This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer File: W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer (raw, json) Hash identifier: PaAgz+gAc+sWYdT4SKgDdJiujGDKv36qC7Ap5+Jo0VY= Subject key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B35F0169E6DABF11E63F31FC2CE2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201271 AS: 204937 IP: 158.233.0.0/16 IP: 2001:67c:2af0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:35:f0:16:9e:6d:ab:f1:1e:63:f3:1f:c2:ce:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:c4:05:74:58:ff:32:cd:5d:00:4f:23:c2: a4:7e:5d:e1:34:81:93:0b:2e:c4:32:23:b8:ef:8f: 7e:7c:bc:e0:4d:d6:70:8c:a2:21:59:d5:14:ea:ad: 51:f0:af:d6:92:61:37:47:58:6d:81:d2:70:f0:63: 5b:36:8e:8b:72:51:ce:1a:84:1b:1f:bf:d5:05:8d: 86:ff:aa:70:79:05:5f:ce:98:b2:f6:9b:85:04:f5: e1:af:a3:3e:4d:29:01:fc:8a:7d:56:fd:ba:d3:8f: 43:d7:cf:be:25:41:47:89:01:5c:83:79:d5:7f:19: 55:ec:31:b8:45:8e:67:a6:b4:f0:c3:54:7e:6b:6f: 97:0e:e3:4d:7c:22:60:9a:2c:d3:52:cc:4e:26:7e: 7f:25:0c:25:96:33:30:3f:4f:48:46:75:56:71:e2: ac:30:cb:92:0f:bb:fd:ce:05:6d:53:26:cc:0b:14: 2e:aa:10:fa:5b:b6:69:2e:2b:ce:53:6d:2d:9d:f3: f7:5a:dc:e4:b0:fe:0a:9b:22:d1:d8:22:e1:43:f9: 13:34:e0:02:32:b9:b8:c1:09:eb:7d:d2:d0:fc:c9: 80:9d:07:43:56:fc:29:8f:6d:6f:a1:30:a0:be:ca: 75:e5:c2:ba:2e:39:b7:e4:87:d0:a7:78:50:5b:83: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.0.0/16 IPv6: 2001:67c:2af0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201271 204937 Signature Algorithm: sha256WithRSAEncryption 30:f5:b7:9d:1f:ed:9c:fe:42:fd:62:a3:43:55:41:4c:c5:3e: 17:4b:44:e2:09:27:61:9b:15:e1:11:1d:a2:e3:72:2d:14:ed: 98:5f:f8:10:32:35:4f:12:6a:6b:90:e3:40:0d:bf:b5:59:bb: 54:12:d4:58:87:d0:60:0e:83:ca:fb:30:06:d9:bb:be:90:06: 85:6e:1d:18:37:14:4a:3f:c1:7b:b0:21:89:b2:52:1a:27:e7: 25:5b:4e:51:22:06:52:ea:09:69:1d:cf:5a:4f:5a:96:ba:2c: 17:ec:92:d6:44:9b:31:8d:20:3a:8b:67:d2:50:9e:02:ee:16: ff:17:2c:6f:50:4f:57:12:2c:84:dd:51:fb:d3:e5:52:dd:16: ca:c6:fb:b7:29:a2:e3:dc:87:27:c7:6e:b4:da:27:f0:5e:43: 03:63:99:ba:eb:10:8a:5e:d8:9b:73:58:dd:50:31:cd:21:97: 3d:53:dd:08:f6:a4:5c:b7:f0:96:df:de:40:6c:93:9b:c6:5d: 0c:97:fc:d8:ec:31:9f:e5:87:15:44:65:aa:0b:88:fc:cf:cd: dd:e1:63:a9:74:db:bb:29:37:41:e4:2d:cd:10:c5:57:f1:da: d0:b5:5c:2f:d1:82:3e:e6:90:8a:c1:6b:f3:cb:7f:a7:2b:27: b8:13:ca:57 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9WzXwFp5tq/EeY/Mfws4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmY4MTQzNWVkMTM3ODk4OTVmMzc1ZGMzNGQwNGNlOTFhY2E0NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4rEBXRY/zLNXQBPI8Kkfl3hNIGT Cy7EMiO4749+fLzgTdZwjKIhWdUU6q1R8K/WkmE3R1htgdJw8GNbNo6LclHOGoQb H7/VBY2G/6pweQVfzpiy9puFBPXhr6M+TSkB/Ip9Vv26049D18++JUFHiQFcg3nV fxlV7DG4RY5nprTww1R+a2+XDuNNfCJgmizTUsxOJn5/JQwlljMwP09IRnVWceKs MMuSD7v9zgVtUybMCxQuqhD6W7ZpLivOU20tnfP3WtzksP4KmyLR2CLhQ/kTNOAC Mrm4wQnrfdLQ/MmAnQdDVvwpj21voTCgvsp15cK6Ljm35IfQp3hQW4NC5QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFv4FDXtE3iYlfN13DTQTOkaykdEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzNkNGJj NS1jMzYzLTQxNWYtYjNkYS00OGU0Y2M2YjMzYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvM2Q0YmM1 LWMzNjMtNDE1Zi1iM2RhLTQ4ZTRjYzZiMzNhMy8xL1dfZ1VOZTBUZUppVjgzWGNO TkJNNlJyS1IwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUF BwEHAQH/BCAwHjALBAIAATAFAwMAnukwDwQCAAIwCQMHACABBnwq8DAfBggrBgEF BQcBCAEB/wQQMA6gDDAKAgMDEjcCAwMgiTANBgkqhkiG9w0BAQsFAAOCAQEAMPW3 nR/tnP5C/WKjQ1VBTMU+F0tE4gknYZsV4REdouNyLRTtmF/4EDI1TxJqa5DjQA2/ tVm7VBLUWIfQYA6DyvswBtm7vpAGhW4dGDcUSj/Be7AhibJSGifnJVtOUSIGUuoJ aR3PWk9alrosF+yS1kSbMY0gOotn0lCeAu4W/xcsb1BPVxIshN1R+9PlUt0Wysb7 tymi49yHJ8dutNon8F5DA2OZuusQil7Ym3NY3VAxzSGXPVPdCPakXLfwlt/eQGyT m8ZdDJf82Owxn+WHFURlqguI/M/N3eFjqXTbuyk3QeQtzRDFV/Ha0LVcL9GCPuaQ isFr88t/pysnuBPKVw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:14 2026 by rpki-client