This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer (raw, json) Hash identifier: Pq7IBfZTiJa09rB+vYbGSX8b0whZTI0tNENsSgQAQPA= Subject key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1268B3373992CE12B5C7491223C3DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.228.234.0/24 IP: 2001:67c:1314::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:68:b3:37:39:92:ce:12:b5:c7:49:12:23:c3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a763f0c467abaa701d968c3749c6dad03489b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:03:ca:f3:42:1b:a7:ae:2f:83:32:48:2c: 3f:bf:c7:ca:a1:11:7d:0d:59:a0:d8:f5:93:ac:49: bb:b8:ce:3d:68:c1:2a:c7:0f:9c:fc:2a:c8:e0:0f: 65:22:cb:d8:e8:8e:58:e4:14:1e:ca:ec:b9:ec:25: b9:05:1f:cf:1e:c5:d1:e1:78:32:71:0c:4e:76:d0: fb:35:8b:fd:4e:8c:eb:0f:11:73:b5:67:a7:8c:3d: 8a:c9:84:0c:b8:88:dc:a7:12:c4:b5:26:55:05:a8: c8:64:b6:e4:02:5f:20:a3:1e:5d:55:98:f3:e2:c9: 63:fb:03:61:e4:57:a8:ce:0c:a3:4a:93:c0:a8:2f: 59:c1:fb:0f:80:55:e7:21:41:06:42:8d:6d:22:fc: f3:e1:7d:19:9e:26:0b:9a:7d:08:d8:07:ba:90:5f: 7a:80:a0:9b:20:a2:ab:c6:6d:c5:02:fb:4d:bd:a9: ed:62:50:1e:86:ca:88:50:b5:c8:6c:a7:55:9e:41: 7c:5f:5d:1f:05:b6:bb:df:59:8f:9a:45:a9:94:55: 77:b4:52:7f:03:9f:6c:84:37:b1:68:90:d5:8c:2e: e2:62:6b:5e:de:58:d6:99:69:76:5a:80:87:20:e6: cc:f0:83:bc:de:20:5c:3a:3f:31:2e:ec:55:84:9e: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.234.0/24 IPv6: 2001:67c:1314::/48 Signature Algorithm: sha256WithRSAEncryption a3:1b:7b:42:00:e8:da:38:de:ef:0a:cf:e2:d0:45:05:3c:ed: 30:02:bb:df:12:df:00:6b:34:56:ad:bf:ec:bd:d2:8e:19:c3: a0:31:31:42:6b:d7:da:43:90:59:f8:7a:68:7a:25:11:fd:90: 01:5d:29:69:88:7d:e5:5d:b5:2f:e2:a4:af:65:ed:8e:9c:68: 21:09:a7:7d:d5:16:8f:e9:df:59:f2:55:b8:0c:86:85:2b:aa: 2b:83:08:c3:46:e3:44:02:f1:cc:b1:64:c3:67:a6:7a:1d:65: 5d:26:07:51:e4:34:1a:c0:c1:ec:89:06:5a:a8:26:ae:ff:60: d8:f2:59:ce:bd:d2:0d:d5:7b:ef:31:85:32:32:4c:9a:3f:57: bd:ad:72:56:be:28:9c:f4:0f:e3:33:17:7e:52:21:d9:86:36: 6e:e6:ac:ef:3b:eb:2a:af:67:cf:3f:83:0a:09:98:e0:a1:32: cf:5a:2b:45:e2:71:e6:2a:d9:c3:7b:b5:d7:ef:ea:77:9c:84: 8b:8f:5f:2b:01:1f:bf:78:a5:10:88:23:6c:31:9d:36:0e:24: 86:ef:58:1e:82:41:01:65:ec:5e:5d:58:f1:2e:69:aa:d5:4f: e0:15:d1:ce:32:00:c1:2e:2c:e1:f8:77:69:6d:75:c8:dd:e2: 0d:cb:65:0a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt8EmizNzmSzhK1x0kSI8PaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE3NjNmMGM0NjdhYmFhNzAxZDk2OGMzNzQ5YzZkYWQwMzQ4OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKIDyvNCG6euL4MySCw/v8fKoRF9 DVmg2PWTrEm7uM49aMEqxw+c/CrI4A9lIsvY6I5Y5BQeyuy57CW5BR/PHsXR4Xgy cQxOdtD7NYv9TozrDxFztWenjD2KyYQMuIjcpxLEtSZVBajIZLbkAl8gox5dVZjz 4slj+wNh5FeozgyjSpPAqC9ZwfsPgFXnIUEGQo1tIvzz4X0ZniYLmn0I2Ae6kF96 gKCbIKKrxm3FAvtNvantYlAehsqIULXIbKdVnkF8X10fBba731mPmkWplFV3tFJ/ A59shDexaJDVjC7iYmte3ljWmWl2WoCHIObM8IO83iBcOj8xLuxVhJ5UtQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFFinY/DEZ6uqcB2WjDdJxtrQNImwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzVkNjQ5 MS0wOGZmLTQ5NGQtODQzMy0wOThmN2M1ZmQ5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNWQ2NDkx LTA4ZmYtNDk0ZC04NDMzLTA5OGY3YzVmZDk3NS8xL1dLZGo4TVJucTZwd0haYU1O MG5HMnRBMGliQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAweTqMA8EAgACMAkDBwAgAQZ8ExQwDQYJKoZI hvcNAQELBQADggEBAKMbe0IA6No43u8Kz+LQRQU87TACu98S3wBrNFatv+y90o4Z w6AxMUJr19pDkFn4emh6JRH9kAFdKWmIfeVdtS/ipK9l7Y6caCEJp33VFo/p31ny VbgMhoUrqiuDCMNG40QC8cyxZMNnpnodZV0mB1HkNBrAweyJBlqoJq7/YNjyWc69 0g3Ve+8xhTIyTJo/V72tcla+KJz0D+MzF35SIdmGNm7mrO876yqvZ88/gwoJmOCh Ms9aK0XiceYq2cN7tdfv6nechIuPXysBH794pRCII2wxnTYOJIbvWB6CQQFl7F5d WPEuaarVT+AV0c4yAMEuLOH4d2ltdcjd4g3LZQo= -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:48 2026 by rpki-client