This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer File: WYW9QaWaLUUeYnCDXaFDmf9iuro.cer (raw, json) Hash identifier: hYKFVxA3EkvsWgifgt0TnA+/RIcH860U54LUpXCpvvY= Subject key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1193F3FC8636FA1D4CD8E86F437ADA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43994 IP: 46.19.40.0/21 IP: 46.235.72.0/22 IP: 79.142.48.0/20 IP: 86.54.107.0/24 IP: 89.219.4.0 -- 89.219.19.255 IP: 109.163.192.0/21 IP: 151.236.192.0/21 IP: 185.18.252.0/22 IP: 185.249.172.0/22 IP: 2a01:4d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:93:f3:fc:86:36:fa:1d:4c:d8:e8:6f:43:7a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5985bd41a59a2d451e6270835da14399ff62baba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:eb:59:0e:7b:00:be:c3:b4:5b:76:8e:03: 9f:30:40:61:33:c9:f9:17:23:ef:2e:52:19:ae:e6: ce:d4:6e:93:bd:46:81:ce:bb:c2:b5:c7:10:46:3c: 85:46:1d:10:55:aa:4d:37:04:07:ba:19:d0:81:64: 71:53:51:7a:f7:e9:10:28:9f:32:a1:10:62:49:a3: 9d:63:f6:93:99:74:a6:f8:8e:a1:eb:f8:16:5e:5b: ac:67:1c:2b:bf:6f:f6:1f:42:6f:00:59:e4:8b:05: cc:c4:5f:d7:55:e5:b1:84:37:bd:83:1f:83:35:ad: 09:67:23:64:2a:25:57:58:d1:10:13:fd:4b:2b:fd: ec:e7:78:c2:16:cb:7a:84:bb:23:d9:ab:a7:2f:a8: 55:61:2e:56:dc:ba:b9:39:86:68:f2:bc:26:24:a7: 58:87:33:3e:08:de:39:58:6c:40:a5:d4:d4:ef:57: 52:61:20:84:a7:f6:fb:7e:6d:05:ee:d2:da:9a:95: 8b:fc:88:45:ff:08:24:bf:36:9d:4b:71:04:0f:56: 2a:e7:2e:13:50:9a:6c:eb:01:f2:75:f5:e7:62:f2: e9:f3:8e:b4:41:91:84:9c:69:f6:17:0c:25:2d:61: 5e:8e:72:f5:78:ac:a9:8a:88:3e:69:49:90:cf:5e: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.40.0/21 46.235.72.0/22 79.142.48.0/20 86.54.107.0/24 89.219.4.0-89.219.19.255 109.163.192.0/21 151.236.192.0/21 185.18.252.0/22 185.249.172.0/22 IPv6: 2a01:4d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43994 Signature Algorithm: sha256WithRSAEncryption 4b:ba:98:c7:70:6a:69:9c:0e:93:28:a7:85:e1:68:51:7d:33: 2b:55:fd:f1:4b:ad:1b:77:fe:6d:be:d4:af:af:22:7a:bc:ad: 86:52:43:b0:7a:13:f4:f1:c4:1d:bc:c3:59:e4:34:ec:5d:73: 38:b4:a3:13:a0:a9:8f:f0:76:39:f3:b5:e1:34:b7:e8:c1:5a: 1c:f5:eb:74:39:29:a2:bf:47:b0:27:33:11:70:67:9c:58:77: fc:0d:d1:82:05:25:15:7c:4b:bf:09:70:6a:55:92:25:0c:b9: da:ab:c5:dc:d9:ba:b6:72:bd:51:5a:86:a6:65:3f:7e:c0:3a: 82:aa:42:76:09:1f:0f:15:59:6b:7b:56:83:24:15:83:11:e6: ae:3d:07:34:27:37:cc:98:91:90:40:98:60:b2:6a:32:de:0a: 91:37:1f:a6:b9:a9:e6:2e:ad:fe:e6:d2:94:ca:72:34:0d:ea: 8f:05:1a:1b:c6:62:53:2d:c0:d2:09:9e:a4:a0:a0:8c:84:02: 21:ea:2f:ae:f9:65:32:0f:29:62:fa:7f:1f:a1:2a:ec:ee:22: 94:03:71:0f:5f:bc:25:1f:fc:5c:67:de:6a:c8:e5:d8:1b:28: 89:47:21:c7:f3:08:fe:20:ed:08:4f:72:1f:b8:97:2b:01:42: 8e:7d:c4:29 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt8EZPz/IY2+h1M2OhvQ3raMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg1YmQ0MWE1OWEyZDQ1MWU2MjcwODM1ZGExNDM5OWZmNjJiYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr/rWQ57AL7DtFt2jgOfMEBhM8n5 FyPvLlIZrubO1G6TvUaBzrvCtccQRjyFRh0QVapNNwQHuhnQgWRxU1F69+kQKJ8y oRBiSaOdY/aTmXSm+I6h6/gWXlusZxwrv2/2H0JvAFnkiwXMxF/XVeWxhDe9gx+D Na0JZyNkKiVXWNEQE/1LK/3s53jCFst6hLsj2aunL6hVYS5W3Lq5OYZo8rwmJKdY hzM+CN45WGxApdTU71dSYSCEp/b7fm0F7tLampWL/IhF/wgkvzadS3EED1Yq5y4T UJps6wHydfXnYvLp8460QZGEnGn2FwwlLWFejnL1eKypiog+aUmQz15GsQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFFmFvUGlmi1FHmJwg12hQ5n/Yrq6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2EwNGM0 NS02OTRhLTRjYTEtYjVmYi05M2RjYTE5OWQ4ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTA0YzQ1 LTY5NGEtNGNhMS1iNWZiLTkzZGNhMTk5ZDg4MC8xL1dZVzlRYVdhTFVVZVluQ0RY YUZEbWY5aXVyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+AwQDLhMoAwQCLutIAwQET44wAwQAVjZrMAwDBAJZ 2wQDBAJZ2xADBANto8ADBAOX7MADBAK5EvwDBAK5+awwDQQCAAIwBwMFACoBTUAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKvaMA0GCSqGSIb3DQEBCwUAA4IBAQBL upjHcGppnA6TKKeF4WhRfTMrVf3xS60bd/5tvtSvryJ6vK2GUkOwehP08cQdvMNZ 5DTsXXM4tKMToKmP8HY587XhNLfowVoc9et0OSmiv0ewJzMRcGecWHf8DdGCBSUV fEu/CXBqVZIlDLnaq8Xc2bq2cr1RWoamZT9+wDqCqkJ2CR8PFVlre1aDJBWDEeau PQc0JzfMmJGQQJhgsmoy3gqRNx+muanmLq3+5tKUynI0DeqPBRobxmJTLcDSCZ6k oKCMhAIh6i+u+WUyDyli+n8foSrs7iKUA3EPX7wlH/xcZ95qyOXYGyiJRyHH8wj+ IO0IT3IfuJcrAUKOfcQp -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client