This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer (raw, json) Hash identifier: l56r4JQctmXkkcLDLIvHFL6lN5ziwxP9QpNA49ZYT8A= Subject key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589DFE14BEC16ACD72E24C5B7B4726 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200831 AS: 202916 IP: 31.24.160.0/21 IP: 62.221.192.0 -- 62.221.227.255 IP: 86.109.16.0/21 IP: 94.126.32.0/22 IP: 109.237.208.0/20 IP: 185.21.240.0/22 IP: 185.87.200.0/22 IP: 185.87.248.0/22 IP: 194.107.180.0/22 IP: 2001:1460::/32 IP: 2a02:4600::/32 IP: 2a04:1cc0::/29 IP: 2a05:c4c0::/29 IP: 2a0d:7980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9d:fe:14:be:c1:6a:cd:72:e2:4c:5b:7b:47:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588cabf6f523f26e267db03b524347841aaaa465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:be:61:c1:09:26:42:86:83:f1:13:26:62: 17:7c:36:a7:66:77:0a:e9:71:01:59:17:e6:84:ed: c5:9d:c0:e7:4c:de:40:1c:29:9a:0b:5f:ff:a9:e6: 0d:2f:3f:85:e3:44:69:9d:f6:6a:4c:16:7c:86:b3: 8f:bf:fa:3f:63:b4:74:37:b6:09:06:37:fd:d6:da: cd:46:c3:a0:ba:57:ca:48:09:17:a3:d7:68:d1:65: b5:d3:e9:d8:cb:40:df:42:33:e1:47:a8:28:19:68: a9:93:6c:c6:70:9b:15:84:fe:fe:8d:96:07:4d:32: 1e:5e:48:b6:a7:3f:a7:5a:2a:26:f6:e0:1d:41:c1: 83:1e:09:ae:b3:d8:2a:53:56:c1:f7:43:51:a3:9f: c9:c4:bf:63:f9:80:5b:28:a3:60:c5:4f:1c:0b:7e: 84:92:b3:b1:a4:12:d1:23:7e:f8:b1:50:70:0d:2c: 1b:07:e1:d3:d0:9c:6c:78:b0:12:1c:bd:60:83:1c: a9:60:3c:b5:3f:9f:d0:14:39:10:c7:fb:80:f2:8a: 3d:1a:c9:d1:63:96:0a:31:af:01:96:77:d5:c6:ff: f1:5a:c0:b4:28:fe:b7:c0:cb:99:72:c3:62:ba:64: 61:41:7d:40:08:0b:18:93:86:f5:76:27:3e:cf:5c: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.160.0/21 62.221.192.0-62.221.227.255 86.109.16.0/21 94.126.32.0/22 109.237.208.0/20 185.21.240.0/22 185.87.200.0/22 185.87.248.0/22 194.107.180.0/22 IPv6: 2001:1460::/32 2a02:4600::/32 2a04:1cc0::/29 2a05:c4c0::/29 2a0d:7980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200831 202916 Signature Algorithm: sha256WithRSAEncryption 53:fc:59:1b:d2:b5:37:ec:6d:26:75:a6:06:05:e8:45:5c:ae: 96:e3:d5:64:1b:c4:25:7c:1e:a4:16:5f:d2:06:e6:df:fb:83: 84:4b:9e:da:1a:a7:d1:aa:01:ad:c5:7d:05:3e:af:30:d7:7f: 11:77:a3:81:9d:c2:e5:33:e8:e9:1e:7f:9d:60:d8:c9:14:86: 5f:39:a6:ff:dd:0f:49:8b:0b:f8:7e:60:5c:9a:78:79:cb:1e: 40:56:24:c0:35:1e:9e:5a:36:f9:8a:02:9e:3b:bc:23:27:0e: 4d:e2:7c:54:40:a0:bf:1c:9a:ea:d0:49:35:8c:47:07:ac:8b: 7f:48:38:14:d8:60:ec:01:9e:c1:6c:e3:62:6d:de:6a:a6:a6: a3:bb:e8:66:f6:2d:02:63:7f:55:e5:5c:2b:e5:e1:49:28:c5: 08:b7:30:aa:0f:18:53:33:14:2c:69:48:46:7c:c1:8a:d9:dd: 92:5b:6c:50:af:76:38:8b:67:9f:6f:19:db:ff:c7:cb:31:3c: 3d:42:c6:ea:22:8c:d3:97:f5:82:96:79:f3:b5:55:2f:36:04: 1c:c3:42:09:21:6e:09:4f:66:e3:2a:94:f2:8d:81:ad:d3:2c: 5b:29:83:88:4d:c9:f6:12:6b:75:1b:ec:d6:12:59:93:1e:40: 8b:32:4b:85 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt3WJ3+FL7Bas1y4kxbe0cmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhjYWJmNmY1MjNmMjZlMjY3ZGIwM2I1MjQzNDc4NDFhYWFhNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sm+YcEJJkKGg/ETJmIXfDanZncK 6XEBWRfmhO3FncDnTN5AHCmaC1//qeYNLz+F40RpnfZqTBZ8hrOPv/o/Y7R0N7YJ Bjf91trNRsOgulfKSAkXo9do0WW10+nYy0DfQjPhR6goGWipk2zGcJsVhP7+jZYH TTIeXki2pz+nWiom9uAdQcGDHgmus9gqU1bB90NRo5/JxL9j+YBbKKNgxU8cC36E krOxpBLRI374sVBwDSwbB+HT0JxseLASHL1ggxypYDy1P5/QFDkQx/uA8oo9GsnR Y5YKMa8BlnfVxv/xWsC0KP63wMuZcsNiumRhQX1ACAsYk4b1dic+z1wQXQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFFiMq/b1I/JuJn2wO1JDR4QaqqRlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzAxODdk Ni04YmZjLTRjNTktYTZjNC02YWQzMjUyYTE0MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMDE4N2Q2 LThiZmMtNGM1OS1hNmM0LTZhZDMyNTJhMTQyNy8xL1dJeXI5dlVqOG00bWZiQTdV a05IaEJxcXBHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwRAQCAAEwPgMEAx8YoDAMAwQGPt3AAwQCPt3gAwQDVm0QAwQC Xn4gAwQEbe3QAwQCuRXwAwQCuVfIAwQCuVf4AwQCwmu0MCkEAgACMCMDBQAgARRg AwUAKgJGAAMFAyoEHMADBQMqBcTAAwUAKg15gDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMDEH8CAwMYpDANBgkqhkiG9w0BAQsFAAOCAQEAU/xZG9K1N+xtJnWmBgXo RVyuluPVZBvEJXwepBZf0gbm3/uDhEue2hqn0aoBrcV9BT6vMNd/EXejgZ3C5TPo 6R5/nWDYyRSGXzmm/90PSYsL+H5gXJp4ecseQFYkwDUenlo2+YoCnju8IycOTeJ8 VECgvxya6tBJNYxHB6yLf0g4FNhg7AGewWzjYm3eaqamo7voZvYtAmN/VeVcK+Xh SSjFCLcwqg8YUzMULGlIRnzBitndkltsUK92OItnn28Z2//HyzE8PULG6iKM05f1 gpZ587VVLzYEHMNCCSFuCU9m4yqU8o2BrdMsWymDiE3J9hJrdRvs1hJZkx5AizJL hQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:08 2026 by rpki-client