This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer File: WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer (raw, json) Hash identifier: 8J2IPS3bXbUDM8y66Sb1OycOGjR5lg5McT/dYqmdSGY= Subject key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB56DB71DE9635E9A0A1DC147B60E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6736 AS: 34837 AS: 35285 AS: 39200 IP: 94.184.0.0/16 IP: 185.62.232.0/22 IP: 193.104.212.0/24 IP: 193.189.122.0/23 IP: 194.225.0.0/16 IP: 2001:678:b0::/46 IP: 2001:14e8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b5:6d:b7:1d:e9:63:5e:9a:0a:1d:c1:47:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:21:08:fc:bc:82:dc:58:01:bd:28:2e:68: 37:1c:bc:0d:dd:55:87:f7:26:09:31:32:a8:96:3e: 16:dc:ca:32:2f:1f:2b:f0:c0:5e:40:30:91:56:10: a6:64:bf:82:b3:52:05:5d:bb:34:c7:80:ab:b9:4d: 21:0c:59:1b:87:26:2e:36:bc:d6:48:9f:72:d7:16: b9:94:32:1f:d9:ba:2f:2e:3e:93:42:cb:95:7e:7b: cf:94:9e:2b:0e:79:04:38:1e:c8:c4:da:44:96:c7: ff:f6:a1:f6:ea:58:f5:03:4c:87:17:31:34:4d:8c: d5:9c:a9:ff:88:bb:db:63:1d:2a:80:06:3f:cb:0c: 99:7d:6f:d1:a2:c9:6a:1d:5f:69:45:5d:02:41:b2: 0f:36:d2:1a:07:60:37:e5:30:85:91:7c:91:3e:68: 03:c5:e8:68:46:9c:c6:a7:a9:6a:43:73:7a:44:1a: fd:ae:8a:07:44:d2:34:a5:03:5f:47:33:0d:29:60: 66:5b:1c:8f:6d:04:df:4e:9a:74:a3:64:87:47:9b: 6b:b5:de:8a:de:bc:38:73:44:c4:19:94:dd:c4:2e: 72:ba:d7:13:9c:96:1d:f2:8c:4c:09:72:9e:c9:12: 74:da:52:d4:0e:f6:5f:7f:74:c6:66:8a:3f:77:ef: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.0.0/16 185.62.232.0/22 193.104.212.0/24 193.189.122.0/23 194.225.0.0/16 IPv6: 2001:678:b0::/46 2001:14e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6736 34837 35285 39200 Signature Algorithm: sha256WithRSAEncryption 3a:69:bc:e6:07:ba:0b:ad:9f:59:0d:fd:49:cf:e9:fc:39:fc: a0:4a:ad:4d:34:9d:85:90:da:ec:f0:b9:d4:75:40:d6:3b:b9: 05:b8:e1:5c:01:db:6d:5e:0b:d4:e1:a9:d0:9a:91:f7:a5:40: 9b:5f:ce:11:c5:76:66:fe:31:09:f1:af:12:fa:dc:9d:79:fa: fc:e9:c1:18:6f:11:e4:aa:b2:50:2d:ba:1e:5a:0a:c8:1a:5c: 0e:79:91:d5:ea:17:0f:b1:cc:dc:fc:76:75:f6:8a:e5:49:67: 7c:af:eb:32:84:7d:3b:8c:ca:a2:e9:af:60:e3:80:ec:62:ab: 94:98:03:8c:f5:cf:35:9c:f1:0e:46:27:65:9b:68:36:1c:a6: 41:56:fb:7d:d7:7c:12:05:b3:89:4d:37:b6:82:68:3f:73:b5: a4:83:b7:ad:54:a9:71:98:a8:a3:da:36:a3:a0:bd:ee:26:74: aa:b6:e9:a8:fe:8b:c8:32:0c:94:7c:a3:72:b1:97:66:aa:f2: bb:29:50:70:25:2d:2a:60:f5:68:ff:cc:1d:72:bd:11:fe:80: c9:45:31:6f:d8:19:fb:dd:b6:ac:03:49:24:30:00:24:bf:c0: e7:45:59:62:b8:73:a5:b5:4b:b5:b9:53:7a:2d:08:79:25:0d: 4c:ff:7b:ca -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt9yrVttx3pY16aCh3BR7YOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNkNzYwNTEwMTdkMGFmYTkxNWZjZmI3OTBhMDBmNDY2N2IwYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyEhCPy8gtxYAb0oLmg3HLwN3VWH 9yYJMTKolj4W3MoyLx8r8MBeQDCRVhCmZL+Cs1IFXbs0x4CruU0hDFkbhyYuNrzW SJ9y1xa5lDIf2bovLj6TQsuVfnvPlJ4rDnkEOB7IxNpElsf/9qH26lj1A0yHFzE0 TYzVnKn/iLvbYx0qgAY/ywyZfW/RoslqHV9pRV0CQbIPNtIaB2A35TCFkXyRPmgD xehoRpzGp6lqQ3N6RBr9rooHRNI0pQNfRzMNKWBmWxyPbQTfTpp0o2SHR5trtd6K 3rw4c0TEGZTdxC5yutcTnJYd8oxMCXKeyRJ02lLUDvZff3TGZoo/d+/luwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFFg9dgUQF9CvqRX8+3kKAPRmewqIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzRmMWIy Ny0zMjZhLTQ2NzktYTY0Yi1kYTYxNTM4ODVmM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNGYxYjI3 LTMyNmEtNDY3OS1hNjRiLWRhNjE1Mzg4NWYzYi8xL1dEMTJCUkFYMEstcEZmejdl UW9BOUdaN0NvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAiBAIAATAcAwMAXrgDBAK5PugDBADBaNQDBAHBvXoDAwDC4TAW BAIAAjAQAwcCIAEGeACwAwUAIAEU6DAoBggrBgEFBQcBCAEB/wQZMBegFTATAgIa UAIDAIgVAgMAidUCAwCZIDANBgkqhkiG9w0BAQsFAAOCAQEAOmm85ge6C62fWQ39 Sc/p/Dn8oEqtTTSdhZDa7PC51HVA1ju5BbjhXAHbbV4L1OGp0JqR96VAm1/OEcV2 Zv4xCfGvEvrcnXn6/OnBGG8R5KqyUC26HloKyBpcDnmR1eoXD7HM3Px2dfaK5Uln fK/rMoR9O4zKoumvYOOA7GKrlJgDjPXPNZzxDkYnZZtoNhymQVb7fdd8EgWziU03 toJoP3O1pIO3rVSpcZioo9o2o6C97iZ0qrbpqP6LyDIMlHyjcrGXZqryuylQcCUt KmD1aP/MHXK9Ef6AyUUxb9gZ+922rANJJDAAJL/A50VZYrhzpbVLtblTei0IeSUN TP97yg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:41:57 2026 by rpki-client