This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer File: WFPmWjCHtMqFyIArYP8PArQQbZc.cer (raw, json) Hash identifier: LrrikltL2L9UKEh4Hd+MG9i1MGfvmX8YklZ8AwSKi7Y= Subject key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C7EFD50A298D9E635A3F6F28F6A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31357 IP: 46.166.192.0/18 IP: 78.140.0.0/18 IP: 95.170.96.0/19 IP: 212.107.224.0/19 IP: 2a04:3800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c7:ef:d5:0a:29:8d:9e:63:5a:3f:6f:28:f6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:bc:c1:20:98:44:70:20:11:28:56:b3:c1: 11:bd:15:33:27:53:99:90:99:f5:c0:f2:a5:1f:9d: ad:54:d0:37:9f:2c:26:d3:3f:5d:c9:d9:9c:97:8c: ab:8d:d7:eb:07:97:45:0f:40:fc:c1:9e:6f:d6:3d: 53:41:68:ee:7d:2e:cd:b6:a7:8a:0b:b9:27:de:48: 44:d3:0a:be:33:45:b4:95:2c:5d:7d:08:45:5e:87: 31:d0:4a:92:51:69:7f:f0:65:1f:9d:78:71:e3:8c: 93:9a:ca:de:c1:de:bc:31:97:84:0e:3b:94:3d:3b: c4:03:3d:fe:80:7a:30:48:51:f5:a0:f5:39:52:4c: 60:b0:f2:8b:6c:47:49:31:d4:42:a3:37:ba:e9:ac: d6:06:92:52:e0:45:e5:31:eb:af:97:7a:c5:a2:b2: 34:c9:20:77:01:e3:6d:97:fe:59:80:12:c3:d3:d5: ed:3d:5f:4d:4a:e6:bd:fb:bf:9b:10:d3:36:64:8a: fc:22:c8:50:81:31:df:70:38:03:d8:a3:b8:44:c9: 08:67:0f:b5:cf:e1:d3:09:78:c6:37:1d:9e:75:34: 1a:db:88:21:1e:9f:e9:f3:a4:ac:c7:42:91:04:c2: d8:2d:cc:6e:b8:15:bb:fb:0e:0d:27:3c:0d:76:3f: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.166.192.0/18 78.140.0.0/18 95.170.96.0/19 212.107.224.0/19 IPv6: 2a04:3800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31357 Signature Algorithm: sha256WithRSAEncryption 10:64:98:9d:49:6f:15:c5:a2:e1:f3:b9:75:7a:87:d9:2e:c9: b7:35:58:aa:68:ac:80:65:d4:73:fd:9e:11:d7:cb:58:13:a6: 91:70:1d:d0:3e:91:c6:7b:0c:47:c0:5b:49:bd:09:50:ab:c7: cd:72:7e:b0:a2:bd:a8:11:80:fe:c3:10:2d:6d:88:76:34:65: 92:53:04:c0:2b:ea:50:b8:33:d5:57:77:61:b7:fe:7b:24:cd: aa:35:63:3e:53:a1:f2:de:89:20:fc:ff:f7:92:59:bb:de:b7: 0c:59:9b:73:85:d1:60:86:e2:6a:dd:b5:96:39:15:33:0e:05: df:51:76:2c:6f:5f:86:55:b6:95:78:ce:c1:43:93:7d:0a:6f: 05:5e:6b:8e:56:e7:04:fe:19:30:04:cc:aa:11:bd:d9:d8:46: bb:9a:ec:89:54:19:53:5c:a3:5d:a6:32:c6:49:cd:46:9c:04: ca:6d:13:e1:4a:40:c0:5b:32:c2:3a:ea:a8:72:89:13:de:40: ed:9c:c1:10:08:e6:10:ae:05:d0:2f:ef:fb:02:24:d4:2b:02: 35:1c:a6:48:0a:48:4e:d8:ad:f4:e3:89:f1:16:68:2b:ad:d0: 38:63:11:35:fe:e2:b1:e0:1e:d7:c0:34:ad:69:c9:51:e1:d0: 6b:f6:8b:5d -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt7Ncfv1QopjZ5jWj9vKPalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODUzZTY1YTMwODdiNGNhODVjODgwMmI2MGZmMGYwMmI0MTA2ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsG8wSCYRHAgEShWs8ERvRUzJ1OZ kJn1wPKlH52tVNA3nywm0z9dydmcl4yrjdfrB5dFD0D8wZ5v1j1TQWjufS7NtqeK C7kn3khE0wq+M0W0lSxdfQhFXocx0EqSUWl/8GUfnXhx44yTmsrewd68MZeEDjuU PTvEAz3+gHowSFH1oPU5UkxgsPKLbEdJMdRCoze66azWBpJS4EXlMeuvl3rForI0 ySB3AeNtl/5ZgBLD09XtPV9NSua9+7+bENM2ZIr8IshQgTHfcDgD2KO4RMkIZw+1 z+HTCXjGNx2edTQa24ghHp/p86Ssx0KRBMLYLcxuuBW7+w4NJzwNdj8ytQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFFhT5lowh7TKhciAK2D/DwK0EG2XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzZhZmQx ZS1jYjdlLTRlNmUtYThhNC1lMTg2MDI3MzljZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNmFmZDFl LWNiN2UtNGU2ZS1hOGE0LWUxODYwMjczOWNkNS8xL1dGUG1XakNIdE1xRnlJQXJZ UDhQQXJRUWJaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQGLqbAAwQGTowAAwQFX6pgAwQF1GvgMA0EAgAC MAcDBQMqBDgAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnp9MA0GCSqGSIb3DQEB CwUAA4IBAQAQZJidSW8VxaLh87l1eofZLsm3NViqaKyAZdRz/Z4R18tYE6aRcB3Q PpHGewxHwFtJvQlQq8fNcn6wor2oEYD+wxAtbYh2NGWSUwTAK+pQuDPVV3dht/57 JM2qNWM+U6Hy3okg/P/3klm73rcMWZtzhdFghuJq3bWWORUzDgXfUXYsb1+GVbaV eM7BQ5N9Cm8FXmuOVucE/hkwBMyqEb3Z2Ea7muyJVBlTXKNdpjLGSc1GnATKbRPh SkDAWzLCOuqocokT3kDtnMEQCOYQrgXQL+/7AiTUKwI1HKZICkhO2K3044nxFmgr rdA4YxE1/uKx4B7XwDStaclR4dBr9otd -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:54 2026 by rpki-client