This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer (raw, json) Hash identifier: JB62D1IkMX1FoHmUTtaFm+oCYQcG0nse1slCKDI1ngs= Subject key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7A5AB8098A0BB570A31224CF433A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204372 IP: 195.246.96.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a5:ab:80:98:a0:bb:57:0a:31:22:4c:f4:33:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:42:fd:b9:02:2e:44:db:34:02:a3:2c:8c: 4e:cd:57:7b:c2:64:e8:43:af:1d:d9:cf:73:73:76: 7a:ba:01:47:49:0b:60:88:22:ba:18:e5:2c:c8:02: 8f:b8:f8:bc:6c:70:56:ad:ea:4f:fb:fe:19:ce:46: 66:12:f8:f3:ba:52:5a:a9:2a:55:cb:80:a3:a7:60: 95:d9:89:bf:20:9e:b6:01:0e:a9:8b:3d:82:64:6c: f4:a7:27:43:65:28:fa:e8:bb:e7:2d:e3:28:1c:6e: a9:0b:a8:83:78:7f:6a:66:d0:35:65:8a:71:56:c6: 95:d9:6c:d3:6f:e0:fa:39:25:48:2d:bc:70:50:1a: 5e:a2:72:23:5e:a1:d4:7c:69:1f:98:ec:2e:c8:fd: 29:4c:af:b6:90:81:ae:20:97:eb:26:a6:27:2d:1f: f7:fe:74:7a:c2:35:d7:58:e0:41:68:f5:81:1f:30: 3f:91:94:44:1c:8f:a8:0f:48:17:24:1a:86:f0:c6: 21:19:32:f0:d3:24:f5:3f:74:09:54:50:05:aa:f2: 41:8e:7e:0e:95:31:f1:3f:83:08:a0:6b:02:6d:8c: 64:4a:9f:fc:11:23:86:78:81:bd:f5:bd:41:f3:76: d7:ba:9b:77:a0:15:0b:bb:c2:8f:f4:19:65:56:81: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.96.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204372 Signature Algorithm: sha256WithRSAEncryption 9b:cd:d0:fd:2f:d6:0d:64:fa:2f:2b:ba:e5:ee:68:95:5c:65: 3b:35:64:f7:3e:ef:fa:68:ec:19:d6:7a:64:c9:6b:ae:8a:05: b2:45:7e:f4:76:ab:bd:a5:3b:57:16:d6:51:41:dd:79:ea:7c: f4:be:81:33:e7:de:22:45:41:d0:9c:6b:c4:72:af:7c:b3:96: 74:3a:c8:4b:aa:9a:7d:81:68:bc:6d:a0:fc:a8:59:57:ae:72: 65:58:a4:65:6a:f6:c3:ec:fb:3f:f8:78:cf:97:d9:fb:75:4c: ad:c8:6f:a7:99:7f:6d:f1:eb:77:c4:f3:fc:ba:f5:95:07:0a: 1b:09:5a:4e:4b:ef:d3:b5:61:70:9a:5b:38:ab:74:91:52:03: d9:77:6c:9e:7f:3e:97:df:54:61:df:b9:8a:ad:5c:7a:06:fa: 98:38:2a:9f:02:39:ae:66:60:85:56:a9:d7:2a:70:84:f8:a4: 0e:90:d2:ac:42:06:7f:f4:db:e1:69:82:0a:81:38:09:93:3f: 3a:32:67:a3:8c:52:d7:9e:9a:bf:09:2e:82:4e:cc:a3:d0:66: 4c:61:d9:fd:a6:3f:2b:c5:a2:6a:21:a6:93:7d:2e:48:54:a2: 02:22:d1:54:ac:10:43:d0:86:c4:e6:16:e2:3f:74:fe:57:c5: 9b:f3:85:2a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x6WrgJigu1cKMSJM9DOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODVlNGY0YjRhOWVmNTUzMWRmZTUwZjQxNTQxYzkxMmEzMzVmYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNRC/bkCLkTbNAKjLIxOzVd7wmTo Q68d2c9zc3Z6ugFHSQtgiCK6GOUsyAKPuPi8bHBWrepP+/4ZzkZmEvjzulJaqSpV y4Cjp2CV2Ym/IJ62AQ6piz2CZGz0pydDZSj66LvnLeMoHG6pC6iDeH9qZtA1ZYpx VsaV2WzTb+D6OSVILbxwUBpeonIjXqHUfGkfmOwuyP0pTK+2kIGuIJfrJqYnLR/3 /nR6wjXXWOBBaPWBHzA/kZREHI+oD0gXJBqG8MYhGTLw0yT1P3QJVFAFqvJBjn4O lTHxP4MIoGsCbYxkSp/8ESOGeIG99b1B83bXupt3oBULu8KP9BllVoGRowIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFheT0tKnvVTHf5Q9BVByRKjNfvxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2NmYzRh Zi0xN2U2LTQzZGUtOTIxZi02YmFmMzAwNzkwNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvY2ZjNGFm LTE3ZTYtNDNkZS05MjFmLTZiYWYzMDA3OTA1Yy8xL1dGNVBTMHFlOVZNZF9sRDBG VUhKRXFNMS1fRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/ZgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMeVDANBgkqhkiG9w0BAQsFAAOCAQEAm83Q/S/WDWT6Lyu65e5olVxlOzVk9z7v +mjsGdZ6ZMlrrooFskV+9HarvaU7VxbWUUHdeep89L6BM+feIkVB0JxrxHKvfLOW dDrIS6qafYFovG2g/KhZV65yZVikZWr2w+z7P/h4z5fZ+3VMrchvp5l/bfHrd8Tz /Lr1lQcKGwlaTkvv07VhcJpbOKt0kVID2Xdsnn8+l99UYd+5iq1cegb6mDgqnwI5 rmZghVap1ypwhPikDpDSrEIGf/Tb4WmCCoE4CZM/OjJno4xS156avwkugk7Mo9Bm TGHZ/aY/K8WiaiGmk30uSFSiAiLRVKwQQ9CGxOYW4j90/lfFm/OFKg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:48 2026 by rpki-client