This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer File: WVUSBp5lxZCALs5b972H5muPNdM.cer (raw, json) Hash identifier: YhME8EJJcMv6pGvwkSwe5mv91p4S1852iD17cRGPjzo= Subject key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6C8F423F7DFA3D1188934063415F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35433 AS: 42611 AS: 211178 AS: 213094 IP: 84.18.224.0/19 IP: 85.208.12.0/22 IP: 91.193.8.0/22 IP: 94.103.240.0/22 IP: 193.3.34.0/24 IP: 2a09:8040::/29 IP: 2a0b:cc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6c:8f:42:3f:7d:fa:3d:11:88:93:40:63:41:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:8d:b7:a6:51:16:c3:74:2a:cf:06:25:dc: 7b:cf:97:ce:af:19:df:55:2d:91:cf:b9:25:20:8d: 8d:ad:2f:70:e5:94:dd:79:a7:a2:89:41:1b:69:f4: 1b:e7:1b:cb:db:77:2b:01:58:33:ce:45:ff:0e:da: a1:1a:4c:e6:7e:6b:67:6b:73:78:81:8c:c6:b0:c4: e6:95:32:f9:6f:bd:97:97:f0:8b:f9:b6:6e:21:81: 23:68:ad:b1:07:73:33:ac:fd:cc:59:f9:3c:08:36: 91:f6:e7:fa:b3:bc:49:ed:e2:59:0a:46:b2:fd:af: 63:1b:58:5a:e8:6c:cb:06:8b:6a:e3:cb:75:1b:fe: e6:95:a3:b3:22:b0:1f:fc:0b:94:a2:d5:98:61:25: 5b:59:b9:d8:46:19:fb:5e:c4:10:d2:b1:08:07:bd: dd:75:74:9f:30:17:ee:cf:c0:0e:29:ca:af:51:13: 10:1d:08:ae:77:1e:55:35:38:b7:fe:a2:b8:83:ce: 28:5b:88:12:96:6a:62:8c:8f:5c:85:87:0f:75:ce: 87:20:e2:52:0f:10:6f:59:3a:e0:d1:0d:a1:2e:8a: 43:42:09:51:a7:66:a0:99:b0:ee:e5:bc:1a:50:90: 1d:64:dc:64:e1:96:00:12:dc:72:0e:2b:70:35:df: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.18.224.0/19 85.208.12.0/22 91.193.8.0/22 94.103.240.0/22 193.3.34.0/24 IPv6: 2a09:8040::/29 2a0b:cc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35433 42611 211178 213094 Signature Algorithm: sha256WithRSAEncryption 41:b0:74:69:f4:88:fc:33:f8:a8:31:a8:d3:c8:bf:cd:b2:1c: 81:9e:49:11:ce:9d:bd:e1:01:2e:79:b6:e4:76:20:55:06:67: 2f:3f:b0:96:05:59:8b:fc:06:7f:de:0a:9f:7f:8f:21:3c:9d: 4e:4d:27:40:85:b8:b7:0f:23:f6:09:d9:8d:64:51:ee:a2:80: a0:58:32:7c:b4:84:52:f0:f4:fe:29:df:88:79:d8:8a:1b:cc: 3f:e5:82:66:a2:c8:df:4c:21:25:08:fb:a2:b7:01:76:b9:ab: 1e:11:46:ec:c7:63:16:61:4f:63:86:39:81:67:47:97:6d:6f: 35:bd:a8:ab:e6:a9:d3:6b:78:d3:ec:ba:c5:0e:6f:2c:74:ff: 65:53:6a:9e:4a:b7:ec:5b:b4:31:ba:81:0e:d8:f4:1a:c9:53: 82:28:3d:e7:f3:f5:25:6f:8b:94:dc:df:7f:48:3c:8a:1c:94: 90:7a:38:d0:2e:0f:a4:8a:06:b7:de:d2:7b:36:48:a3:d7:be: ed:54:9c:de:41:aa:5b:84:f9:49:cd:09:eb:5a:a2:0e:17:46: 54:95:dc:b9:36:ce:23:2b:fe:b8:21:d6:f7:8e:d6:85:c4:be: 4a:78:e7:a1:8b:18:8e:3c:aa:d8:7a:71:e4:6e:c2:60:c7:08: 9d:51:6f:c8 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt262yPQj99+j0RiJNAY0FfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTU1MTIwNjllNjVjNTkwODAyZWNlNWJmN2JkODdlNjZiOGYzNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKaNt6ZRFsN0Ks8GJdx7z5fOrxnf VS2Rz7klII2NrS9w5ZTdeaeiiUEbafQb5xvL23crAVgzzkX/DtqhGkzmfmtna3N4 gYzGsMTmlTL5b72Xl/CL+bZuIYEjaK2xB3MzrP3MWfk8CDaR9uf6s7xJ7eJZCkay /a9jG1ha6GzLBotq48t1G/7mlaOzIrAf/AuUotWYYSVbWbnYRhn7XsQQ0rEIB73d dXSfMBfuz8AOKcqvURMQHQiudx5VNTi3/qK4g84oW4gSlmpijI9chYcPdc6HIOJS DxBvWTrg0Q2hLopDQglRp2agmbDu5bwaUJAdZNxk4ZYAEtxyDitwNd+aQQIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzFiZWQx Ny01ZTMzLTQzYTEtYmI4Zi00M2E0M2RhOTI4OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMWJlZDE3 LTVlMzMtNDNhMS1iYjhmLTQzYTQzZGE5Mjg5YS8xL1dWVVNCcDVseFpDQUxzNWI5 NzJINW11UE5kTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQFVBLgAwQCVdAMAwQCW8EIAwQCXmfwAwQAwQMi MBQEAgACMA4DBQMqCYBAAwUDKgvMgDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMA imkCAwCmcwIDAzjqAgMDQGYwDQYJKoZIhvcNAQELBQADggEBAEGwdGn0iPwz+Kgx qNPIv82yHIGeSRHOnb3hAS55tuR2IFUGZy8/sJYFWYv8Bn/eCp9/jyE8nU5NJ0CF uLcPI/YJ2Y1kUe6igKBYMny0hFLw9P4p34h52IobzD/lgmaiyN9MISUI+6K3AXa5 qx4RRuzHYxZhT2OGOYFnR5dtbzW9qKvmqdNreNPsusUObyx0/2VTap5Kt+xbtDG6 gQ7Y9BrJU4IoPefz9SVvi5Tc339IPIoclJB6ONAuD6SKBrfe0ns2SKPXvu1UnN5B qluE+UnNCetaog4XRlSV3Lk2ziMr/rgh1veO1oXEvkp456GLGI48qth6ceRuwmDH CJ1Rb8g= -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:02 2026 by rpki-client