13:b6:ba:e3:5e:b1:1a:6f:00:24:53:ef:a4:bc:3e: 32:5a:a6:ce:a5:25:14:1c:cc:48:a0:15:eb:f7:32: 62:a2:16:d1:9a:52:6d:1d:17:04:40:8b:e9:a0:8e: d0:b9:b8:ea:1f:c5:26:ba:62:cc:a0:e0:76:ec:04: 56:c9:16:26:eb:d8:8c:a9:e8:f6:aa:be:f8:a3:e3: a9:40:3a:c9:72:ca:1a:33:28:36:d4:9f:b4:53:d7: 37:22:22:6a:21:b6:6d:f3:e8:c3:dd:71:d3:1c:30: dc:4d:7d:ff:d9:62:7d:c1:ae:cb:58:a5:b5:19:7b: 44:3c:77:50:9e:9e:cb:51:e7:ba:c8:bb:10:1f:cb: 2e:97:b0:92:95:f4:5a:d2:04:36:7c:1e:d5:92:bb: 53:9d:56:64:d6:20:00:38:64:81:aa:41:27:73:6f: 4b:71:f2:a4:08:fb:53:16:d1:b1:18:60:52:8f:73: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.33.156.0/24 Signature Algorithm: sha256WithRSAEncryption 67:f4:b0:62:7a:ba:a8:b4:6d:c2:2e:02:94:3c:84:22:60:ad: 06:c5:66:87:77:89:73:a2:33:44:2c:88:c5:e4:5e:63:6e:82: e1:3b:e7:a4:87:7f:4d:6f:4e:df:51:b4:e4:9c:d4:db:42:9b: d2:6f:8d:e1:d6:13:5e:c6:d1:15:96:f5:f6:f7:3e:ae:0b:de: 52:1b:f1:7a:21:c5:d1:aa:b4:20:ed:7e:1c:53:bb:31:87:a5: 0f:9b:83:7e:ea:81:fc:10:60:68:88:47:a0:b1:b3:6f:5e:6c: bf:db:28:5a:48:8a:b7:0a:0e:f1:70:2b:e0:0e:f2:2d:82:c9: f1:ab:27:b3:c8:c8:fd:29:73:45:59:ef:09:76:10:60:ea:e7: 1d:28:fb:5b:fc:ea:58:6f:cd:4c:2d:ab:99:ea:fd:f1:f6:25: a1:34:f9:d4:cc:01:89:7f:95:30:2a:f0:82:4d:68:43:56:93: 1b:a1:3e:04:79:b9:c0:72:57:28:ac:8b:36:7e:60:7f:38:43: 61:ee:1e:eb:34:c8:8e:f0:0d:5c:5e:10:3e:4e:a1:0b:04:5c: ec:8a:2e:eb:e3:0d:2a:93:ee:6c:05:81:7b:65:c4:76:16:65: 20:84:5a:2c:07:27:98:ba:7d:ad:2a:d3:87:33:95:c2:c4:cd: b3:e0:20:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WL0alnsTg0Eew/TPRTj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ2Y2JkYWE3OTRhOTdhN2Q4MjY2NzAyY2IwNTRmMWIyNDlkNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9k3MX5bzqM2j/xgeHFn976L613LJ Ykqb8NYIi6zWFZhpHy9gZUsb5fLnvnTo+M3Qg+aPlQqxlR/4nXMasaN4Dpmimpym wixmLZ4TtrrjXrEabwAkU++kvD4yWqbOpSUUHMxIoBXr9zJiohbRmlJtHRcEQIvp oI7QubjqH8UmumLMoOB27ARWyRYm69iMqej2qr74o+OpQDrJcsoaMyg21J+0U9c3 IiJqIbZt8+jD3XHTHDDcTX3/2WJ9wa7LWKW1GXtEPHdQnp7LUee6yLsQH8sul7CS lfRa0gQ2fB7VkrtTnVZk1iAAOGSBqkEnc29LcfKkCPtTFtGxGGBSj3OxJQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFvWy9qnlKl6fYJmcCywVPGySdS/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2M5MzFm Yy1kZjFlLTRiYjEtOWRlOS1kNzRhMTI5NTlhZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvYzkzMWZj LWRmMWUtNGJiMS05ZGU5LWQ3NGExMjk1OWFkNy8xL1c5YkwycWVVcVhwOWdtWndM TEJVOGJKSjFMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwCGcMA0GCSqGSIb3DQEBCwUAA4IBAQBn9LBi erqotG3CLgKUPIQiYK0GxWaHd4lzojNELIjF5F5jboLhO+ekh39Nb07fUbTknNTb QpvSb43h1hNextEVlvX29z6uC95SG/F6IcXRqrQg7X4cU7sxh6UPm4N+6oH8EGBo iEegsbNvXmy/2yhaSIq3Cg7xcCvgDvItgsnxqyezyMj9KXNFWe8JdhBg6ucdKPtb /OpYb81MLauZ6v3x9iWhNPnUzAGJf5UwKvCCTWhDVpMboT4EebnAclcorIs2fmB/ OENh7h7rNMiO8A1cXhA+TqELBFzsii7r4w0qk+5sBYF7ZcR2FmUghFosByeYun2t KtOHM5XCxM2z4CAW -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:51 2026 by rpki-client