This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer File: WGFXm4dePgk9RzJblzXtv-eAn7o.cer (raw, json) Hash identifier: fV28uCgoeToHFQT6Ssxd4A8ChZB0KPd07PaKvATB9A8= Subject key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECFD7C9FDAA3AD4C977BF5EEC2307 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.17.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cf:d7:c9:fd:aa:3a:d4:c9:77:bf:5e:ec:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5861579b875e3e093d47325b9735edbfe7809fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:2c:21:08:83:95:bb:02:f7:da:0d:25:fe: e3:a6:81:9a:04:6a:43:f7:c4:bf:79:a3:9c:2b:40: 3b:1c:40:32:54:f3:0d:a5:eb:f7:48:f6:f5:b9:45: 5e:dd:d6:65:81:58:34:7c:84:ad:86:17:ef:6f:39: 2f:57:b3:6e:59:a3:be:6a:b6:7d:24:5d:d4:4c:80: e9:86:3b:8e:d1:71:5a:92:42:27:56:5e:21:83:c5: 3a:7d:32:43:81:54:7c:27:14:4e:03:79:a9:a4:08: 65:c4:f2:ec:44:ca:18:44:2b:c3:1d:e3:13:ef:2e: 40:2e:d3:4d:8f:23:2b:4c:c7:fc:14:26:70:f8:66: b0:44:d5:8e:ca:7f:20:10:89:5c:c9:41:df:b7:5f: 49:10:b5:a5:1d:a8:c9:5f:b1:fa:92:2c:3e:14:59: 79:2b:47:ec:50:f1:43:e8:2e:fb:4c:03:84:09:8a: fe:cf:80:29:73:95:2e:fc:1b:4e:32:23:f8:6c:19: 26:a9:5c:6d:bd:88:fa:be:8e:ca:cf:d0:2b:37:bf: 16:fa:07:86:c2:a6:4f:a0:21:7d:b2:b3:eb:e1:25: a0:75:22:02:45:f0:df:62:ab:3e:2d:7e:76:ce:f8: 52:8b:1b:12:e9:1a:d3:7d:8d:46:2f:30:04:1b:8e: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.223.0/24 Signature Algorithm: sha256WithRSAEncryption 74:0c:d8:7b:48:02:8e:2b:3b:7a:e2:90:1f:37:42:ee:34:8e: 96:37:b4:39:0a:15:c3:9c:e3:05:ab:3b:04:eb:f1:1f:d7:4f: 59:c7:9d:4d:e7:40:a0:44:2b:36:0a:0a:05:1b:cf:6a:62:5c: 6a:b4:d2:8d:ae:43:e2:4b:0e:d6:e9:5e:b2:41:70:d3:9e:a8: 03:0b:fd:a4:25:0c:ae:02:5c:52:d6:d5:cd:83:10:5e:13:f7: af:e8:c7:26:6f:d2:1e:19:85:d5:d8:bd:85:e9:99:6c:d0:cd: 12:40:47:59:88:9a:b8:30:e7:13:46:21:5d:18:4e:80:b7:a7: c7:02:7d:f1:b0:de:7b:04:9f:ed:1d:7a:76:85:a5:30:4e:e2: 14:66:eb:04:4f:ea:5a:74:b6:31:23:8c:81:d9:da:fa:8c:a2: fe:8e:44:e3:b0:7b:4c:d9:f9:10:1f:a8:d6:35:72:2c:25:57: f7:47:d0:52:41:89:c9:7c:f7:7b:67:5d:57:7d:42:91:b4:f0: 31:5c:17:fe:2f:0e:94:d4:08:70:df:56:2d:10:0b:b2:10:ca: ed:3a:d3:ab:22:e8:81:f3:9a:6d:83:9e:09:62:9e:c3:da:35: 45:fa:8c:0a:65:a6:53:30:19:87:a0:2e:02:7b:7f:ec:47:30: 02:06:19:5c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fs/Xyf2qOtTJd79e7CMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODYxNTc5Yjg3NWUzZTA5M2Q0NzMyNWI5NzM1ZWRiZmU3ODA5ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdosIQiDlbsC99oNJf7jpoGaBGpD 98S/eaOcK0A7HEAyVPMNpev3SPb1uUVe3dZlgVg0fISthhfvbzkvV7NuWaO+arZ9 JF3UTIDphjuO0XFakkInVl4hg8U6fTJDgVR8JxROA3mppAhlxPLsRMoYRCvDHeMT 7y5ALtNNjyMrTMf8FCZw+GawRNWOyn8gEIlcyUHft19JELWlHajJX7H6kiw+FFl5 K0fsUPFD6C77TAOECYr+z4Apc5Uu/BtOMiP4bBkmqVxtvYj6vo7Kz9ArN78W+geG wqZPoCF9srPr4SWgdSICRfDfYqs+LX52zvhSixsS6RrTfY1GLzAEG45dPwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFhhV5uHXj4JPUcyW5c17b/ngJ+6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzM3Yjlh OC01MTg2LTQzZjMtOTA2NC1mNTMzNjMyN2I4ODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMzdiOWE4 LTUxODYtNDNmMy05MDY0LWY1MzM2MzI3Yjg4MS8xL1dHRlhtNGRlUGdrOVJ6SmJs elh0di1lQW43by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRHfMA0GCSqGSIb3DQEBCwUAA4IBAQB0DNh7 SAKOKzt64pAfN0LuNI6WN7Q5ChXDnOMFqzsE6/Ef109Zx51N50CgRCs2CgoFG89q YlxqtNKNrkPiSw7W6V6yQXDTnqgDC/2kJQyuAlxS1tXNgxBeE/ev6Mcmb9IeGYXV 2L2F6Zls0M0SQEdZiJq4MOcTRiFdGE6At6fHAn3xsN57BJ/tHXp2haUwTuIUZusE T+padLYxI4yB2dr6jKL+jkTjsHtM2fkQH6jWNXIsJVf3R9BSQYnJfPd7Z11XfUKR tPAxXBf+Lw6U1Ahw31YtEAuyEMrtOtOrIuiB85ptg54JYp7D2jVF+owKZaZTMBmH oC4Ce3/sRzACBhlc -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:50 2026 by rpki-client