This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer (raw, json) Hash identifier: LocA9qI2BA1Yuue7q/647hs7eLz96n8Ah+9WhOO+r1Y= Subject key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6D64A56CB4D757449C83B1EB4E981 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39312 AS: 201334 AS: 201381 -- 201385 AS: 201387 -- 201388 AS: 201482 AS: 201485 -- 201486 AS: 201490 IP: 77.81.122.0/24 IP: 81.26.156.0/24 IP: 81.26.158.0/23 IP: 84.47.132.0/23 IP: 84.47.146.0/24 IP: 84.47.154.0/23 IP: 84.47.166.0/23 IP: 84.47.179.0 -- 84.47.180.255 IP: 84.47.184.0/23 IP: 84.47.189.0/24 IP: 85.91.105.0/24 IP: 85.91.107.0 -- 85.91.111.255 IP: 85.91.116.0/23 IP: 85.91.123.0 -- 85.91.127.255 IP: 185.89.240.0/22 IP: 188.241.244.0/23 IP: 195.90.110.0/23 IP: 213.208.171.0/24 IP: 2a05:da80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d6:4a:56:cb:4d:75:74:49:c8:3b:1e:b4:e9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:73:17:f8:55:d4:53:70:02:45:44:7e:02: 0b:27:52:03:24:40:c5:02:68:4c:88:36:4f:ae:88: 0d:c5:37:81:16:7d:76:30:b3:91:df:e8:5c:d2:f7: ef:f2:a7:83:84:ef:be:1c:f9:73:74:dd:02:d5:b8: 6b:b1:14:64:3d:99:30:0d:0c:9e:5a:d4:04:3a:88: a0:13:7b:9c:ce:47:5c:b8:75:ad:35:03:66:75:5a: 2f:c1:ad:60:93:76:97:bf:a5:53:2e:37:04:8b:cd: 51:7c:b8:00:56:13:20:dd:7b:84:89:7b:88:42:57: bd:9e:e8:26:c5:d5:69:1a:e9:18:b6:6e:5c:68:89: 27:7f:ef:4d:20:63:7f:92:58:18:c8:52:40:02:44: 9d:1e:9c:87:06:0c:91:85:cc:48:17:b3:31:c5:15: 89:50:3f:d6:b0:57:1a:17:ea:bb:a3:fd:d5:c2:3a: ec:7c:f1:ea:ad:ac:99:82:97:f7:b8:37:5e:e1:db: 5e:2f:66:fb:a5:6f:97:0b:bc:67:38:15:8a:89:53: 0d:4c:ee:cb:99:b8:ce:61:09:78:62:3a:9c:45:7c: ed:5e:d2:42:bf:66:24:2b:7f:38:09:be:69:b6:4b: 34:6f:59:dc:4d:d6:f7:c4:40:70:c3:4a:ba:ab:7b: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.122.0/24 81.26.156.0/24 81.26.158.0/23 84.47.132.0/23 84.47.146.0/24 84.47.154.0/23 84.47.166.0/23 84.47.179.0-84.47.180.255 84.47.184.0/23 84.47.189.0/24 85.91.105.0/24 85.91.107.0-85.91.111.255 85.91.116.0/23 85.91.123.0-85.91.127.255 185.89.240.0/22 188.241.244.0/23 195.90.110.0/23 213.208.171.0/24 IPv6: 2a05:da80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39312 201334 201381-201385 201387-201388 201482 201485-201486 201490 Signature Algorithm: sha256WithRSAEncryption 19:81:3c:72:96:e3:2a:ac:92:93:52:a2:43:2e:cd:ed:19:b2: 38:07:37:dc:6d:8d:c9:71:fe:f8:84:f7:60:c5:f9:bf:75:b5: 31:6c:3f:b3:69:72:2f:49:c2:b9:a5:ff:ba:e2:d0:23:a5:04: 5d:77:3e:15:34:6b:ce:82:68:1c:83:b5:ec:c5:31:2a:60:92: 28:50:9f:df:ba:a1:a9:24:fe:2e:44:e8:4a:a5:78:e4:ce:b5: ca:53:bc:54:60:18:8a:c4:3b:ca:80:06:65:3a:37:25:70:3d: b4:3d:c7:e8:1c:71:77:2e:b1:ab:63:c2:d9:d1:50:d6:6b:cb: eb:53:67:b1:e7:52:91:10:3f:c6:cd:f0:23:63:96:f8:21:bf: b8:2b:7d:95:59:a3:77:58:5b:9b:12:00:b2:8d:45:a8:e5:ed: c6:46:7e:f3:45:05:d1:eb:c1:73:4e:ad:04:64:55:e8:4a:10: 5e:2f:4d:d2:8c:02:35:33:9e:27:64:be:d4:97:9c:1f:41:22: 86:dc:be:fd:13:2f:d3:78:ed:af:bb:11:be:a9:f3:a6:08:97: 13:b8:5c:dc:76:40:1b:69:09:89:ad:4c:e6:0c:48:64:9c:63: 12:5d:47:78:98:bb:95:dd:2b:60:42:98:af:47:6d:ae:4e:c9: c2:98:ac:88 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISAZt+ptZKVstNdXRJyDsetOmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWRkNTQyNzgxODUxYzBiY2U1YTNlYTVjYzM4NzY1MGZmYzgyNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9dzF/hV1FNwAkVEfgILJ1IDJEDF AmhMiDZProgNxTeBFn12MLOR3+hc0vfv8qeDhO++HPlzdN0C1bhrsRRkPZkwDQye WtQEOoigE3uczkdcuHWtNQNmdVovwa1gk3aXv6VTLjcEi81RfLgAVhMg3XuEiXuI Qle9nugmxdVpGukYtm5caIknf+9NIGN/klgYyFJAAkSdHpyHBgyRhcxIF7MxxRWJ UD/WsFcaF+q7o/3VwjrsfPHqrayZgpf3uDde4dteL2b7pW+XC7xnOBWKiVMNTO7L mbjOYQl4YjqcRXztXtJCv2YkK384Cb5ptks0b1ncTdb3xEBww0q6q3sjQwIDAQAB o4IDZTCCA2EwHQYDVR0OBBYEFFndVCeBhRwLzlo+pcw4dlD/yCd+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzc5YzRi YS0zOGUyLTRmNWEtOTU5Zi00N2UwOTM3OTg5YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNzljNGJh LTM4ZTItNGY1YS05NTlmLTQ3ZTA5Mzc5ODlhOC8xL1dkMVVKNEdGSEF2T1dqNmx6 RGgyVVBfSUozNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF BQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQDBABNUXoDBABRGpwDBAFRGp4DBAFUL4QD BABUL5IDBAFUL5oDBAFUL6YwDAMEAFQvswMEAFQvtAMEAVQvuAMEAFQvvQMEAFVb aTAMAwQAVVtrAwQEVVtgAwQBVVt0MAwDBABVW3sDBAdVWwADBAK5WfADBAG88fQD BAHDWm4DBADV0KswDQQCAAIwBwMFAyoF2oAwTQYIKwYBBQUHAQgBAf8EPjA8oDow OAIDAJmQAgMDEnYwCgIDAxKlAgMDEqkwCgIDAxKrAgMDEqwCAwMTCjAKAgMDEw0C AwMTDgIDAxMSMA0GCSqGSIb3DQEBCwUAA4IBAQAZgTxyluMqrJKTUqJDLs3tGbI4 BzfcbY3Jcf74hPdgxfm/dbUxbD+zaXIvScK5pf+64tAjpQRddz4VNGvOgmgcg7Xs xTEqYJIoUJ/fuqGpJP4uROhKpXjkzrXKU7xUYBiKxDvKgAZlOjclcD20PcfoHHF3 LrGrY8LZ0VDWa8vrU2ex51KRED/GzfAjY5b4Ib+4K32VWaN3WFubEgCyjUWo5e3G Rn7zRQXR68FzTq0EZFXoShBeL03SjAI1M54nZL7Ul5wfQSKG3L79Ey/TeO2vuxG+ qfOmCJcTuFzcdkAbaQmJrUzmDEhknGMSXUd4mLuV3StgQpivR22uTsnCmKyI -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:56 2026 by rpki-client