This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer (raw, json) Hash identifier: DQHqOxrjiCG54J4kyYTcfx8e+8vCe3Sk7mwKFijjGws= Subject key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910A8048CA5210BB94C37DF7769760F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207144 IP: 85.11.128.0/18 IP: 185.164.240.0/22 IP: 2a03:dac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a8:04:8c:a5:21:0b:b9:4c:37:df:77:69:76:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5975d519de239cf164cb94a6660c2530ceaef254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:31:61:df:0f:68:13:fa:d9:94:a8:8a:f9: 82:69:66:8b:75:d7:8e:03:dd:6d:d0:9f:00:19:f3: 79:c1:25:80:44:39:fa:ef:5d:46:29:7f:7e:72:64: c0:33:02:4f:98:5b:38:5d:55:1d:02:8d:c2:ab:b4: dd:ea:6d:8e:91:5f:f3:05:56:c8:fd:96:6c:90:81: e4:cd:c6:ed:25:13:10:7c:09:26:77:c5:55:86:1c: 8f:83:88:3a:e7:e3:9d:48:51:b5:33:15:6d:40:2d: bf:c1:18:0c:42:a6:28:07:20:4c:f3:3b:46:e4:c6: e9:59:6d:ad:a0:c0:cb:e5:de:ad:04:21:7d:39:16: 20:b3:9d:8d:e0:04:f7:d1:9b:3e:44:c6:9a:13:0c: ad:18:21:68:01:44:14:6d:ed:cf:2c:87:71:4d:a1: e1:32:47:05:ca:a2:5d:be:20:f8:0d:32:32:ce:62: 20:b1:b8:46:41:3d:35:7e:af:54:46:05:05:d0:ea: 38:23:a5:01:72:b1:05:3a:53:0a:64:00:3b:16:fe: d3:41:b7:8b:d7:7d:ec:61:d4:df:6b:2f:9b:07:fb: 3e:43:a2:5f:66:9d:42:92:96:2b:39:c3:3a:bc:33: 39:fe:19:10:a6:0b:0f:76:13:bf:9a:0f:63:61:a9: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.128.0/18 185.164.240.0/22 IPv6: 2a03:dac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207144 Signature Algorithm: sha256WithRSAEncryption 87:d8:df:23:d5:f5:b4:08:07:64:10:3b:89:24:9e:8d:68:77: 24:51:d6:9e:d0:2f:83:b8:10:e6:95:97:3e:4c:a1:b0:93:83: 62:36:e6:d1:4d:0c:18:a7:20:3f:5c:d8:df:eb:2e:43:6c:0f: e9:4a:f3:1f:bc:30:be:7c:43:95:b4:00:76:58:ab:dd:7a:34: 22:75:f5:e0:84:3f:77:76:6d:52:3e:36:ad:c6:42:3c:67:8b: 78:3b:8b:f0:8d:13:83:bf:08:c5:ad:de:50:a8:d4:d8:47:da: 54:bc:ef:1b:e3:13:fc:c3:73:cd:cb:af:ef:c6:d9:ad:17:9f: d8:af:80:20:6c:1a:a7:29:08:04:ff:f8:ec:d2:32:d1:95:a9: 32:45:a4:8b:59:1a:7f:dd:53:74:26:ba:1b:8d:32:91:fa:bc: ef:c1:98:28:7b:fd:44:07:42:ac:b1:39:cb:8c:8a:98:a6:55: 2f:9e:14:ef:bf:a9:60:bc:f4:58:42:53:ba:13:09:e7:58:47: b3:de:5b:e0:5f:df:4a:89:8e:72:1d:7a:04:fc:9f:9a:b9:44: 54:e8:cf:f7:48:60:6f:c8:82:bf:8c:48:bb:5c:30:90:67:76: b0:04:75:b4:b9:72:87:63:68:dd:e4:ae:5f:f3:ca:b3:43:3f: 56:dd:bf:78 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EKgEjKUhC7lMN993aXYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTc1ZDUxOWRlMjM5Y2YxNjRjYjk0YTY2NjBjMjUzMGNlYWVmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvgxYd8PaBP62ZSoivmCaWaLddeO A91t0J8AGfN5wSWARDn6711GKX9+cmTAMwJPmFs4XVUdAo3Cq7Td6m2OkV/zBVbI /ZZskIHkzcbtJRMQfAkmd8VVhhyPg4g65+OdSFG1MxVtQC2/wRgMQqYoByBM8ztG 5MbpWW2toMDL5d6tBCF9ORYgs52N4AT30Zs+RMaaEwytGCFoAUQUbe3PLIdxTaHh MkcFyqJdviD4DTIyzmIgsbhGQT01fq9URgUF0Oo4I6UBcrEFOlMKZAA7Fv7TQbeL 133sYdTfay+bB/s+Q6JfZp1CkpYrOcM6vDM5/hkQpgsPdhO/mg9jYakMiQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFl11RneI5zxZMuUpmYMJTDOrvJUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzBjMGMz Ny1iNDAxLTQwMWItYWE2NS0yY2M2NzU3MjY5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvMGMwYzM3 LWI0MDEtNDAxYi1hYTY1LTJjYzY3NTcyNjk3NS8xL1dYWFZHZDRqblBGa3k1U21a Z3dsTU02dThsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGVQuAAwQCuaTwMA0EAgACMAcDBQAqA9rAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpKDANBgkqhkiG9w0BAQsFAAOCAQEAh9jf I9X1tAgHZBA7iSSejWh3JFHWntAvg7gQ5pWXPkyhsJODYjbm0U0MGKcgP1zY3+su Q2wP6UrzH7wwvnxDlbQAdlir3Xo0InX14IQ/d3ZtUj42rcZCPGeLeDuL8I0Tg78I xa3eUKjU2EfaVLzvG+MT/MNzzcuv78bZrRef2K+AIGwapykIBP/47NIy0ZWpMkWk i1kaf91TdCa6G40ykfq878GYKHv9RAdCrLE5y4yKmKZVL54U77+pYLz0WEJTuhMJ 51hHs95b4F/fSomOch16BPyfmrlEVOjP90hgb8iCv4xIu1wwkGd2sAR1tLlyh2No 3eSuX/PKs0M/Vt2/eA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:00 2026 by rpki-client