This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer File: WXtExKeTHGam_56S27MspyPUzPc.cer (raw, json) Hash identifier: zml7Tbrfx0VziiUlBPUnI/7RIQQt709v+avvW4tifWI= Subject key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D6F3B96F8F04E2A102B5D76E5EAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3223 IP: 5.254.0.0/17 IP: 93.114.40.0/21 IP: 93.115.80.0/20 IP: 185.242.204.0/22 IP: 2a0c:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d6:f3:b9:6f:8f:04:e2:a1:02:b5:d7:6e:5e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:01:7e:d4:ed:c5:4d:cc:0e:ba:5b:48:7a: bf:63:0c:b5:a4:27:cb:aa:73:38:7f:0b:f1:6c:0b: ae:0d:4e:d4:9b:7d:e6:c4:a9:c5:6b:f2:71:bb:55: 74:5c:dc:23:35:d7:c0:c1:50:df:a9:01:1d:2c:95: 0b:38:ca:c1:7b:aa:96:80:44:1d:75:4f:d8:a4:fd: 4e:e5:a5:df:00:8e:24:e6:a6:6b:83:36:64:4f:85: 17:59:57:ff:ff:9d:80:b9:4e:68:4a:20:8d:66:70: 75:06:4b:09:b6:c1:8d:69:3c:c7:45:58:61:9a:6d: 0a:7c:a1:e4:2b:31:e0:8a:24:59:94:ed:28:bb:45: 84:8b:aa:b4:a2:28:b3:a7:25:9f:f7:f9:01:dd:67: 32:78:cb:06:bc:60:3d:6a:ef:e3:d8:55:6b:c2:05: 78:1e:97:49:e7:03:ac:4d:5f:5b:28:f7:54:24:da: 5d:61:c6:9d:52:b6:f1:1b:00:ae:74:0d:33:96:54: 44:6b:99:5c:8c:c1:f5:94:65:e3:62:46:8e:6e:a8: 0f:f7:13:69:b3:01:64:9b:95:c1:34:34:48:e6:1e: e1:13:e8:a0:e6:3c:80:ab:b5:1c:49:20:a2:d5:1b: 97:f1:7b:fe:35:0f:e8:96:aa:9c:b5:1f:31:f0:a3: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.0.0/17 93.114.40.0/21 93.115.80.0/20 185.242.204.0/22 IPv6: 2a0c:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3223 Signature Algorithm: sha256WithRSAEncryption 22:94:1c:6f:b5:fb:7c:b7:ac:b6:f9:a0:f2:bf:29:78:f3:01: f1:28:11:4f:66:49:aa:e5:89:e4:ed:ff:f2:17:c7:ff:04:76: d1:be:2c:12:af:17:74:df:63:fc:38:fd:21:f1:54:00:44:4d: 67:ff:8b:38:d8:17:21:51:af:fa:44:d9:d6:96:5f:46:54:cc: 06:70:3f:74:c2:3b:15:3e:64:65:26:a9:d4:d6:f7:4a:0b:56: 16:e4:ac:f9:68:bf:ca:8e:f2:26:77:21:90:c4:72:7a:c4:9d: e3:35:90:50:73:35:6e:37:bf:61:87:01:1a:e2:f5:fb:c1:7e: 37:b5:c1:44:fe:c5:c6:35:4e:2c:90:5c:8c:03:9b:12:8f:2e: 5d:70:32:13:94:f7:83:41:3d:c8:39:5e:38:e6:fd:25:ea:50: 72:ca:07:67:80:c8:48:14:c6:25:55:41:99:9c:05:b3:68:45: 6b:45:3a:28:a9:47:0a:6c:ae:83:ca:37:4b:20:61:e6:43:81: 48:a6:9a:08:75:34:55:5e:f4:24:e3:36:65:3e:00:8f:98:43: 80:7f:b0:45:45:d3:8a:f7:86:1c:4e:6d:b4:06:b3:f9:56:ef: 50:78:93:a8:d1:c0:07:f9:c5:94:b5:e9:a3:d7:b5:20:c0:b5: 81:f2:af:90 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt7NdbzuW+PBOKhArXXbl6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdiNDRjNGE3OTMxYzY2YTZmZjllOTJkYmIzMmNhNzIzZDRjY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqIBftTtxU3MDrpbSHq/Ywy1pCfL qnM4fwvxbAuuDU7Um33mxKnFa/Jxu1V0XNwjNdfAwVDfqQEdLJULOMrBe6qWgEQd dU/YpP1O5aXfAI4k5qZrgzZkT4UXWVf//52AuU5oSiCNZnB1BksJtsGNaTzHRVhh mm0KfKHkKzHgiiRZlO0ou0WEi6q0oiizpyWf9/kB3WcyeMsGvGA9au/j2FVrwgV4 HpdJ5wOsTV9bKPdUJNpdYcadUrbxGwCudA0zllREa5lcjMH1lGXjYkaObqgP9xNp swFkm5XBNDRI5h7hE+ig5jyAq7UcSSCi1RuX8Xv+NQ/olqqctR8x8KPIwwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFFl7RMSnkxxmpv+ektuzLKcj1Mz3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzk1ZmY4 Zi02NmJjLTRiMTEtOThmMC0wYWIyMWIyZjI3NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvOTVmZjhm LTY2YmMtNGIxMS05OGYwLTBhYjIxYjJmMjc1NC8xL1dYdEV4S2VUSEdhbV81NlMy N01zcHlQVXpQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQHBf4AAwQDXXIoAwQEXXNQAwQCufLMMA0EAgAC MAcDBQMqDPmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgyXMA0GCSqGSIb3DQEB CwUAA4IBAQAilBxvtft8t6y2+aDyvyl48wHxKBFPZkmq5Ynk7f/yF8f/BHbRviwS rxd032P8OP0h8VQARE1n/4s42BchUa/6RNnWll9GVMwGcD90wjsVPmRlJqnU1vdK C1YW5Kz5aL/KjvImdyGQxHJ6xJ3jNZBQczVuN79hhwEa4vX7wX43tcFE/sXGNU4s kFyMA5sSjy5dcDITlPeDQT3IOV445v0l6lByygdngMhIFMYlVUGZnAWzaEVrRToo qUcKbK6DyjdLIGHmQ4FIppoIdTRVXvQk4zZlPgCPmEOAf7BFRdOK94YcTm20BrP5 Vu9QeJOo0cAH+cWUtemj17UgwLWB8q+Q -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client