This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer (raw, json) Hash identifier: I3UuHrtWFMv89F6nEbWcxjWBFuva7yHYhhtmYY15KcI= Subject key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B408FBF351F07805B9A04DCDD582 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.18.84.0/22 IP: 2a03:f440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b4:08:fb:f3:51:f0:78:05:b9:a0:4d:cd:d5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=591338a61f6a0f548420a9392037f4811749508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:b7:03:87:b1:17:8a:ae:b0:88:a8:32:49: 02:d6:24:20:85:29:00:9a:a8:30:01:2b:58:e9:c9: 49:0f:c6:ac:2a:4c:73:5a:39:0b:39:0a:de:0b:93: ca:d6:49:56:33:8d:98:47:14:0e:c1:47:2f:5f:92: 94:7c:80:6d:c5:9b:a2:7e:07:45:9b:19:dd:a8:b1: 71:98:9e:b6:bf:9f:ef:70:07:a5:4b:fe:8e:26:ce: fe:18:88:c3:eb:aa:f6:b8:a4:1f:dc:fd:bf:75:7f: d0:73:e6:8c:63:48:00:a9:47:e5:0d:cb:1f:5e:3b: 1d:85:a4:cb:6d:59:1e:2e:65:59:25:7a:ce:57:ca: 00:f8:62:e7:22:79:b8:bd:cf:27:08:e3:05:39:00: ff:53:4f:34:24:ce:01:0f:0b:c9:31:13:f6:b7:f2: 7b:8a:83:91:2a:27:fc:ff:31:ad:80:14:a2:9f:09: 05:fc:dc:e5:9d:c5:5e:46:f7:84:44:7b:74:e9:54: 01:79:ee:83:88:4e:88:f6:a0:38:d6:68:08:94:05: 8d:82:ea:13:71:84:51:ae:58:f9:2e:b0:f3:b7:cc: 5a:1a:60:71:1e:4d:8c:d2:77:94:bd:a3:3d:d0:c9: f0:77:6d:04:33:e1:20:91:2e:25:77:42:dd:aa:ca: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.84.0/22 IPv6: 2a03:f440::/32 Signature Algorithm: sha256WithRSAEncryption 2e:1c:7b:f3:08:79:e2:e9:32:fa:68:80:73:f0:c7:b2:cc:bd: 64:3d:15:84:4a:d8:f0:fa:6b:6f:aa:36:81:14:c4:94:8b:6a: e9:92:e3:6a:59:32:96:c0:d0:80:f1:3c:e8:a7:d4:6e:7f:67: f1:bf:c3:ed:c3:55:13:16:ed:f0:3b:49:18:1a:3d:a7:fe:5b: fe:ff:f6:9d:9d:57:99:45:b6:50:c7:ab:81:2b:e4:38:f0:b2: 48:fc:90:d6:be:a1:25:36:5d:06:52:ad:58:fd:f3:e6:78:36: c3:a2:f4:11:bd:00:0d:5c:8e:81:f5:98:9a:d5:65:ed:52:c9: 53:80:17:6e:a0:0c:0d:17:22:df:cb:c4:a8:63:5a:ea:29:f1: 32:88:97:65:d9:e0:93:74:82:73:cd:5b:72:33:ad:6e:38:39: f3:c2:35:a3:37:45:6d:65:c2:10:bc:af:4c:ce:89:3e:34:6e: 8d:50:3a:46:b2:c7:98:5a:10:96:45:67:46:1b:25:29:cd:1f: e0:a2:08:20:5e:37:a1:a6:e7:5a:41:14:82:35:38:85:46:93: 87:da:fb:8b:52:0b:20:42:11:8b:47:92:3d:d6:3b:68:ee:2d: c0:b2:ce:32:9b:29:83:dc:8b:9c:cf:d0:5f:5c:93:e5:0e:6a: ec:63:dc:88 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WLQI+/NR8HgFuaBNzdWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTEzMzhhNjFmNmEwZjU0ODQyMGE5MzkyMDM3ZjQ4MTE3NDk1MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsq3A4exF4qusIioMkkC1iQghSkA mqgwAStY6clJD8asKkxzWjkLOQreC5PK1klWM42YRxQOwUcvX5KUfIBtxZuifgdF mxndqLFxmJ62v5/vcAelS/6OJs7+GIjD66r2uKQf3P2/dX/Qc+aMY0gAqUflDcsf XjsdhaTLbVkeLmVZJXrOV8oA+GLnInm4vc8nCOMFOQD/U080JM4BDwvJMRP2t/J7 ioORKif8/zGtgBSinwkF/NzlncVeRveERHt06VQBee6DiE6I9qA41mgIlAWNguoT cYRRrlj5LrDzt8xaGmBxHk2M0neUvaM90Mnwd20EM+EgkS4ld0LdqsrenwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFkTOKYfag9UhCCpOSA39IEXSVCKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzdlYTAw ZC02MDQ3LTRlMTItYTg4MS0xODk0MGNiMzcyYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvN2VhMDBk LTYwNDctNGUxMi1hODgxLTE4OTQwY2IzNzJiZC8xL1dSTTRwaDlxRDFTRUlLazVJ RGYwZ1JkSlVJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRJUMA0EAgACMAcDBQAqA/RAMA0GCSqGSIb3 DQEBCwUAA4IBAQAuHHvzCHni6TL6aIBz8MeyzL1kPRWEStjw+mtvqjaBFMSUi2rp kuNqWTKWwNCA8Tzop9Ruf2fxv8Ptw1UTFu3wO0kYGj2n/lv+//adnVeZRbZQx6uB K+Q48LJI/JDWvqElNl0GUq1Y/fPmeDbDovQRvQANXI6B9Zia1WXtUslTgBduoAwN FyLfy8SoY1rqKfEyiJdl2eCTdIJzzVtyM61uODnzwjWjN0VtZcIQvK9Mzok+NG6N UDpGsseYWhCWRWdGGyUpzR/gogggXjehpudaQRSCNTiFRpOH2vuLUgsgQhGLR5I9 1jto7i3Ass4ymymD3Iucz9BfXJPlDmrsY9yI -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:29 2026 by rpki-client