This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer File: WKaBxxvrRk4B1baOGcpWbamTDiM.cer (raw, json) Hash identifier: V9z6YZvT7mWdKpKRZR0zROVYXVVVpYt7LAXJCfuiEz0= Subject key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA543C75AC58637C3DB41B8BA04B29E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210984 IP: 2a14:dc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:43:c7:5a:c5:86:37:c3:db:41:b8:ba:04:b2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:a3:57:a0:6b:ef:4e:0a:65:a8:a3:cd:bb: 02:0f:07:0a:01:2f:8a:54:d4:db:8c:26:5f:a9:7e: de:74:6d:09:9e:ce:f5:ce:ae:9f:e3:59:89:48:ad: 31:c8:7b:72:34:42:45:d2:b4:0b:92:aa:43:0a:1a: df:58:dd:8a:f8:a2:93:0b:53:ab:6c:e6:9d:bb:01: 76:08:ab:21:1f:bc:c1:0e:71:3d:fd:6e:57:8d:32: e3:82:2f:ef:3e:fa:4c:8d:eb:3e:f0:05:5f:e9:62: 61:ce:4d:96:28:e7:ad:9e:7a:d7:1a:53:06:27:17: d6:2f:88:45:76:9b:49:a1:62:47:25:dd:d5:c0:5a: dd:41:d2:0c:22:b3:f6:8f:b6:dc:2b:e3:a8:72:1a: c8:f7:4c:2d:d9:6b:03:49:a1:46:4e:8a:d4:1f:e0: 1b:3d:65:df:67:8e:3b:18:64:a2:89:d3:67:82:4e: 79:2e:27:9d:d9:e3:fa:61:7d:af:3f:12:e3:d9:bf: d5:f1:58:de:10:52:ec:ea:17:a0:e8:92:b0:c7:4d: c7:69:32:7a:ba:5a:57:8f:3a:56:6d:a5:5f:fd:14: cb:45:1c:ef:df:3a:45:03:8a:17:a6:e8:db:cf:00: ad:93:37:96:d7:02:4e:e7:05:e1:67:1f:cf:a2:53: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:dc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210984 Signature Algorithm: sha256WithRSAEncryption 6d:e8:dc:4e:a4:5a:dd:8f:1d:b4:2b:fd:0d:c5:ef:3a:d1:56: b8:01:3d:c0:01:b3:0a:86:9e:09:e3:86:38:4e:ff:35:5c:05: c6:02:2f:53:a3:a8:09:7f:52:02:f7:f1:9e:8e:d9:ea:fa:ee: 30:f2:f2:7a:84:56:67:e3:98:99:81:48:6d:2b:aa:8a:b7:1b: 65:6e:bc:b4:e1:8c:f0:47:d4:35:bc:e0:bb:9a:9e:d1:a9:e0: 26:cd:ac:21:1b:51:73:2f:82:93:78:ba:ba:13:3c:fe:a4:09: f4:f9:dc:c1:d7:2c:c6:bf:0c:ae:7c:a2:9e:dc:f7:2c:bb:03: 82:2f:3d:0b:bb:d6:ba:41:50:cb:2c:bd:c7:27:2b:00:e8:75: 3d:3f:bf:45:b7:bc:a6:79:ca:8b:65:a9:88:07:33:28:49:af: a5:82:62:08:d2:f2:cb:85:06:64:96:2c:d2:37:ea:12:53:45: f1:a5:9d:4e:b7:ea:f7:95:73:4c:8e:67:ab:e7:74:a6:70:f4: 9a:54:14:f7:74:21:2e:50:17:30:23:e2:64:f5:8b:ed:e7:77: 6d:d3:b4:f2:5c:2b:05:be:36:3d:66:12:6c:f6:2a:fa:20:b3: bc:8a:e1:01:6f:17:53:c5:aa:84:cc:04:5c:ec:1c:0b:3d:c5: ac:44:15:02 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt+pUPHWsWGN8PbQbi6BLKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE2ODFjNzFiZWI0NjRlMDFkNWI2OGUxOWNhNTY2ZGE5OTMwZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1qjV6Br704KZaijzbsCDwcKAS+K VNTbjCZfqX7edG0Jns71zq6f41mJSK0xyHtyNEJF0rQLkqpDChrfWN2K+KKTC1Or bOaduwF2CKshH7zBDnE9/W5XjTLjgi/vPvpMjes+8AVf6WJhzk2WKOetnnrXGlMG JxfWL4hFdptJoWJHJd3VwFrdQdIMIrP2j7bcK+OochrI90wt2WsDSaFGTorUH+Ab PWXfZ447GGSiidNngk55Lied2eP6YX2vPxLj2b/V8VjeEFLs6heg6JKwx03HaTJ6 ulpXjzpWbaVf/RTLRRzv3zpFA4oXpujbzwCtkzeW1wJO5wXhZx/PolOXPQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFFimgccb60ZOAdW2jhnKVm2pkw4jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2Y1MWQy ZS1kMTc0LTRlZjUtODBjMS05N2Y5MWJjOTdhNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZjUxZDJl LWQxNzQtNGVmNS04MGMxLTk3ZjkxYmM5N2E0Mi8xL1dLYUJ4eHZyUms0QjFiYU9H Y3BXYmFtVERpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTcgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDOCgwDQYJKoZIhvcNAQELBQADggEBAG3o3E6kWt2PHbQr/Q3F7zrRVrgBPcAB swqGngnjhjhO/zVcBcYCL1OjqAl/UgL38Z6O2er67jDy8nqEVmfjmJmBSG0rqoq3 G2VuvLThjPBH1DW84LuantGp4CbNrCEbUXMvgpN4uroTPP6kCfT53MHXLMa/DK58 op7c9yy7A4IvPQu71rpBUMssvccnKwDodT0/v0W3vKZ5yotlqYgHMyhJr6WCYgjS 8suFBmSWLNI36hJTRfGlnU636veVc0yOZ6vndKZw9JpUFPd0IS5QFzAj4mT1i+3n d23TtPJcKwW+Nj1mEmz2Kvogs7yK4QFvF1PFqoTMBFzsHAs9xaxEFQI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:45 2026 by rpki-client